Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: purz1e94XmJy7WeT0Q9Nfvt0i0iRA9325waFRhGGE8w=
Subject key identifier: A9:6E:E0:23:03:D5:13:D5:3F:B4:DE:E6:D3:11:31:72:DF:F3:E4:C5
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 0198D69814AE298E2292DEF010BFBC90DD9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 063A
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: AYZF24EgOrNz6WZhkXpTDIKj7Uw.roa (hash: XuYEiMGlP57vEAu/M5jaVByOWmDwAZB50X25JNOPTpo=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: Gty3Zy9e7A5RgS8igXPYk5z2Ptnr3Y6luVcy6wb1rNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:14:ae:29:8e:22:92:de:f0:10:bf:bc:90:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=a96ee02303d513d53fb4dee6d3113172dff3e4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:a0:01:31:bd:3a:4a:df:21:c5:12:75:31:
36:42:d9:8c:41:1c:a0:74:6d:7c:08:dc:bb:70:a6:
44:1f:72:00:48:29:ca:ad:1e:b0:25:b6:07:19:eb:
68:33:41:2c:7d:4c:7f:6c:9a:95:12:b1:29:cf:47:
27:ff:09:84:87:ba:8a:81:b4:e8:fe:83:70:73:f5:
14:92:b2:32:53:0c:aa:db:dd:89:5a:6b:8e:bd:7b:
ad:72:28:26:e7:77:f1:53:2b:60:41:cc:eb:0d:83:
e7:8f:54:88:8b:4d:e5:60:43:3c:b7:da:34:3b:2a:
3f:59:7e:e7:9c:2b:f7:83:73:90:96:d4:b8:8e:2e:
2a:69:43:f1:1b:15:0a:68:71:77:19:91:0c:aa:10:
e3:3b:bf:67:58:d0:8e:82:cf:53:5e:4b:e3:23:06:
ff:03:67:97:05:c2:14:fe:66:7c:98:37:64:5d:3a:
25:a8:57:4b:c6:4f:b2:60:c8:71:7c:e2:21:2b:d8:
ce:b2:b3:f3:a4:36:16:50:b0:9d:1c:e3:47:2d:24:
45:96:49:cb:a0:7f:5c:2a:4d:47:54:aa:fa:63:9d:
c3:14:df:6a:0e:ac:f6:c5:d7:bd:32:6a:da:f7:2f:
48:f9:c4:b7:31:57:8e:0d:aa:3b:45:28:e7:9a:ac:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:E0:23:03:D5:13:D5:3F:B4:DE:E6:D3:11:31:72:DF:F3:E4:C5
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:10:a2:53:01:47:7f:1a:84:38:1a:d6:29:7c:7e:fa:e5:10:
55:a4:9e:d0:e3:7f:19:5b:ef:29:70:7e:15:96:a6:ec:70:07:
fc:3a:e1:3f:8b:94:c7:16:5f:66:48:73:29:19:cc:e4:0e:da:
a5:e4:00:f9:d4:98:16:95:51:70:7a:2b:6a:cc:16:d0:a3:f7:
32:93:6b:0c:53:de:d1:a7:39:3e:27:2e:35:c6:ed:1b:e3:fe:
71:17:87:75:ca:86:88:c9:66:00:10:a1:35:0e:4a:61:6f:95:
37:79:b2:d9:d9:0d:4b:ec:97:c4:40:7c:f6:d3:4e:4d:20:8d:
59:8b:ca:c5:74:01:6f:40:3b:7c:24:a8:0e:c8:db:4c:bd:08:
a0:7d:55:60:e2:59:72:27:3f:70:b1:8f:01:e2:57:e0:b7:52:
86:45:a3:ae:ff:f1:28:83:99:c7:fa:e0:8e:f7:5a:bc:6f:9d:
be:4f:bd:ba:ab:d3:5a:08:c4:e2:53:3a:7e:87:3e:39:41:02:
2f:52:c0:7c:ab:2b:3d:28:7f:df:83:30:a2:83:58:77:4b:fc:
76:65:eb:77:db:4d:a0:91:11:f4:e8:38:3f:1a:4e:52:14:dc:
3f:ea:87:c7:31:a2:ba:b3:02:49:0b:e6:33:19:0e:26:48:2e:
bc:81:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:22 2025 by rpki-client