Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: teS4pkgiFsZdvjvXb51wxJPS0PA1Ga5ClXTTK0qJYyM=
Subject key identifier: 22:9E:48:1E:85:3F:0E:87:C0:AF:2A:7C:73:03:4D:6D:12:69:C8:E8
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 0198D698544BF8C89F136BCEDE2CE852A758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 05A9
Signing time: Sat 23 Aug 2025 11:02:43 +0000
Manifest this update: Sat 23 Aug 2025 11:02:43 +0000
Manifest next update: Sun 24 Aug 2025 11:02:43 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: 9Q2vsjQgoek0gQVBXhji0GPZnyqzfhm1axUylDVwt/o=)
2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:54:4b:f8:c8:9f:13:6b:ce:de:2c:e8:52:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Aug 23 11:02:43 2025 GMT
Not After : Aug 24 11:02:43 2025 GMT
Subject: CN=229e481e853f0e87c0af2a7c73034d6d1269c8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b5:b8:a5:ab:69:ae:b2:7a:16:d4:22:be:03:
6c:1c:63:81:48:22:89:c7:e2:8f:5b:a7:c6:8e:27:
de:66:3c:20:27:61:00:7f:dd:94:6d:48:90:21:95:
89:aa:63:00:59:b8:18:8c:65:cd:c6:be:84:4f:a1:
26:c3:a6:ac:2e:2a:c0:7b:f6:fa:46:45:a3:e6:d6:
2d:a7:0d:15:c3:61:c1:ab:a0:c3:80:ae:31:c8:70:
d9:88:e5:1b:9c:28:92:37:d3:e4:b0:59:e1:30:d8:
ae:80:cf:43:3e:40:3c:c4:a4:cd:1f:b9:72:ca:6d:
ad:6d:94:63:7a:37:cd:d7:0a:1c:46:57:d3:68:fe:
5e:81:5d:b9:05:14:cb:0e:aa:5c:98:d5:f5:2c:c0:
b2:81:1d:f0:bb:46:1e:b7:c4:5c:f5:f3:e3:c7:45:
a8:50:ff:98:32:43:4f:e2:01:7c:87:2c:b7:b6:d4:
09:00:2a:76:f6:69:3d:c5:1e:10:40:0a:f7:53:a8:
cf:d1:f3:af:e6:61:df:c6:70:bc:27:72:f6:2a:03:
46:1b:1d:b8:ba:ad:34:6b:26:d6:59:32:33:80:4c:
b1:27:b2:fa:c9:7f:83:d7:2d:79:a3:5d:90:42:c3:
d6:83:8d:f6:d8:49:63:b6:34:51:b5:6d:0a:e4:88:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:48:1E:85:3F:0E:87:C0:AF:2A:7C:73:03:4D:6D:12:69:C8:E8
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:a7:a6:3e:e7:1d:62:a1:27:39:0d:29:a3:63:63:25:19:
ca:32:ab:ef:42:a4:09:0e:32:36:5f:a3:09:09:ac:50:76:43:
7b:72:69:72:4e:28:bc:21:13:10:54:06:af:dd:37:38:6a:ac:
8b:1c:c5:25:dc:aa:36:b2:f3:12:58:93:b1:5a:76:58:f9:f7:
f0:5f:ce:58:5c:0e:66:48:1d:40:80:d4:65:a1:73:e6:3d:0a:
f3:c5:43:1f:39:c2:b7:21:15:94:f9:ca:04:43:1f:c5:38:cd:
e0:24:da:33:b2:a5:3f:7a:8c:c1:60:01:f4:43:5f:72:c3:bc:
c0:2c:b6:53:17:15:63:4f:c8:78:d7:39:3c:6a:19:67:78:12:
f8:5a:05:6a:ad:b3:dd:a0:44:10:1c:1a:5b:29:2e:0f:0d:34:
1f:0b:a1:a6:1e:63:d9:06:84:d8:fb:61:a7:21:ac:94:6b:50:
db:bb:22:16:d8:93:4a:d4:93:fd:7b:05:a8:94:88:fe:8f:48:
57:a8:aa:df:c6:76:fc:68:10:73:e0:e9:df:05:11:99:52:92:
76:36:b6:43:a2:e5:cb:7b:d7:0c:00:b5:c9:e6:89:f1:c4:6c:
5b:40:34:f8:bf:ca:6e:2e:a9:3c:5b:dd:34:d0:fb:4e:4d:0a:
d8:6a:aa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:02 2025 by rpki-client