Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: Bc+vvXriRpIp/HhzHF3dtPIlW0YJWNfJl6WUZUHuBJQ=
Subject key identifier: 2A:A0:BA:76:2B:90:12:14:94:FF:32:4A:89:8B:E7:02:34:24:9A:D6
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 019873E312A46A71BE98301AB7DFFF089227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 01FC
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: pFQcsjglcmeceF6I9IH61DcYJsZPLcZwdk1Pu4rJqFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:12:a4:6a:71:be:98:30:1a:b7:df:ff:08:92:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=2aa0ba762b90121494ff324a898be70234249ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:84:2a:a8:2b:f5:5d:82:d1:1e:da:6c:8f:
d8:12:6e:4a:bc:35:95:4f:61:fc:fd:b0:cb:95:8b:
07:d3:fb:c7:78:1d:2f:2f:00:36:56:9a:e2:c8:52:
0e:b6:60:6b:86:61:b4:4d:ab:f5:60:7c:b0:56:ff:
e6:fc:7f:c0:64:40:37:48:6d:ab:78:9a:04:42:f3:
a5:a4:b0:1d:01:8e:b6:59:27:bc:a1:b1:bd:00:83:
ed:d6:b6:38:ef:45:24:89:7e:14:74:0e:2f:b2:7a:
14:db:f8:04:0e:f4:01:91:e4:48:f0:49:cf:f8:75:
3f:ac:90:8c:10:1a:c8:30:52:dd:7e:76:8c:5f:f7:
02:89:fd:ec:f4:32:5d:20:9f:e8:89:41:cb:0e:4a:
52:17:58:36:e9:e0:2c:29:03:09:5c:9b:f0:c0:d9:
42:28:20:d1:b9:1c:37:19:2e:63:58:27:f1:7a:3c:
df:40:d3:c0:cf:29:93:35:1f:a3:4f:b9:e9:b5:ea:
ff:c5:ae:47:ad:66:eb:5a:ea:27:57:8d:a6:93:86:
1e:96:6f:ce:67:d2:27:28:8d:6a:50:04:46:c8:9c:
80:07:41:90:ea:e3:b8:c2:eb:13:62:b3:61:4d:ae:
22:11:3e:8f:b8:8f:ec:5d:31:59:e8:5c:f9:62:8b:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:BA:76:2B:90:12:14:94:FF:32:4A:89:8B:E7:02:34:24:9A:D6
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:07:34:f8:e4:75:70:be:c1:d9:e2:f8:4e:6b:22:59:e3:8b:
2b:54:30:a4:2b:60:b4:6f:83:60:da:f3:dd:95:34:80:6f:57:
a4:70:db:37:24:48:6a:65:df:3b:b7:d3:ef:72:fb:b4:93:82:
75:a1:8a:60:74:a5:98:0a:ef:e6:81:f8:7b:f9:f2:61:be:1f:
fd:46:da:c6:5e:7a:b1:2d:e5:b3:c6:24:1a:6c:ab:90:4a:48:
c3:2a:77:f1:8c:e8:5c:90:74:35:46:d3:e1:ac:58:40:a0:a1:
92:be:ce:fb:25:45:eb:4b:c8:51:98:43:51:88:5e:5a:29:ac:
3b:aa:31:d9:43:ab:5d:31:7f:71:ee:50:cf:06:7b:8e:9d:05:
f2:82:e2:ee:e9:cb:17:86:a9:3d:de:61:39:6b:da:32:fa:5b:
39:66:10:94:1d:e8:6c:a7:09:73:2f:e4:53:9c:49:a4:d1:33:
ea:3e:1a:2d:63:50:92:3b:71:0c:2d:e1:48:65:dd:70:b3:1d:
91:24:f7:ee:57:a9:93:a3:a0:eb:80:57:00:08:08:c1:a4:65:
e3:8e:91:9f:bc:f6:f3:46:ba:49:91:f2:c1:97:dd:0b:1d:62:
c1:d7:30:f2:71:e8:db:3d:57:ec:56:20:f4:77:a0:1c:20:92:
64:52:10:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:33 2025 by rpki-client