Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: LcbRRP1mm5M+oActNxnuOLzLY+bMLSQTJJHvBu6NjMs=
Subject key identifier: D5:F5:B4:5E:E2:AB:0E:B3:E8:9B:E3:E4:34:F6:A8:B2:99:60:D4:11
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0198A12871004F237BC6D3AF8A2C87171E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 15B1
Signing time: Wed 13 Aug 2025 02:00:38 +0000
Manifest this update: Wed 13 Aug 2025 02:00:38 +0000
Manifest next update: Thu 14 Aug 2025 02:00:38 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: 6xtPatN74tkwHE97lBRdnlCeeSa1eL4TXYMm3ZL3bas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:71:00:4f:23:7b:c6:d3:af:8a:2c:87:17:1e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Aug 13 02:00:38 2025 GMT
Not After : Aug 14 02:00:38 2025 GMT
Subject: CN=d5f5b45ee2ab0eb3e89be3e434f6a8b29960d411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:db:16:50:16:ca:5b:17:29:75:b6:5a:54:
eb:f6:02:dd:c5:a2:94:8d:64:c9:47:67:84:93:6e:
77:2c:d8:53:33:4d:81:4a:60:ed:ec:be:df:c7:57:
a0:63:3d:50:08:5d:51:db:01:20:20:fd:d3:32:ba:
9f:d6:d4:8d:d1:a3:c0:1e:52:2a:39:12:e4:9b:51:
de:9a:6e:e2:92:ea:0a:96:6b:7b:35:92:66:bf:b7:
1f:74:40:8b:13:43:86:5b:1f:57:6b:f1:85:62:b1:
5b:5e:9a:ca:cf:54:c7:a9:42:b9:35:92:11:31:a6:
d5:dc:91:19:ff:b1:d4:a7:76:1c:5e:a6:6e:d2:e0:
1e:f2:91:a2:1a:1c:14:1a:69:bd:eb:51:96:8e:c8:
27:5a:a4:3e:ab:83:e2:1d:b0:a7:22:e8:6c:ba:48:
de:9c:d2:9f:fb:56:0a:1c:1d:ca:d1:ae:1b:fc:9b:
d2:50:06:95:58:83:d6:5f:01:5f:ac:12:2f:8d:e0:
17:dd:1a:e7:64:11:71:b1:61:7b:44:6a:42:a4:89:
f0:91:6a:4c:55:57:f5:7a:be:f7:51:ea:57:4b:6d:
fe:53:02:33:06:e5:d9:59:43:99:90:c2:9c:9b:12:
61:bb:7f:03:66:ba:43:ea:f2:fb:62:6f:af:ef:18:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:B4:5E:E2:AB:0E:B3:E8:9B:E3:E4:34:F6:A8:B2:99:60:D4:11
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:80:5a:65:d0:61:08:ef:21:db:87:8f:0e:6f:9a:59:b2:b3:
3e:82:fc:f5:7e:7c:bf:a6:a3:d7:92:da:10:75:7f:15:6e:64:
fc:00:d3:32:f6:20:79:8e:8b:5b:12:74:6e:cf:d3:7b:42:0c:
b0:74:b4:c1:2c:13:da:c0:50:93:f4:b7:08:0b:24:02:65:bd:
7a:07:ea:e0:4f:6a:66:a4:3b:c0:48:b7:9a:bc:c8:4b:b6:70:
0d:e1:f2:95:4a:cf:9e:cd:08:cb:fe:69:8b:5c:e5:1d:0b:63:
fb:90:3e:11:69:e8:09:d3:5a:35:46:55:e7:65:2f:96:58:0f:
95:ac:ff:3a:f2:fa:39:4d:a9:5a:11:29:7c:17:66:5d:b5:e9:
b2:a1:21:38:6b:cc:48:6d:cc:7f:6e:b1:8f:7c:51:1e:5c:ba:
16:74:f6:e2:47:31:0f:9d:a8:45:5f:7e:3a:34:ac:3f:36:3f:
b9:30:e6:08:c6:af:c3:c3:33:5d:de:50:48:12:16:80:11:8a:
c5:77:f4:7a:f3:8c:32:7c:af:02:8d:92:74:36:75:49:ff:43:
f8:4b:c7:e4:22:1d:62:07:c5:05:8b:ef:2c:08:8a:ea:a5:34:
a8:c2:c0:17:31:76:84:bb:a6:b1:e0:f3:4a:25:b3:b8:73:18:
ff:a0:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:36 2025 by rpki-client