Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: Envgujk+jPNwHUAK5H1mAsfpR932yVewi+25AxIb25U=
Subject key identifier: 83:EB:AC:61:6E:6E:86:0B:08:FB:A5:AA:D0:BA:EC:6C:8A:35:A1:9B
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019891EC6D22D740EC50E95138E0A5377CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1597
Signing time: Sun 10 Aug 2025 03:00:47 +0000
Manifest this update: Sun 10 Aug 2025 03:00:47 +0000
Manifest next update: Mon 11 Aug 2025 03:00:47 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: 7pljuVBzuVlhk8/RTYkQSImgHSQACf9vsOrKmpt24qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:6d:22:d7:40:ec:50:e9:51:38:e0:a5:37:7c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Aug 10 03:00:47 2025 GMT
Not After : Aug 11 03:00:47 2025 GMT
Subject: CN=83ebac616e6e860b08fba5aad0baec6c8a35a19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:5f:aa:4c:c2:05:6b:ff:48:38:42:00:90:
9a:f1:39:ee:b5:03:bc:91:97:ed:b3:23:73:2e:92:
5d:6f:75:c7:2e:ca:6b:92:84:2b:35:e4:d9:72:31:
9a:95:f0:6a:3e:a9:8e:99:08:22:aa:1a:b1:d1:7e:
e0:59:1b:cf:64:11:a3:0d:bf:5e:b7:aa:8e:c8:89:
09:5f:66:f3:0a:f0:33:12:8f:ef:cc:86:da:3b:a1:
82:30:3e:27:ac:82:2d:05:43:5a:82:3d:ae:a0:9c:
7f:1e:56:cf:4b:f1:85:c1:ef:75:ec:6c:45:1e:80:
d3:4a:97:60:55:0d:6f:3e:87:ad:84:d6:ca:41:7b:
44:e0:f2:2c:60:6d:49:22:22:e4:ff:39:68:33:c7:
89:7e:75:7c:19:bf:08:eb:43:0b:ba:c8:83:7d:92:
d1:0b:1b:42:5e:2a:06:a6:4b:62:28:db:4f:15:f3:
1f:61:ab:6a:4d:9c:9e:da:ad:7e:70:6c:ec:9c:f7:
17:5a:fb:69:71:e4:7d:bc:56:ee:74:e1:b4:34:c9:
31:92:99:1f:0a:51:5d:84:ed:53:78:be:0f:34:18:
56:78:49:1d:3b:b4:b5:dd:de:96:ed:5a:5a:d8:8a:
98:f9:c4:0b:45:f5:ff:e4:83:54:c7:f0:6b:66:54:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:AC:61:6E:6E:86:0B:08:FB:A5:AA:D0:BA:EC:6C:8A:35:A1:9B
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:84:1f:8a:aa:94:a3:45:29:4e:03:c1:80:dc:a9:9f:27:0a:
95:64:15:8c:13:14:94:54:c1:c5:75:ec:27:59:37:6c:40:3a:
b5:0b:95:8c:03:6a:41:b0:1e:c2:1d:f3:12:8d:12:40:49:33:
46:c8:7e:6b:7a:94:90:54:c5:73:e4:f1:ae:5c:2d:f2:bf:33:
30:c9:b8:c4:db:88:73:23:49:a7:7d:70:71:2a:4b:33:ae:b9:
ca:a4:3e:6e:ce:d3:50:0f:ff:d8:1a:03:85:c0:39:42:46:ec:
d5:f3:81:48:65:f1:02:05:98:3d:81:66:30:04:85:38:bf:44:
f3:c6:b1:8c:34:f9:49:34:a8:4d:b3:62:94:c7:67:69:63:3d:
2c:39:04:e2:f9:b8:34:47:0a:6e:1e:f9:49:8b:7a:bd:00:e1:
a6:15:08:c1:df:86:7a:98:1e:b8:2c:37:31:33:6e:50:61:bf:
35:bc:a4:f3:fc:6f:be:23:c5:1f:7f:99:b8:65:a5:19:d5:cc:
52:8a:e8:4a:44:8d:ba:25:58:5a:3c:b1:57:97:43:d1:3c:d2:
94:a5:20:5e:da:fa:59:3f:54:ca:de:07:87:23:e1:27:11:0c:
4f:17:fb:f4:45:60:63:9c:2b:74:21:6d:8c:8d:60:78:97:1d:
93:db:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:32:47 2025 by rpki-client