Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier: 62MtEq+3jL1VfU4A9xRthXJ/TqsEqIHp+4Rl19peGPo=
Subject key identifier: 60:15:BF:D1:D2:FE:7D:36:F6:53:52:CE:40:92:4C:0C:23:A1:DB:80
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial: 0198D54E5EEB56EC5948146FADEF9F780089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number: 0AEF
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: vAwZK90pUKrG+PMoBFXfaYz5EHpsnVa9rr3zHOGT6Tg=)
2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5e:eb:56:ec:59:48:14:6f:ad:ef:9f:78:00:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=6015bfd1d2fe7d36f65352ce40924c0c23a1db80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:16:17:70:0e:d8:be:f1:c8:7d:ca:4e:99:
5c:b6:0d:1e:c0:6f:08:a5:68:87:7f:7b:86:b3:e4:
74:f4:03:2a:cf:56:72:2e:05:11:3e:72:09:10:42:
0a:95:ac:18:62:06:66:58:85:5f:35:cf:61:2a:10:
de:e2:e7:1d:37:ea:ff:83:bc:b3:64:08:b5:b2:ad:
bb:81:fc:53:74:a3:8f:1a:2d:9f:e4:27:9e:6a:f9:
e9:fc:94:1e:e8:68:50:d8:3c:bb:9e:8d:57:17:51:
a3:90:92:b8:91:b5:61:19:3a:58:87:db:aa:03:02:
ff:59:24:c2:26:53:3f:6d:75:7c:dd:ab:89:f9:09:
55:49:cf:5d:6f:81:38:b2:f5:ec:63:4f:fe:e0:18:
83:37:5e:1c:90:b3:87:2a:1e:c1:fb:5a:f6:75:a7:
bc:05:94:4b:af:15:69:23:85:71:ef:bf:eb:b4:60:
34:01:b9:b8:18:17:ab:f2:dd:41:8b:34:b8:6f:16:
05:bb:ed:4d:ab:62:45:32:9e:7d:85:e9:2a:71:21:
73:01:d3:c0:9a:fa:bf:12:79:85:01:56:de:8a:de:
b3:e8:7c:e4:7b:78:3e:a2:74:e1:e3:54:f8:6d:c6:
a4:02:a4:69:09:ef:31:b0:20:7e:72:9f:c9:e2:12:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:BF:D1:D2:FE:7D:36:F6:53:52:CE:40:92:4C:0C:23:A1:DB:80
X509v3 Authority Key Identifier:
keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d0:fe:ef:23:a7:8b:df:d9:aa:d4:c3:fd:97:49:c8:70:27:
0e:8e:eb:d1:b6:67:86:c0:15:5c:09:0d:bf:61:67:78:7a:7a:
d8:9e:f6:83:e7:55:bf:c2:b9:33:ed:fe:fb:fc:28:04:d5:0e:
62:c3:9c:48:c3:7d:7a:78:b3:0e:21:27:e5:64:bc:54:78:4f:
4c:82:94:19:06:75:58:fb:8b:e3:d5:a4:20:70:4a:d7:dd:4a:
00:f6:96:f3:57:f0:b1:ab:8a:e3:ae:68:f2:99:b7:f5:fa:99:
f2:e5:0c:87:67:50:17:51:cc:e3:e6:6d:fc:6f:59:96:e4:75:
76:6a:e0:45:7b:0c:1e:be:f4:e4:8a:9c:ec:84:33:ca:4c:df:
9f:cc:1d:4d:e1:2d:a4:1f:87:51:e0:74:2f:85:81:c2:48:6a:
a4:d3:ed:70:5e:b3:e8:91:8d:92:e0:6a:c8:4f:79:e0:18:8e:
c8:4d:a1:40:52:00:00:4c:88:29:1d:e8:91:30:cb:e7:4a:0a:
1c:e0:2f:c2:16:74:1d:f8:10:68:2f:9a:ce:99:c1:95:c9:29:
1d:9d:62:1f:5d:f9:1a:5f:73:d5:e5:9a:3b:ba:8c:62:e2:c6:
c5:24:7e:ef:58:02:c9:2e:98:a4:36:8c:19:0c:67:db:25:72:
5d:25:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:39 2025 by rpki-client