Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier: ux4Jd1l2bM0GFLRF4QlQYfO2y/+xATsk5TbDgAZuOOw=
Subject key identifier: 5D:AD:2D:EB:1C:9E:09:80:C5:15:FD:58:4A:1C:3F:1C:4E:E6:13:E8
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 01988FC6D04584E2D9274B633E507DB7C50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number: 05F0
Signing time: Sat 09 Aug 2025 17:00:27 +0000
Manifest this update: Sat 09 Aug 2025 17:00:27 +0000
Manifest next update: Sun 10 Aug 2025 17:00:27 +0000
Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=)
2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: nuK4h5BRbOMlVUydWk+VmnIcLypqJ2AhRCTXyG+cB7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:d0:45:84:e2:d9:27:4b:63:3e:50:7d:b7:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: Aug 9 17:00:27 2025 GMT
Not After : Aug 10 17:00:27 2025 GMT
Subject: CN=5dad2deb1c9e0980c515fd584a1c3f1c4ee613e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:6f:46:bd:34:a5:a6:d9:d9:6d:82:cc:4c:
64:78:88:1b:2f:c4:9b:ac:d2:36:9a:3f:4a:74:a0:
94:47:0f:ec:8c:d9:fb:30:b0:98:01:12:fb:37:dd:
f6:9f:7f:d7:79:9e:14:53:43:3d:bc:c3:db:ca:f1:
80:5e:0e:d2:3d:6b:7b:c2:42:26:7e:25:e4:a9:24:
60:d8:5a:00:57:d1:78:4a:01:9d:16:49:f4:54:2b:
48:c5:8f:53:9f:b8:d6:9a:2a:1a:da:9b:a6:33:2f:
2c:0c:3f:4b:92:e0:9c:e8:04:cd:50:96:20:1f:cc:
2e:2f:80:00:7e:10:4a:9d:2d:31:dd:7a:16:4c:d5:
6c:5e:9a:77:6f:24:50:a5:c3:6b:08:a9:68:1c:3d:
28:47:f4:03:5c:ca:0b:db:25:5b:a3:73:63:a3:82:
48:a0:99:53:e3:03:05:08:c9:55:2f:84:58:fa:a0:
3f:3f:dc:ef:7f:2a:70:b1:f1:7a:08:36:b0:44:65:
5b:a6:d6:69:fd:db:c0:09:16:97:dc:6d:ca:69:41:
a0:43:27:85:8f:62:33:62:1f:06:34:33:57:52:d1:
b5:4e:84:3e:82:ad:23:62:37:1c:7a:a5:c2:7d:90:
de:b2:81:b9:eb:cf:0d:42:d3:7f:da:56:2e:3d:ae:
26:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AD:2D:EB:1C:9E:09:80:C5:15:FD:58:4A:1C:3F:1C:4E:E6:13:E8
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:28:e6:fe:32:06:e6:c9:63:25:96:ee:c5:6e:f3:24:32:8a:
af:62:41:31:39:34:ae:6a:fb:ae:97:fe:14:8a:18:c7:21:72:
da:a2:df:5a:68:d8:21:5d:2d:90:c2:e5:05:00:26:e8:5e:70:
41:bb:fc:54:5d:d8:e1:5d:e3:a8:b2:86:43:6e:38:cd:12:b5:
5a:b9:25:4a:69:3a:f5:4f:ac:34:fd:3f:6a:7b:16:3c:08:d6:
ab:42:8a:57:de:75:80:b3:1e:29:7f:0c:96:f9:c3:8b:bd:ca:
64:77:86:58:65:ee:83:f2:fe:29:39:42:79:56:26:16:d3:fa:
89:40:07:42:f5:e7:7d:ae:62:3e:93:f5:d7:21:f3:d1:58:d2:
27:31:7d:0b:e6:a1:15:d4:4c:1c:49:bb:37:f4:6a:49:75:f2:
0f:f2:b5:0b:ec:5b:07:9a:6c:9e:15:33:6d:c6:e0:e6:3e:70:
03:39:0e:55:b7:1b:7f:31:ec:1a:6a:9f:4b:46:1e:b4:fe:d5:
ad:c2:20:87:9b:14:4d:93:1f:3a:08:ab:1c:3d:88:27:b7:22:
f2:5a:e6:21:67:db:e7:6b:76:5a:46:7c:1c:d2:5c:71:f4:40:
19:46:33:70:f4:e7:0b:99:ed:26:26:7d:90:4e:c0:e0:a0:65:
a1:c0:d9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:31 2025 by rpki-client