Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: 6soiHh7aK0GkSyyLQsos0frXjB3WWMGEuXXg+7h1ZRM=
Subject key identifier: 07:14:50:7B:E7:AF:C9:21:5B:52:91:96:06:79:89:DF:F7:A5:BB:DD
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 019894B7B1890C9531BCD44FF61C6D1884DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 0EE5
Signing time: Sun 10 Aug 2025 16:02:03 +0000
Manifest this update: Sun 10 Aug 2025 16:02:03 +0000
Manifest next update: Mon 11 Aug 2025 16:02:03 +0000
Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: QzDOhTFUd5f86fc27j9dMPn6p5+y5PoRkuIQbtIZs1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:b1:89:0c:95:31:bc:d4:4f:f6:1c:6d:18:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Aug 10 16:02:03 2025 GMT
Not After : Aug 11 16:02:03 2025 GMT
Subject: CN=0714507be7afc9215b529196067989dff7a5bbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:9d:57:97:93:7f:5a:04:f7:5e:65:26:87:
7b:63:fc:76:bd:71:a2:2e:a9:05:17:e6:ca:71:a8:
3c:92:53:78:2d:e6:44:6c:9c:06:99:09:15:24:05:
cb:4d:70:8a:71:0c:d5:1e:e9:74:da:a0:0b:03:c4:
50:4a:31:93:4f:6b:cb:b4:2e:66:f0:d4:84:82:48:
3c:3f:a8:ef:e7:fb:eb:cc:53:59:4a:e2:e3:b1:4e:
b1:a2:83:20:e0:55:63:6e:7e:a6:03:49:d0:60:3d:
27:4d:e6:36:83:c5:ce:9f:1a:8c:7b:f9:a4:6a:68:
95:58:89:f6:f6:67:bb:5e:48:c4:b5:3d:cb:02:3e:
38:a3:74:0c:13:4f:ea:3e:43:51:11:d4:a7:e8:02:
90:a0:f8:07:f2:cd:ae:26:c9:32:d9:2f:2f:fd:46:
28:0d:2a:35:2a:73:b4:e2:a5:12:26:fb:2f:32:15:
8a:df:84:6b:1f:7f:4f:50:52:81:30:22:26:09:d4:
16:e0:49:f7:05:06:98:1a:d2:87:53:eb:76:4f:86:
e0:9e:8c:fd:1d:cb:c6:04:59:df:a0:ac:45:36:ad:
6d:01:57:6a:f7:e2:33:a5:24:41:23:55:ff:d2:92:
94:cf:f1:f9:12:3e:d2:aa:31:b3:bf:00:bf:e4:85:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:50:7B:E7:AF:C9:21:5B:52:91:96:06:79:89:DF:F7:A5:BB:DD
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:79:22:8f:da:d8:6c:93:3d:d0:e0:95:20:70:18:81:f9:6f:
fe:5a:1b:44:c9:3d:95:96:d7:55:30:1c:54:b5:77:f2:8c:4d:
90:f5:c0:9e:db:10:53:67:35:f6:83:27:a2:9c:dc:5e:57:28:
39:1e:1c:9b:04:9b:1d:a1:9a:f3:c9:40:82:11:af:f2:ed:52:
4a:87:09:00:14:1f:02:4a:8d:65:e2:9c:59:a9:88:5a:20:e1:
6b:c0:9f:e7:41:57:36:cd:07:66:b2:85:c0:bd:97:af:82:0a:
e3:5a:13:c5:cf:fa:21:9f:29:4b:8a:10:f2:6f:9a:1a:fa:1a:
23:7f:e8:3b:2f:e6:bf:5d:ac:8e:a9:12:2a:94:73:88:2b:c8:
36:15:ba:37:5e:dd:38:19:64:e3:5f:e3:40:48:87:e4:ce:e4:
16:b3:c7:8b:ac:05:47:3b:2f:c9:26:bf:f5:d5:9a:92:02:64:
64:13:f5:3d:07:67:e0:d4:f0:3a:4f:14:de:d0:5e:35:87:5a:
b2:68:98:28:f2:75:9e:cc:92:92:cd:ad:19:ae:64:a8:78:98:
00:b7:67:6b:9c:32:aa:10:fd:7b:81:13:87:fc:6e:57:59:2d:
af:52:ae:d3:10:74:1b:2e:45:94:13:68:42:8a:7e:90:01:8d:
b7:c8:a0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:06 2025 by rpki-client