Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: XBSavFSRLPeAtSp4ascwVjsh8uujhowqduqYrw8uIvc=
Subject key identifier: 58:43:FC:1A:B4:61:7D:59:5D:5B:B2:73:2D:DF:DC:88:A2:45:AC:66
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 0198D54DE08414C4470895A6E1BE2F79353E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 10F8
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: 97K8/Mn4z0AMxeBYHfOhYz60IZtihGaujCbKVXWpRUM=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e0:84:14:c4:47:08:95:a6:e1:be:2f:79:35:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=5843fc1ab4617d595d5bb2732ddfdc88a245ac66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:cd:50:c8:4c:f6:14:71:cf:95:d3:6b:f8:
34:2d:f0:16:a6:e2:9f:8d:7f:74:63:15:dd:5d:e3:
df:9b:9b:1b:75:2e:6f:e0:d0:bb:14:ab:10:15:77:
c0:07:81:d7:a0:09:8e:9b:2c:a7:e8:ba:44:8e:ab:
6a:64:03:28:d8:bd:98:bf:06:c5:75:69:f6:65:78:
22:a4:3e:33:54:21:80:f5:4b:ad:a6:7c:74:c9:80:
3d:c9:0e:b4:7c:f1:82:e2:33:dc:e3:75:34:dc:12:
ce:d5:c6:36:5e:1a:bb:87:aa:81:fd:10:1f:fa:1a:
97:a7:d1:a5:7b:3e:43:1b:c9:c0:b3:c3:92:6e:ef:
d2:b8:11:cb:e6:42:31:cf:37:4e:86:7d:bb:e2:59:
86:75:cd:b9:96:b4:a3:12:90:53:c4:1d:2e:e3:f9:
0b:94:54:8f:2b:29:db:b8:03:4e:42:fa:94:99:8d:
f7:63:ec:c6:79:ef:4c:53:03:22:53:51:e9:6c:b2:
d0:cf:4a:8d:0a:54:40:0a:44:e7:e3:fe:e0:87:50:
fc:f4:b1:d1:58:1e:b2:ea:9a:19:53:79:19:18:0a:
f9:41:ab:37:9e:e5:6f:7a:72:4b:e6:54:88:84:50:
9d:83:cd:52:d9:18:1d:9b:bf:32:46:67:66:49:be:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:FC:1A:B4:61:7D:59:5D:5B:B2:73:2D:DF:DC:88:A2:45:AC:66
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:05:4c:7e:fa:25:f5:96:1b:9d:ba:57:35:af:9a:8d:92:4f:
96:ac:75:75:20:d7:ef:d9:96:86:39:8f:14:70:5b:7e:22:35:
49:d0:36:5f:a6:6e:c6:9c:8b:44:3b:6c:d2:c7:ac:b2:11:13:
8e:7f:35:4a:26:ac:b4:fa:22:65:1d:da:f6:e6:ad:ed:6e:2a:
f5:97:64:e2:fe:0a:9e:47:d7:4c:7a:af:c0:e7:aa:7a:96:74:
35:ff:bd:5d:1d:5d:3d:92:bf:df:b3:8c:89:f1:2b:37:36:1c:
84:37:c9:45:47:e4:bb:a2:38:90:01:d4:2f:8a:d3:c5:a4:f1:
01:73:03:73:1f:3f:14:24:90:9e:f6:35:f8:07:74:6f:af:8a:
f0:c0:08:d1:da:67:44:c6:62:0b:92:65:f6:b0:f9:37:df:42:
64:92:9e:a3:7e:b7:cc:20:d4:bf:2e:d8:26:4f:77:2b:f8:08:
da:7a:0e:4e:b9:03:b1:3b:36:1e:17:0d:d4:f9:7a:3f:18:40:
2d:63:0e:62:02:18:92:ba:46:d1:7d:2a:32:f2:a6:4e:a8:19:
cf:87:01:ab:c0:ea:93:03:38:0e:26:2c:96:65:64:cb:db:cf:
c9:e3:39:14:3e:c7:93:91:67:78:62:71:e6:e1:1d:61:49:bf:
ac:7a:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:14 2025 by rpki-client