Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: wgqzqK2nFNCKJeKxFJmvHiJggUPrkAYAWbUdARa4Ruk=
Subject key identifier: DB:BD:23:3F:9C:D9:8F:43:66:B1:F1:24:F0:66:BF:A4:75:27:B4:0A
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 0198D6CD63CA4DB189F0CF50BBFA7F936D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 12:00:41 +0000
Manifest this update: Sat 23 Aug 2025 12:00:41 +0000
Manifest next update: Sun 24 Aug 2025 12:00:41 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: 9Sge+iEXTHLXyarZ3XBVuKdPIAr5nMI35RtF9HPiNHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:63:ca:4d:b1:89:f0:cf:50:bb:fa:7f:93:6d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Aug 23 12:00:41 2025 GMT
Not After : Aug 24 12:00:41 2025 GMT
Subject: CN=dbbd233f9cd98f4366b1f124f066bfa47527b40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:dc:70:78:45:59:ec:bf:d5:74:fb:47:72:
4f:15:c2:76:1e:54:9b:5e:9f:72:c4:6e:c9:e3:a8:
8d:9a:7f:95:62:62:e6:44:31:7e:62:b0:c5:41:b9:
8f:5f:dd:03:dd:85:0f:2a:92:e2:db:f7:e6:2d:3b:
3f:ef:d7:08:bf:7a:fe:f3:cc:1f:5f:17:1a:96:f9:
1a:3b:06:33:7d:46:24:04:58:fa:c9:6c:31:70:45:
04:26:d2:09:e5:9f:9a:fb:d8:2e:d3:49:17:0a:40:
bb:18:46:54:b5:d0:5d:29:de:8d:51:64:27:67:b2:
82:5a:02:97:02:cc:37:99:5b:1c:97:37:57:76:ac:
43:e0:96:b8:a5:e7:64:43:50:e7:a0:bc:92:4e:92:
0e:25:94:db:c8:e9:b6:1c:fc:33:c1:2c:3b:07:05:
dd:fe:d7:9f:43:f3:0a:ea:e3:61:c3:25:27:bd:1d:
ac:b4:2b:4c:f4:1f:74:1a:50:33:26:2a:5a:e3:89:
ff:ee:d8:43:4c:86:5a:72:a8:22:72:05:c3:ba:f4:
0a:d2:27:0e:ee:6e:61:f3:98:f4:31:0f:f0:e7:7b:
d2:2c:eb:12:0e:86:a9:58:fb:1e:ca:29:41:0d:51:
df:91:be:95:30:16:dd:68:16:b2:1e:af:36:1d:c5:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BD:23:3F:9C:D9:8F:43:66:B1:F1:24:F0:66:BF:A4:75:27:B4:0A
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:d6:85:99:14:f5:c2:c4:e0:70:10:dc:51:aa:a3:ea:44:
29:25:25:2b:0b:86:ed:5d:f3:1c:19:4f:be:84:89:65:dc:e5:
a2:8c:ab:17:5e:2b:cb:1a:93:8e:de:3b:10:77:39:e6:05:58:
db:b3:b5:c6:74:7e:dd:57:4f:35:92:11:dd:89:31:a3:44:47:
98:1e:fd:ee:07:78:4b:d7:7c:cf:4b:53:af:02:ba:04:07:43:
41:e1:cb:51:33:75:23:bc:70:b2:ae:80:31:9a:2a:34:04:a6:
47:89:c0:66:f1:60:36:b3:3c:ab:61:07:87:04:03:fe:52:16:
b0:d7:a4:de:7f:8d:a9:9b:b8:1c:f2:30:b0:e7:52:46:34:28:
05:66:6e:f6:94:01:a3:48:52:48:48:99:41:ba:c0:44:06:23:
dd:c6:50:2f:15:67:c6:5c:2e:80:54:39:99:4b:13:61:97:13:
ff:b1:e7:ff:4a:47:b8:8c:f9:ec:51:9d:6c:16:63:a0:13:25:
c3:2c:96:f0:3b:e5:0e:5a:34:05:5f:dc:4b:de:db:f3:01:5d:
bb:46:d6:54:e9:dd:8a:a9:cd:60:68:ac:41:7c:11:07:fd:ec:
4c:66:f6:d2:c2:02:a0:0a:68:4d:42:79:a1:7d:0e:67:e2:4e:
38:6d:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:34 2025 by rpki-client