Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: XnoKnKtZkrib7XEAyCkdOqVul6vet4puCGH1v4wN/ic=
Subject key identifier: EC:80:A6:E4:07:38:12:82:81:D8:5B:C4:A2:D6:63:41:97:49:AA:C6
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 0198891FFC3A9DB6215755DC619B9A725837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 03D2
Signing time: Fri 08 Aug 2025 10:00:31 +0000
Manifest this update: Fri 08 Aug 2025 10:00:31 +0000
Manifest next update: Sat 09 Aug 2025 10:00:31 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: hGdyvkcGbtv/QhWLs0hZfcyXLSe1cimDx/veJ0MjcFk=)
2: Zalmb79lgnJ8ZqrgJMNHmIB0_a8.roa (hash: qT5QBRK21+1uxjdCx9gW03qYws/IDIrgYu8jrzg9fD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:1f:fc:3a:9d:b6:21:57:55:dc:61:9b:9a:72:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Aug 8 10:00:31 2025 GMT
Not After : Aug 9 10:00:31 2025 GMT
Subject: CN=ec80a6e40738128281d85bc4a2d663419749aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:13:01:9c:6d:76:8c:5e:49:85:86:78:a0:
96:ee:22:ad:63:17:73:0e:f0:15:d2:f4:df:56:24:
aa:d3:39:63:fb:52:8d:45:29:a3:29:8e:bc:74:da:
fe:7e:59:eb:f5:8f:f2:78:ea:06:76:4e:5f:96:b3:
8a:02:1d:5a:b4:69:e8:98:81:2a:3d:83:f0:ed:7e:
12:c3:66:82:b8:b9:62:10:fe:d1:23:a0:35:06:e9:
5a:83:cb:8c:e4:2d:b2:bf:b2:1a:27:33:b7:a5:79:
98:07:df:ff:27:7c:ab:02:28:36:21:6c:7c:0d:a2:
a1:a4:f7:6e:4c:a2:32:0b:ee:92:31:f9:9e:48:01:
f0:39:d2:7b:be:38:23:8b:b8:1a:54:9f:90:49:83:
6d:32:db:25:b9:5d:bc:d3:3d:2f:7f:5c:44:f0:6a:
01:25:57:b2:f4:3f:cf:cc:64:85:93:3b:8a:48:d7:
4c:c6:94:4e:c4:b9:aa:a9:3b:61:33:46:23:7f:c7:
ac:ea:90:59:d4:7f:bd:b9:46:15:ac:31:eb:6f:03:
4a:56:2b:30:d6:e2:e9:82:4d:51:dd:76:c9:ae:dc:
0c:8e:d8:75:56:29:37:67:1a:1f:a3:d5:aa:f6:c5:
32:0d:b6:74:5c:23:ea:a5:25:3b:ab:0a:03:ca:6c:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:80:A6:E4:07:38:12:82:81:D8:5B:C4:A2:D6:63:41:97:49:AA:C6
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:00:79:56:fb:c7:1e:86:4a:68:d4:83:dc:3c:69:fa:59:5d:
7b:03:7e:8b:95:f4:d6:95:6f:a4:d0:9c:7c:78:b1:7b:da:8e:
99:5d:26:f4:b5:64:78:8c:af:9a:7b:2c:b4:56:7a:a1:88:00:
7f:bf:b8:1c:86:7a:5b:ac:4d:f6:04:76:f6:1f:d4:da:51:ce:
90:af:de:f1:b1:bf:b4:d0:bc:ee:26:26:fa:d6:61:e1:f4:e2:
d3:7d:4f:ff:0e:cb:69:ee:ab:92:7f:63:50:06:44:fd:0c:6e:
e0:8e:f8:a3:13:02:db:30:5d:cf:13:9e:8a:1c:5d:40:9f:4e:
58:f8:62:d9:21:a2:cb:51:1d:2f:51:c1:80:41:8f:cf:56:94:
64:0f:1f:e4:37:f2:da:3b:c2:fc:d0:e7:32:ff:00:b7:5e:fd:
81:e6:26:57:5b:65:f6:02:6c:1d:04:a2:e6:e6:03:55:21:3f:
c6:34:df:e4:85:29:59:11:e0:f3:8e:3a:4f:2d:8c:d2:da:dd:
be:ad:c4:a7:23:97:ad:eb:c4:4a:64:ca:02:87:24:f6:fe:0c:
b8:3c:fa:d4:f8:c1:87:2d:a4:9d:46:16:49:98:81:29:ce:72:
1b:c5:9f:19:a9:53:b1:a2:bc:70:37:86:b7:c8:65:02:bc:93:
6e:a3:78:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:47 2025 by rpki-client