Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: 8wqmNJQz43QQOYOc/CDJRHtt20bhODveIj4/v3r6/YI=
Subject key identifier: C3:A2:E0:C1:35:F0:12:4E:F1:DE:9A:F2:BE:02:ED:76:85:76:A3:24
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 0198D5BBE1BBE986E752E1A344C7221DF5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: pHwUxhcipI7BoFjDVemT9TBwjWvPw21NxLWrDnEA7G0=)
2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e1:bb:e9:86:e7:52:e1:a3:44:c7:22:1d:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=c3a2e0c135f0124ef1de9af2be02ed768576a324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ec:78:db:8e:d5:42:61:51:87:19:8e:c0:17:
cb:32:bf:7b:59:ba:77:56:0a:99:71:3a:ad:b7:31:
2a:a9:1a:b5:62:62:cf:87:f6:71:a5:79:ca:b8:ca:
0c:41:6c:bb:b0:95:49:ee:f2:21:77:71:2c:b9:91:
ef:93:75:69:d1:7d:0f:e7:a5:34:98:73:5b:57:86:
84:56:cc:f4:88:6e:bc:6a:12:89:03:cb:be:59:a2:
b9:ac:4e:96:07:dd:05:0f:14:d1:d4:b1:58:94:7b:
35:57:92:5a:f9:db:43:04:65:11:47:db:a1:4a:a9:
a7:fe:30:87:ab:1a:12:3d:f5:87:18:c7:04:bf:d4:
b0:6b:84:9b:93:ff:9f:ac:2e:94:0e:b3:31:a3:40:
ab:2c:99:81:0c:a5:92:8e:f3:68:e8:6d:28:19:13:
f3:f9:85:50:2f:42:29:3d:67:29:b7:59:ec:2c:55:
f8:e5:e4:f3:e6:bc:92:ce:ea:3f:d1:9b:3f:fc:c1:
9f:77:bb:60:48:06:ad:15:07:cd:d4:de:8b:c6:49:
f6:0e:e2:9f:db:74:ad:ec:44:98:8e:bd:eb:b7:a6:
7d:1e:49:b6:6f:47:b5:ba:b9:ae:88:0b:0f:ed:94:
6d:f5:42:10:02:1b:0b:4b:5f:70:39:8a:5e:65:24:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A2:E0:C1:35:F0:12:4E:F1:DE:9A:F2:BE:02:ED:76:85:76:A3:24
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:f2:88:64:a0:9f:fa:d2:bf:c0:e5:08:8c:d8:96:cd:94:
ea:54:f7:3b:89:ca:15:4f:23:b8:ff:fd:c6:d4:62:09:f1:6b:
90:18:0b:dc:72:c8:bf:e5:09:01:68:ec:10:fd:44:73:a2:b6:
3a:12:6f:a2:01:75:8a:12:90:c2:b2:ec:59:31:dc:63:de:22:
32:96:48:53:80:66:e3:1d:2e:b9:1b:b6:98:3a:fb:e0:55:bd:
d2:ba:6b:08:ed:df:1e:12:2c:1d:37:20:78:8b:cb:93:37:2e:
64:c6:81:f1:26:42:4f:53:a2:ea:13:1e:3f:c1:9f:37:f0:31:
b1:f2:dc:f7:48:fe:7a:a1:b2:f5:77:d2:6e:b5:16:0f:40:ad:
0c:3f:aa:c9:6f:75:1b:81:a4:55:03:26:b5:fb:d9:23:98:9d:
fb:f8:39:30:76:71:af:b5:05:af:af:79:8b:a9:7b:c4:56:85:
c0:78:9f:21:38:5c:7d:7f:23:4a:a9:11:53:d5:32:bf:b3:83:
f8:d5:6a:d5:67:5d:e8:44:9b:66:3b:03:15:81:f6:ac:40:90:
f1:d8:38:ec:b5:96:f9:c9:99:ef:13:b9:be:b6:f2:75:ce:a5:
91:5e:d7:dc:78:d5:8f:b2:9e:17:37:18:9f:55:76:51:99:1a:
fb:58:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:36 2025 by rpki-client