Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: UuXn9Gxaq4BYd5UuMO8dpjAnuEMyCVgHYtDS3bw4z2w=
Subject key identifier: 27:68:FF:E6:86:51:27:BD:B0:F3:22:C3:7F:76:98:CA:D7:14:CC:77
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 01987A1BCD00BB07E0C2A0F9AC1C07FCEFB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 026C
Signing time: Tue 05 Aug 2025 12:01:38 +0000
Manifest this update: Tue 05 Aug 2025 12:01:38 +0000
Manifest next update: Wed 06 Aug 2025 12:01:38 +0000
Files and hashes: 1: k3mYd88nhjXgIJYUkD0IW4wB334.roa (hash: ES4bfd/D7kl4HbO8JFVGRKGNEndi7/c5Oef8CAe6LiM=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: 8T3Vy4puUwxCeu062yl8SYYyodeEpfCXC5rC1tR+1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:cd:00:bb:07:e0:c2:a0:f9:ac:1c:07:fc:ef:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Aug 5 12:01:38 2025 GMT
Not After : Aug 6 12:01:38 2025 GMT
Subject: CN=2768ffe6865127bdb0f322c37f7698cad714cc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:51:86:b4:51:14:dc:5f:2b:aa:10:d5:9b:
50:cf:06:60:cc:30:8e:5c:78:a0:e6:d1:10:f2:fa:
6d:28:0a:fa:9c:94:a6:d8:81:6e:70:5f:25:22:3d:
c9:49:b9:c3:89:bc:b6:71:45:19:7b:a2:94:93:7d:
9c:44:a1:c3:c1:6a:f0:44:3c:2a:fc:96:80:78:88:
90:f6:d7:7d:a1:fb:14:b4:22:9b:c0:49:1c:49:cd:
1b:56:a4:d0:fb:36:e8:22:21:83:fc:63:37:4a:c3:
f1:c6:e2:f7:fe:7e:ec:f5:d6:99:8c:d2:86:28:52:
52:0c:6f:88:12:d0:07:e8:a2:fc:34:2b:b5:91:95:
1f:33:4b:77:db:02:ea:40:d3:29:89:b9:0b:ba:1a:
f4:86:58:fe:2f:4c:6f:09:15:55:53:30:b1:9b:fd:
e6:14:e2:8e:64:df:25:75:9f:11:ff:7f:b2:fc:af:
3d:6a:71:84:c5:20:2f:b2:ee:4b:c9:f6:b7:df:79:
02:6e:58:80:6d:30:07:a2:3b:df:32:e5:f1:7c:94:
44:bd:5b:4f:39:72:8e:93:fb:e7:7d:97:0f:a8:08:
b7:9a:8c:c3:79:e4:16:e1:6f:e7:5f:a3:34:ac:13:
02:d3:98:85:9a:cb:11:b5:55:bd:b9:5e:a8:b9:2f:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:68:FF:E6:86:51:27:BD:B0:F3:22:C3:7F:76:98:CA:D7:14:CC:77
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6e:7b:99:a5:c0:b5:e6:d6:ea:4e:2e:7a:7b:f1:4e:d7:13:
97:8d:6a:d0:66:61:26:f7:c5:97:08:6e:1d:99:02:da:d0:cd:
a2:ca:77:45:0a:75:09:05:a8:1a:79:93:a0:74:8c:be:5e:5f:
5d:0f:9b:e0:9c:4f:c3:88:60:3b:57:f3:9b:b5:ed:75:f5:f5:
7f:90:76:31:d9:06:ec:9d:1e:83:73:aa:d3:b4:14:e0:27:06:
78:d2:21:87:19:f3:1a:1b:62:80:ce:f4:9e:07:d1:0a:5c:26:
af:97:a4:a4:ee:6f:88:ac:b9:b2:f8:43:73:50:37:27:06:ba:
69:77:1b:cd:97:e0:16:24:49:4b:57:01:91:1d:7f:60:a7:dc:
29:72:56:6d:2c:57:f4:96:8d:ea:12:fa:e8:18:cc:7a:ec:45:
30:1d:c4:c2:5e:49:09:ee:8a:0a:b6:d8:62:8a:c4:99:c3:5c:
c4:b6:40:15:89:de:88:07:23:6d:29:6a:65:23:6d:8f:05:f8:
8a:86:ce:11:5f:87:c0:dc:0a:22:66:1b:11:53:c4:e2:ba:09:
f4:6c:93:bc:77:fe:47:00:8c:d9:24:3b:bf:8f:fa:d1:77:63:
ff:c9:01:99:c3:93:0b:84:9a:a8:0b:a3:d9:d7:cb:87:60:f8:
2f:c8:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:12 2025 by rpki-client