Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: FbZxQW2hLXWxpTSFwRyG/O9Gf++Pb8CcW1NHdwSaZhg=
Subject key identifier: D9:0D:E4:6D:C3:E4:F9:4A:67:DD:6F:0A:D4:82:2F:9C:CE:5E:FA:EF
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019883571BC15052351039997AE2BA472627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 07:03:00 +0000
Manifest this update: Thu 07 Aug 2025 07:03:00 +0000
Manifest next update: Fri 08 Aug 2025 07:03:00 +0000
Files and hashes: 1: tnQ5odqGfmjwtl_VRpWmuxnJVZc.roa (hash: jWqwIWRjWImreknKrwhsqWkckPsMaq433dW/u+UVzTY=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: qCrNsbxO+5wvMn8k42K0bcjtU1ouiODgDYRTsl0Uy/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:1b:c1:50:52:35:10:39:99:7a:e2:ba:47:26:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Aug 7 07:03:00 2025 GMT
Not After : Aug 8 07:03:00 2025 GMT
Subject: CN=d90de46dc3e4f94a67dd6f0ad4822f9cce5efaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:0a:29:5a:35:e7:d8:6f:eb:e0:61:c1:e3:
d0:38:64:8b:c0:bf:d7:b3:99:5b:6e:05:ae:fa:17:
58:69:6d:90:4f:97:7d:e5:56:77:e6:41:1c:ff:7a:
08:89:f5:08:d9:4c:1e:a9:9f:59:82:2f:ea:46:36:
16:02:a2:7c:1e:dc:80:9f:59:2a:d1:6a:bb:0a:f7:
4d:92:54:f1:85:40:f5:22:6e:2d:92:cf:f9:ce:d8:
9a:f4:da:c1:3e:13:fc:c4:c5:3e:a0:72:b3:0d:7c:
c3:fc:68:0e:47:78:78:50:ca:24:39:b4:92:49:c3:
a6:23:f1:d4:eb:64:f8:30:d9:7b:b5:79:1f:5e:df:
af:8d:48:bb:bd:e1:17:d6:74:64:45:0a:b6:7e:1b:
4d:c7:6d:dc:0b:6f:a9:06:3f:73:53:de:85:96:f9:
83:fc:f1:f1:73:a3:e0:d2:c3:78:ff:67:c3:7c:98:
87:8e:0f:4f:fb:ae:83:b9:ac:c5:da:96:87:45:ad:
10:3f:58:61:a3:51:b3:fe:46:68:c2:1f:ea:40:80:
22:5a:57:95:7d:ae:a1:ea:d2:70:a4:80:2c:d8:10:
39:09:18:f9:78:bd:ae:5b:b4:18:ef:49:14:ce:16:
02:a6:f8:d4:8a:58:69:0c:f7:36:4a:36:a5:ea:10:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:E4:6D:C3:E4:F9:4A:67:DD:6F:0A:D4:82:2F:9C:CE:5E:FA:EF
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9d:dd:5b:89:38:a4:ff:43:e9:51:fd:7f:99:bb:21:64:0d:
fe:6e:b6:b0:b6:eb:eb:8f:ed:f8:ba:3c:1d:97:f9:7f:38:80:
9c:18:fb:6d:ec:6e:d9:e6:78:91:05:60:54:c3:ea:c9:28:5f:
f0:d9:9f:2d:a2:1d:02:2c:35:17:aa:c6:08:78:4a:da:4c:fa:
c0:38:19:06:36:d4:4e:62:4c:df:5e:2d:18:81:4b:b2:43:40:
90:3a:ef:04:01:96:1b:73:b8:70:50:f3:1f:69:98:68:91:61:
97:49:99:a6:2c:f3:9b:9a:d9:1b:b4:02:2d:8d:bf:03:ee:99:
2c:25:74:04:0f:ad:74:a7:d2:21:92:c2:c9:93:4e:0d:80:4f:
79:5a:be:47:dc:17:b2:4d:69:17:aa:ba:c6:5d:0e:14:5c:56:
b8:04:d9:93:f8:6e:b4:38:e2:b9:1a:24:18:be:21:e7:f3:63:
e7:1a:b2:83:62:e0:44:e4:f3:8e:90:91:55:8f:63:34:01:a4:
84:1b:57:4d:02:23:a8:ce:87:4c:5b:3f:0e:76:e6:95:7d:55:
0b:65:ea:96:fe:52:04:cc:1b:5f:c4:0b:0e:7e:bf:e9:83:45:
75:68:7e:fc:9e:d1:73:f1:f8:d0:1b:a8:54:97:c6:9f:c9:c0:
4c:ab:88:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:31 2025 by rpki-client