Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: PEre7UadhY8qPhDR9LxhUmfWSGF4JM2yVkyeRxta8Qc=
Subject key identifier: 4C:C3:03:65:78:B4:44:2C:CD:67:71:DE:34:D1:01:A7:DB:0B:C2:45
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 0198D54DEA15767A31DE9C186887446C0FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 165C
Signing time: Sat 23 Aug 2025 05:01:49 +0000
Manifest this update: Sat 23 Aug 2025 05:01:49 +0000
Manifest next update: Sun 24 Aug 2025 05:01:49 +0000
Files and hashes: 1: kvgwT2CIxiAz0KGy17PsocByagw.roa (hash: uswWYZe8p+8Gmx/n8zkQaGQ6Q2+Rru2JGoDveoK/xUw=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: ksm5Qp00yd4q9zBZTsXinMzXlk7C1rdax2WA1WFsqT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ea:15:76:7a:31:de:9c:18:68:87:44:6c:0f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Aug 23 05:01:49 2025 GMT
Not After : Aug 24 05:01:49 2025 GMT
Subject: CN=4cc3036578b4442ccd6771de34d101a7db0bc245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:0b:84:c9:90:88:01:f2:65:33:38:33:3d:
bc:98:8a:bd:08:28:ee:a0:81:10:52:f9:cc:43:f0:
8a:f4:13:b6:3e:a8:cf:b9:8c:8b:32:41:28:25:b5:
e9:5c:3b:76:9e:c3:73:1d:f2:3b:7a:7a:26:dc:4f:
58:d1:02:65:11:2a:39:b3:a8:61:65:03:af:1e:a7:
96:44:d4:a4:86:b2:5f:72:ba:d4:3d:f1:3f:80:1d:
99:33:cf:be:e6:c6:3c:ac:c8:1f:47:fc:9c:d6:62:
e5:05:97:9e:a9:71:91:bd:c2:d1:49:ae:60:49:86:
46:54:7f:b4:36:26:69:71:d3:8f:ea:56:cb:72:89:
91:4a:eb:da:91:dc:39:16:91:f5:74:b6:c7:07:23:
52:ab:4d:23:c4:f7:58:23:43:9c:0a:b0:9e:e4:44:
da:63:b8:0c:f3:7e:ec:d6:b1:93:12:78:02:68:44:
de:fd:e0:a5:0e:37:a5:0d:87:8c:93:d8:ff:c7:32:
f4:dc:f4:09:2f:ce:14:d8:27:93:e6:cd:6c:84:f0:
78:2f:2e:98:03:7c:c1:05:38:dd:d7:4a:59:50:fc:
da:aa:0b:50:e5:a0:a4:dc:98:5a:46:c6:1e:d3:3e:
05:23:69:82:6e:7f:81:e7:ee:57:49:65:d4:0e:56:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:03:65:78:B4:44:2C:CD:67:71:DE:34:D1:01:A7:DB:0B:C2:45
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:93:06:a2:80:e5:ff:a4:20:82:72:d3:da:09:36:a2:42:eb:
7a:cc:a3:10:d6:8b:fb:15:7d:f1:ec:a6:75:76:3e:d1:9b:b6:
64:ff:a4:3b:d0:0f:aa:b7:1f:1f:b4:33:e7:15:66:f7:d1:7f:
6b:9a:a2:f4:70:76:2f:aa:d1:43:09:ce:b1:c5:b0:78:3e:6d:
78:1e:c0:fa:8c:95:b9:17:60:b2:26:6e:b1:c2:92:09:e9:53:
fa:f2:70:0e:c5:8d:9f:91:10:85:51:41:c6:86:65:31:e0:00:
29:ea:b0:8e:fa:a8:c4:6a:78:80:8d:74:e2:87:b5:98:13:5e:
45:09:02:e6:13:66:3d:ae:e3:a5:ad:ec:46:6b:67:2b:33:f5:
3d:07:8b:a5:5b:44:0f:0b:ca:46:9c:30:8a:b0:91:49:f2:8f:
dd:ee:5e:7f:3c:12:16:7d:f1:e7:00:d2:35:ca:ff:14:c3:63:
72:8d:b8:10:7d:7a:3a:77:ab:f0:d5:31:10:59:66:2f:b5:42:
e4:e3:9b:c1:9e:af:83:c5:56:54:28:dc:67:ab:b6:bd:35:54:
30:1f:de:8d:fa:61:5b:4b:fd:57:0f:03:26:e8:24:fa:ca:89:
c9:9c:8b:ab:30:47:8a:e3:02:a9:67:fd:3c:c6:2d:72:90:59:
93:9a:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:14 2025 by rpki-client