Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: YXA+a/nzzNLl7Ua/uhgUQ3xCdy8QB/HpWsP/+J2kyWw=
Subject key identifier: 94:56:A5:A5:19:B3:DE:93:A5:0C:D9:FA:BA:7F:BE:66:34:41:7E:F0
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 019894ED9755A16DD48890F54D1F64E48017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 11CD
Signing time: Sun 10 Aug 2025 17:00:55 +0000
Manifest this update: Sun 10 Aug 2025 17:00:55 +0000
Manifest next update: Mon 11 Aug 2025 17:00:55 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 4IVRRg7lmIA3gIvyxWw87RuZ357X4R8GLY2H9edViPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:97:55:a1:6d:d4:88:90:f5:4d:1f:64:e4:80:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Aug 10 17:00:55 2025 GMT
Not After : Aug 11 17:00:55 2025 GMT
Subject: CN=9456a5a519b3de93a50cd9faba7fbe6634417ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:d4:77:00:bf:c4:5c:c2:a8:ec:cf:50:16:
4d:8e:d5:ef:36:e7:fb:60:7a:fc:c9:ed:06:de:8d:
6a:09:ee:f1:6b:12:9f:0d:a6:18:01:8e:7d:f7:17:
99:5f:ad:0a:9e:77:fd:98:0b:51:c4:11:ab:2a:c5:
7a:6c:79:4d:1f:23:f7:dd:a1:7d:9a:ea:bb:d3:74:
e7:74:df:8c:0d:70:1d:3f:95:a8:84:e8:af:e6:a5:
aa:6a:2f:ed:f6:e3:a3:a4:ac:cf:60:e4:79:0f:53:
f3:c2:0c:41:8d:62:e3:06:52:23:dc:a1:3d:e0:0e:
15:12:bb:5e:38:55:67:c7:f8:ad:ed:16:d6:b9:ba:
7c:cf:bb:6a:f7:53:10:37:69:9d:23:7e:65:e3:8c:
a5:7f:72:bc:41:5d:ea:12:3b:18:17:55:c3:e3:96:
7c:e8:0f:40:e4:a7:3d:9e:b8:5c:5d:f8:56:97:45:
4b:eb:47:81:a1:90:77:e7:1f:fa:13:03:ed:fb:a7:
6e:96:1b:f7:b0:eb:5d:c2:d7:ca:ef:b9:e6:77:1c:
61:0b:58:82:ff:b2:7a:e6:1e:78:1a:19:fa:45:c5:
a6:15:94:86:48:9e:36:3c:2b:39:1e:f5:be:57:ef:
56:07:10:cf:be:3f:46:c3:a1:1e:ab:35:d4:ab:d3:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:56:A5:A5:19:B3:DE:93:A5:0C:D9:FA:BA:7F:BE:66:34:41:7E:F0
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:7e:82:ac:7b:a0:71:c4:38:1b:60:bc:4e:2d:6a:8b:98:
45:3a:bb:9c:e0:ab:2c:09:58:a1:28:5b:2e:f1:c7:b4:04:32:
1c:cc:29:9c:13:c5:2a:89:6c:b2:c9:e2:5f:31:33:57:93:c8:
28:c2:0d:52:dd:7f:5d:35:0a:48:68:91:4f:83:21:99:9f:3d:
f1:00:25:eb:5b:05:5d:b8:84:e7:d5:06:49:1f:a9:28:76:c8:
c1:eb:79:fb:dc:ba:e8:d0:0a:1f:99:36:3f:fb:62:be:6d:9f:
74:c3:02:ba:f0:f6:53:0c:ed:cc:ff:7a:50:b8:07:e4:4e:e9:
f4:b2:69:07:c3:78:07:80:38:e8:5c:79:61:38:fb:d8:05:f5:
5b:2b:64:19:7c:bc:1a:41:32:e8:20:05:af:6e:64:91:ca:70:
8f:fd:ab:9d:4c:97:e8:7a:d0:d6:7f:b2:b7:40:d6:91:fa:2d:
d1:a9:eb:79:a8:8f:58:84:00:27:92:4c:e8:4a:57:65:da:d4:
42:7c:02:fd:8a:da:75:90:f2:2a:0a:f2:f5:81:01:7f:7e:d7:
ea:15:44:fa:fa:5b:ee:1d:c4:d8:3f:52:14:fb:9c:f0:64:e4:
36:d4:b2:c7:43:0d:8f:54:b1:1f:b7:12:f1:45:7c:11:bb:c0:
01:1e:f3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:26 2025 by rpki-client