Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: /DHSOmsJehhgv/+0CNwNFNUm5cyqJP0GsRJla/EjzaM=
Subject key identifier: 6D:69:15:51:9E:5B:BB:A8:7E:63:C8:0B:92:CC:DF:4B:60:39:7D:BE
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 019892C940970AAC48D490D42B03A42A4229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 0204
Signing time: Sun 10 Aug 2025 07:01:59 +0000
Manifest this update: Sun 10 Aug 2025 07:01:59 +0000
Manifest next update: Mon 11 Aug 2025 07:01:59 +0000
Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=)
2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: cLQBmCULuz0VPPlLFsOyRCtcjeTXzX6tlRu8p7NAdSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:40:97:0a:ac:48:d4:90:d4:2b:03:a4:2a:42:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: Aug 10 07:01:59 2025 GMT
Not After : Aug 11 07:01:59 2025 GMT
Subject: CN=6d6915519e5bbba87e63c80b92ccdf4b60397dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ef:4a:d4:48:cd:19:52:20:be:6c:6b:db:ee:
3f:cf:da:d4:02:9a:52:df:93:24:22:40:b4:93:95:
4a:57:e0:32:c3:90:7e:cf:cf:3d:f5:4c:45:24:f1:
a5:9a:c1:23:c8:b8:24:09:b8:6d:29:9e:21:fc:ad:
bd:00:d8:9d:96:e2:ba:12:14:fa:2c:4a:f0:f8:4e:
60:5c:b6:ba:f7:ea:b0:bf:dd:5d:14:9e:7b:40:b7:
bf:91:04:5c:a6:40:e2:5d:8a:31:e5:4e:1a:67:8b:
c5:4a:3d:ec:ad:ce:31:3e:b0:d6:dc:0a:ed:8f:44:
bb:a3:c5:5c:63:f0:1b:58:99:41:0b:8e:3c:f8:2b:
95:28:d3:14:9f:c4:04:1a:95:df:c5:67:8c:32:e9:
39:27:3c:56:1e:03:38:47:ff:fb:9e:6c:9c:f1:84:
c0:3e:e3:cf:a3:14:68:2a:47:72:be:d9:d5:b1:4c:
86:33:81:9e:4e:80:0d:c9:7d:f3:24:15:c3:d5:02:
ee:f5:65:51:7b:15:a5:47:11:9c:4e:ac:12:5e:50:
a5:ca:48:96:ea:ca:d3:d0:35:8f:92:71:31:8b:12:
19:72:03:84:a8:7b:66:bf:8c:1a:89:90:8b:7f:b9:
ae:15:f4:b3:65:b4:0e:1b:24:17:95:53:53:50:64:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:69:15:51:9E:5B:BB:A8:7E:63:C8:0B:92:CC:DF:4B:60:39:7D:BE
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:8f:88:cf:94:46:7e:c2:a2:5c:d6:47:3c:b8:00:c7:f0:
93:2f:fd:25:40:fa:f6:ca:1b:29:e2:cb:c6:55:8a:5f:75:61:
42:da:07:3b:de:ef:96:2f:db:74:af:96:49:43:dd:5d:29:3b:
7a:ea:a5:c7:49:97:25:e2:1f:72:8d:fa:0b:f1:4c:0d:69:29:
64:3a:c3:f3:87:e9:80:ea:e4:77:84:66:e1:7f:8b:5f:d8:e9:
ea:8c:f4:ff:8c:43:fd:bf:53:af:ed:d5:e5:a9:bc:44:a5:f0:
f7:e4:05:a8:6f:81:f0:1f:db:1f:19:2f:e8:82:a0:53:8d:a0:
71:7d:cd:38:a8:bb:4e:4d:9f:f0:f1:a3:c8:8d:13:bd:ad:0d:
f6:09:6a:86:04:97:5c:d6:0a:46:79:91:bf:e3:cc:04:a9:f9:
ff:50:0a:7b:12:cf:5a:1c:9e:a0:2d:0c:77:6d:65:a4:06:17:
a6:c6:d2:3c:8e:a0:c0:6f:b9:3e:20:29:4c:b9:bd:e4:34:27:
41:38:ed:9e:6f:60:59:87:41:f7:eb:c1:bc:74:31:62:36:74:
90:97:32:9f:62:ca:aa:fd:7c:39:bf:3c:37:31:28:01:57:b5:
e3:27:08:45:32:61:1b:18:d2:fa:3c:ce:7a:e8:79:0d:cd:59:
ed:25:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:04:26 2025 by rpki-client