Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: aJfWWQxglWxpPQxGxvSKSS65H9+FIypnfsFL1hgKqSU=
Subject key identifier: 80:3A:67:DB:39:16:5B:77:15:D0:07:BE:7D:F9:8A:65:E4:D1:C1:0D
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 01987DF7BD93AFC30AEAE817190BB766FF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 04FC
Signing time: Wed 06 Aug 2025 06:00:44 +0000
Manifest this update: Wed 06 Aug 2025 06:00:44 +0000
Manifest next update: Thu 07 Aug 2025 06:00:44 +0000
Files and hashes: 1: tOD7ZPqas8UpTT4bdLzx0MJD5rk.roa (hash: k/eXxf7557SFB+l+Q/mWhChu1kZsTZ07A3b0mG1jAsA=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: 8PswTtWqq+yhrKnLP6fDN1HjJcBfYjEP0glOEBwijx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:bd:93:af:c3:0a:ea:e8:17:19:0b:b7:66:ff:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Aug 6 06:00:44 2025 GMT
Not After : Aug 7 06:00:44 2025 GMT
Subject: CN=803a67db39165b7715d007be7df98a65e4d1c10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:dc:f2:df:96:74:6a:c6:85:a4:c1:9e:a9:
ef:29:16:53:a1:dc:a4:bd:88:77:d9:93:fc:38:af:
4b:c5:d5:61:2f:f3:3d:5b:bd:ca:73:b8:e0:cd:bd:
66:be:cf:35:72:4d:b0:2d:44:4d:05:76:cb:4f:a2:
2e:ae:cb:5a:03:1e:ca:4f:3d:08:f7:38:91:b5:ff:
ad:18:80:21:b0:9e:0d:08:40:d8:98:74:28:e5:6a:
8b:46:9a:d4:24:84:f9:3d:8d:11:56:d4:47:50:e1:
53:69:8e:c1:bf:8a:c0:50:27:3f:a0:a2:52:3a:9d:
d4:a4:16:8c:b3:93:c1:2b:af:a2:dd:3e:60:aa:7f:
0c:eb:72:10:33:1e:02:ce:c5:a4:62:f8:72:69:e2:
22:6e:91:b4:da:2d:62:87:3f:a3:5d:c2:53:9c:43:
6f:04:b1:13:4a:2f:da:39:13:36:fe:e6:5a:23:bd:
c4:e8:29:ea:b2:67:6f:78:6e:5c:35:a7:bc:1a:f3:
c6:ec:7a:c5:93:2b:74:0f:c9:18:b5:87:20:69:b6:
0f:1e:dc:bf:3a:03:07:e6:33:2c:f1:30:1b:df:bd:
b6:ed:2f:26:2c:25:38:dd:a0:d7:e5:59:2f:26:40:
78:d7:a7:2b:db:a2:6c:d5:d7:13:bf:15:00:49:f4:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3A:67:DB:39:16:5B:77:15:D0:07:BE:7D:F9:8A:65:E4:D1:C1:0D
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:76:43:7a:57:8a:6b:78:7a:d9:71:27:1b:52:04:41:36:
ae:14:8f:ec:57:7b:25:d4:13:65:35:08:dc:25:a0:3c:5d:6b:
5d:d7:20:cc:41:3a:e5:11:5a:88:4e:71:b9:eb:a8:94:a7:b8:
f9:82:4f:47:aa:d0:91:79:d1:bd:cb:f3:f0:24:c5:bc:67:b4:
53:db:6c:6d:cb:d7:2f:1d:80:8e:bb:76:5f:93:f2:71:fc:56:
2e:77:13:ca:ce:96:6d:68:1f:24:82:63:2c:f7:a1:f2:42:5b:
56:e6:1c:18:b2:c7:8d:51:09:35:d7:95:12:d9:8d:2a:96:f7:
d3:d5:f3:2a:3e:42:a1:08:7a:5d:c7:a9:d4:db:52:1f:8b:fe:
80:b7:a4:42:45:f2:d4:b0:0a:e9:af:3a:d6:40:2f:44:c3:76:
79:5a:f6:c9:bc:a4:a3:75:04:03:4e:31:94:1b:70:48:57:6c:
13:b1:a1:2a:4b:51:46:26:14:e0:ad:ab:46:5d:c7:b8:4f:23:
e9:39:aa:d6:2d:80:06:fb:47:f9:b7:18:78:ac:1b:91:1b:ab:
c2:63:29:fe:fc:df:6a:f8:36:a5:bb:4c:83:05:5d:b5:f8:ef:
35:0b:63:eb:28:00:c0:18:0f:96:e2:65:aa:3e:2f:bf:ce:5d:
8e:51:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:13 2025 by rpki-client