Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: OaTyzwFBjaOAVCI100VwZ9CyXXsOZjrBLGfTnn9MYgI=
Subject key identifier: 07:65:F4:15:0A:48:16:38:6A:DD:A9:AC:EA:C1:C5:E6:01:FC:A3:C0
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 0198D515C8113E4DC02607A5B4A020840DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 0F22
Signing time: Sat 23 Aug 2025 04:00:30 +0000
Manifest this update: Sat 23 Aug 2025 04:00:30 +0000
Manifest next update: Sun 24 Aug 2025 04:00:30 +0000
Files and hashes: 1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: spxV+2aPXaF4qVfmOL4jBoBhovpHaBLsIQn3Se1bFP4=)
3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c8:11:3e:4d:c0:26:07:a5:b4:a0:20:84:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Aug 23 04:00:30 2025 GMT
Not After : Aug 24 04:00:30 2025 GMT
Subject: CN=0765f4150a4816386adda9aceac1c5e601fca3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:91:7b:5d:fc:0b:40:0e:27:30:38:f3:f9:
8d:61:3f:8a:be:56:68:db:96:9f:58:de:6b:4a:b9:
73:5c:a9:1d:aa:4f:8a:86:af:0b:13:51:52:18:c2:
78:c9:3d:12:22:4f:0e:4a:1b:e6:72:d1:f0:d4:4d:
ad:9f:bf:fa:89:38:7c:ee:81:9a:03:fb:61:ac:ba:
a0:f0:37:6c:30:90:1c:cb:19:be:86:b3:e5:39:1c:
61:7c:50:99:a8:a3:a1:95:96:46:a5:de:89:7c:3f:
3c:eb:c3:91:2a:38:ae:78:2f:5d:8c:dc:e3:4e:2f:
3a:27:11:44:b9:50:9d:ed:2f:03:5f:41:e4:b7:ce:
9c:e2:4d:c1:f7:45:7e:58:e0:72:1e:98:e8:64:78:
80:c4:cb:78:82:55:4d:a5:11:fe:db:da:16:78:d3:
d3:e0:63:41:d7:52:dc:c5:e1:31:be:91:2b:b8:f7:
2e:31:84:ca:c0:30:8f:ab:f6:b8:7f:44:f4:ae:30:
4d:7f:00:3f:0c:6f:96:15:c7:4d:0d:5f:33:74:c1:
11:18:c0:28:20:95:73:dc:8d:c4:1a:fd:2a:37:9b:
f9:f1:86:96:3d:f5:cb:79:a6:0a:de:1c:5b:47:a8:
01:c4:51:52:61:9d:73:15:82:b2:d7:f6:77:d3:81:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:65:F4:15:0A:48:16:38:6A:DD:A9:AC:EA:C1:C5:E6:01:FC:A3:C0
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:cb:e4:cd:1d:58:27:eb:6d:db:8b:51:87:df:da:ba:b8:c4:
a1:2f:3b:b6:9b:68:f6:4c:c1:76:0e:df:51:78:27:44:a0:03:
fc:dc:6d:e8:04:93:0d:45:4d:86:45:f5:bb:2b:04:a7:f1:62:
49:00:12:6a:de:6c:d9:c9:f1:27:52:8b:e5:7d:e6:51:90:12:
52:48:2c:e0:4d:3a:f4:5f:df:0c:dc:d4:19:be:57:0a:0a:0a:
66:52:53:17:11:08:6b:17:4b:36:fe:7f:a1:4b:43:00:c9:ec:
2f:c2:d5:8a:87:a7:e7:55:89:24:50:56:a4:46:3c:f4:c8:2d:
04:27:f3:ea:e9:73:e8:dd:56:af:71:d0:f1:ea:14:5f:8e:bf:
96:7c:52:80:53:14:e5:03:71:78:d6:c7:37:6b:8b:75:fa:7e:
9e:24:bd:22:2d:4d:f0:08:88:77:e2:44:7c:24:93:c1:57:eb:
ad:cb:ec:9f:f7:c4:d5:ca:79:39:04:2c:f6:7a:d9:28:1c:0c:
91:b3:3f:40:95:32:6b:7e:7f:63:a5:c1:65:94:18:96:41:48:
f2:d0:06:a5:0b:f1:9b:61:bc:c3:9b:f4:1d:3e:be:9e:9f:9b:
b8:eb:7e:ad:6d:91:70:2b:32:f0:89:bf:93:f4:5a:56:31:93:
86:f5:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:15 2025 by rpki-client