Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: 3hgky/TKXyv/Tfq0SKHFGGEF2g3cgp6v8I6Dv5wPPts=
Subject key identifier: 58:B9:2D:B8:5B:CE:97:0A:6E:8E:14:63:AD:A9:DE:BF:10:A0:F0:A5
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0198D66024D260A0BC3D7A1E7F9CA2DC1971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: iGCURygYNzSanS3/2NdUQmyJ8o830P24omTlz+N7+Sc=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:24:d2:60:a0:bc:3d:7a:1e:7f:9c:a2:dc:19:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=58b92db85bce970a6e8e1463ada9debf10a0f0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:3e:94:52:8c:55:01:c6:da:2b:2f:05:00:
fb:47:90:b1:ca:a9:38:da:a9:7b:ef:8a:62:d6:91:
3e:9d:5f:bd:59:1a:2b:7d:25:f0:57:64:cd:9f:16:
a1:ae:f4:f7:bd:65:fd:fd:c2:e3:95:29:2f:15:bf:
0d:3f:31:90:f3:2c:4c:24:f0:eb:b7:86:1f:c3:e7:
d8:ca:63:49:a3:3c:84:6e:5b:27:24:85:57:80:de:
29:b5:6e:40:1a:4c:cc:b2:44:e1:b2:f0:94:64:e4:
45:17:55:62:d1:16:32:fe:9a:71:45:a2:27:46:94:
92:17:13:72:81:02:45:de:7e:25:46:cc:48:9f:30:
9c:71:c1:34:98:c7:bc:b2:84:c9:52:3c:8d:7e:b6:
c6:8c:1c:66:88:63:12:c3:22:71:fd:c2:f5:a8:84:
6e:01:29:79:c8:4f:2a:c1:b6:ff:fd:f0:0f:1e:f4:
15:ed:af:00:aa:be:79:8c:1f:12:14:0c:86:23:f6:
ea:62:fa:60:19:8f:c8:bf:6e:f9:21:e2:69:58:e4:
1d:41:67:3d:95:49:06:f5:e5:69:16:95:24:78:ba:
13:21:bf:02:04:1a:7f:3d:3a:2c:ef:8f:8a:26:2a:
ea:e9:67:d7:99:f3:7f:1f:d7:21:ce:5a:3e:2e:07:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:2D:B8:5B:CE:97:0A:6E:8E:14:63:AD:A9:DE:BF:10:A0:F0:A5
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:25:3d:7e:72:06:85:d5:5d:51:84:0d:62:b4:48:e8:8b:ef:
29:27:bf:a4:cc:92:cd:01:d7:75:fa:7f:5d:ef:1c:93:c0:0d:
b1:30:6b:6f:2c:a9:7d:c5:31:61:ee:f2:5e:0b:c9:82:68:65:
76:d4:da:16:bc:64:42:d5:10:25:18:2f:43:13:fd:69:1d:9c:
c9:19:d0:6b:d6:e4:12:ae:ce:57:bc:70:15:6b:d7:33:78:7a:
a2:5f:5e:12:e9:a3:a8:5e:fd:8c:54:53:67:d8:8b:e7:91:94:
8c:c1:bd:e6:56:28:0e:33:98:d4:61:2d:8c:8d:fa:c4:36:8c:
81:ca:0d:43:f0:22:5d:42:9d:a4:c9:fa:7b:20:45:24:50:e9:
8c:33:1f:89:49:c8:04:5b:a4:67:67:56:cf:0e:66:60:00:68:
82:fc:f3:25:31:ff:84:39:f2:34:8d:8e:e7:ca:08:a0:59:de:
f9:f4:e7:04:98:51:90:12:e7:09:59:b9:25:92:d8:ff:4b:62:
be:d5:df:e6:50:ce:b3:11:ca:5b:a7:1e:fb:f5:80:42:cd:5f:
54:7b:da:d6:57:f6:d2:a6:cc:df:2a:47:8f:ea:95:3d:e5:74:
48:14:31:1b:39:6e:f9:2c:af:1b:f4:6c:50:e7:e0:18:d5:4d:
d6:60:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:39 2025 by rpki-client