Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: YxnnrFxPYMyWZ4O139AAo6Js54h7G5+GLncMklM6+AY=
Subject key identifier: 9F:CA:59:B2:EE:45:21:73:94:7C:EE:0F:DA:41:F6:67:5A:0D:2D:27
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 0198A15F52E39F8F86D924E704363584CC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 15BF
Signing time: Wed 13 Aug 2025 03:00:35 +0000
Manifest this update: Wed 13 Aug 2025 03:00:35 +0000
Manifest next update: Thu 14 Aug 2025 03:00:35 +0000
Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=)
2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: /R4RRl6WoGbKEitieyoFJFPvl9MC1YzH9j1RWQ1M41k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:52:e3:9f:8f:86:d9:24:e7:04:36:35:84:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Aug 13 03:00:35 2025 GMT
Not After : Aug 14 03:00:35 2025 GMT
Subject: CN=9fca59b2ee452173947cee0fda41f6675a0d2d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:78:2a:a3:62:c3:9e:f8:fb:23:b3:c4:e9:
16:ff:5e:a9:ff:d1:83:a6:d1:b5:a4:30:2c:42:6e:
ce:36:a5:e7:17:2d:95:54:d1:c5:9f:f4:fe:e9:62:
fb:4a:d8:20:78:3f:b3:a1:85:a4:55:14:70:67:e2:
83:ba:84:6a:27:11:c8:c3:fa:28:9b:bc:ff:46:a6:
9a:ed:0d:df:57:7b:a2:f8:87:30:79:0f:90:99:97:
36:8b:9f:1f:32:ed:ad:c5:07:e0:b8:54:46:57:a0:
09:98:fa:b6:96:01:17:1a:fe:fb:99:51:48:90:fe:
aa:6d:b7:60:11:e5:d5:12:71:01:62:a8:71:e6:5d:
2b:b1:78:84:6a:74:98:62:7f:3b:6c:e1:82:aa:f1:
53:8e:7b:64:4f:de:ce:7c:91:a9:27:33:21:67:1f:
71:83:26:5a:00:56:01:ef:42:5c:08:d0:0f:ec:93:
49:c3:6b:d5:0c:5c:da:06:7b:08:db:60:01:b0:10:
99:de:6b:18:f3:f4:74:98:d5:98:89:82:22:d0:6d:
ed:29:a2:e8:ff:11:7b:90:77:a9:84:e8:67:da:5e:
3d:b2:57:66:ec:00:1d:a2:7a:dc:c9:c3:f7:e4:c0:
66:af:ed:62:e7:5c:aa:e7:26:59:43:ea:25:38:8d:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CA:59:B2:EE:45:21:73:94:7C:EE:0F:DA:41:F6:67:5A:0D:2D:27
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:57:5d:a3:b7:2a:76:48:c4:ac:df:a4:af:25:d3:ee:b4:f3:
55:d9:46:1d:ad:f2:c3:fd:80:44:eb:da:de:bc:c8:65:54:9c:
0d:3c:df:7b:d7:f2:28:4a:f8:d8:d4:4b:82:37:ee:10:8d:fb:
f2:2c:4e:21:71:95:5f:f0:87:11:7b:07:7c:8f:dc:aa:37:33:
08:a8:0f:a1:38:41:11:34:25:c6:49:11:f6:32:53:3d:4b:58:
12:98:bf:03:56:5c:92:34:4d:15:5d:8d:54:f0:98:c4:f6:60:
9f:d7:b1:0d:1f:2f:5b:29:9b:02:eb:8a:17:59:ca:a3:0c:be:
28:55:f6:8d:c9:42:ed:06:df:a4:29:53:b4:c6:0a:bc:1a:fe:
0c:dd:e5:44:1a:ff:0c:a3:f7:bc:3d:39:83:7e:23:45:48:db:
36:fc:fb:df:fb:23:08:89:5d:7c:74:2e:3b:4d:77:fb:d2:63:
7e:48:63:72:5f:79:7a:dd:03:b6:19:76:73:03:bb:23:e0:b9:
b6:2f:38:ff:e0:bd:69:26:20:4e:65:a7:8e:e7:7c:56:83:93:
ab:0e:2f:69:3c:dc:cc:3c:76:7d:f1:a7:92:1d:74:08:f0:21:
fa:19:ef:ca:49:f7:28:af:15:2d:d3:2e:11:f1:a5:86:c6:3b:
3b:c3:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:57:40 2025 by rpki-client