Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier: B8QvHGolXKyt+dW5F0WjBXRXbgMcwnOtWtxjc0738rA=
Subject key identifier: C9:0D:E4:81:B6:3D:45:37:BF:5E:35:02:E8:8E:17:F1:9C:64:37:83
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 0198D404AAF911689F04572BBBA75E1890BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number: 15DC
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: Bbxo5GOkMtBPV4eyDiJBtgGCAvs.roa (hash: gPTOZ/QwaGNzYqcGskaYm0Q9CUgsB/kmTCxE6lNVoV8=)
2: GkWtiMh4Kekgq83feCXLfv_pub8.roa (hash: UboiG7GPy5Vm4OyfuuuEVh7hhcZoHsmQQgbXPLJ/4ug=)
3: ScP8kW7fVZKKIlJqtoPhrGG1uQo.roa (hash: kBK8cN2i6ByxK8RJnTQxES9FzgvOd8FoOcnJVY/e4Bc=)
4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: IUaGNoQRLX/5ZFtkfjUtLh1jxCCOVxOk9TxuGPJFUGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:aa:f9:11:68:9f:04:57:2b:bb:a7:5e:18:90:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=c90de481b63d4537bf5e3502e88e17f19c643783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:68:f1:6e:76:33:ce:2e:80:fd:e0:4f:d0:
d2:79:96:45:eb:3b:c5:c3:eb:85:21:e7:e0:ce:e2:
4f:98:ce:9b:a7:f0:8e:ca:30:63:21:05:b9:ec:93:
d4:f5:a8:23:de:f3:ec:c4:d9:fc:4f:0c:9d:28:b4:
a0:c2:63:2f:61:6f:81:de:77:31:be:8c:d1:af:30:
23:11:db:19:46:de:4c:4f:fc:fd:55:5c:64:9f:37:
f1:d3:b8:7b:7c:71:59:ab:22:89:22:98:79:c2:50:
40:f8:f3:7f:4f:80:f5:cc:52:93:f3:10:5e:60:fd:
62:2c:32:be:d4:00:48:2e:20:6f:e7:96:1f:0e:40:
8c:62:5b:d9:d2:76:85:8e:87:95:7d:78:41:f2:66:
6e:e1:29:1e:93:c7:5f:86:4b:6b:92:7d:4c:b9:a1:
b7:1d:df:14:a8:65:67:18:0d:07:35:42:1a:2d:2f:
05:5d:31:f9:f0:5d:99:64:05:7e:e9:e7:be:f0:b7:
14:ab:56:5f:c7:df:6e:03:27:96:02:8a:b0:b5:b0:
98:1a:4b:4e:7c:ca:39:65:74:f0:d2:ac:e1:d5:47:
18:d8:fd:26:1e:8b:da:23:1d:00:ce:b0:39:98:81:
70:81:49:38:b3:97:c7:f5:a1:e8:c2:13:dd:5b:66:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:E4:81:B6:3D:45:37:BF:5E:35:02:E8:8E:17:F1:9C:64:37:83
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d4:93:77:bb:ce:31:12:64:34:03:b4:af:5e:64:7f:83:52:
92:28:17:9a:15:01:53:ec:c9:76:8b:c3:f2:21:1b:09:0e:11:
70:16:bd:8c:9e:96:df:8f:7f:75:d5:bf:60:f3:f1:21:9e:76:
1a:40:b3:4c:55:fb:19:bf:b5:17:50:76:ff:01:df:9d:14:99:
8e:cb:9b:69:15:f2:c0:60:67:ae:bf:94:04:08:31:f7:38:44:
5d:a5:96:cc:23:32:b6:0b:ce:ce:2c:b9:0e:02:92:7e:0b:de:
3e:a5:43:20:03:1b:19:f8:c8:3e:32:65:a3:56:12:80:fe:03:
38:7c:de:cb:b5:3a:0d:fe:a7:50:d6:04:b3:15:19:45:aa:b2:
41:ad:76:5f:a3:65:b1:e7:19:94:be:9f:a4:40:56:4b:98:3d:
c7:e3:b3:80:91:62:4a:ff:c6:78:8d:98:f9:45:3a:be:2f:89:
99:a0:7c:84:4d:55:a4:2b:3d:cf:f6:4d:b6:93:ab:69:ee:84:
f0:c8:53:cc:5a:f2:49:3b:0a:4d:d0:06:28:ac:98:52:63:6d:
cc:23:fb:6c:ca:28:21:a3:8e:60:80:4b:9a:b6:45:96:20:31:
e5:ce:72:5d:fe:da:41:25:2b:24:29:8f:1a:cb:cd:bb:5d:a0:
fa:bf:ba:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:06 2025 by rpki-client