Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: ynca1z/Ooc0s9F9+MUaO4uiGQGq9cht4n0Y1B72SrDE=
Subject key identifier: 1F:54:46:E7:9E:3E:1E:3A:D0:75:D5:03:17:86:11:FB:E5:74:8F:99
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 0198D4A788BAF8312CA070F3C61DBD78C3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 0AD9
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: 0my6FbzSbnea5PvYlfpsH8pjXu+Afti50z/rxzO8Mjg=)
2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:88:ba:f8:31:2c:a0:70:f3:c6:1d:bd:78:c3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=1f5446e79e3e1e3ad075d503178611fbe5748f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5c:4d:5f:8b:da:79:33:cc:9a:7c:fc:ce:9f:
7b:78:1c:71:95:8d:cb:4e:b5:cc:f0:96:fd:3c:52:
96:76:b8:91:1e:f0:ae:58:23:4a:1e:41:1c:f1:60:
89:e4:88:08:23:cd:0b:bc:80:79:ad:c5:56:36:62:
66:43:bb:30:ed:1c:66:e1:a5:e8:db:e5:d0:64:05:
60:5c:9f:a4:a4:b1:bd:8c:9c:90:84:83:34:e8:56:
51:94:39:8c:a2:f6:05:3b:6e:04:7b:9a:68:5e:b5:
75:2e:9c:e0:4b:88:d7:71:3a:70:f1:b0:65:bd:5c:
d8:a4:20:21:6b:1d:6a:b7:5b:96:b3:b6:ad:85:38:
20:64:7a:0d:99:80:c5:7d:b7:9e:50:c8:b6:95:29:
4c:fe:bc:02:97:84:a7:9f:dd:e5:87:4e:fb:d4:97:
dc:bd:9e:19:06:9b:d8:d4:11:61:7b:6f:ed:c9:5f:
cf:0b:2f:3d:db:b5:d7:35:c4:0c:43:87:10:eb:d7:
77:d2:9d:39:73:be:d6:62:dc:e3:db:44:94:e7:68:
f6:58:65:5d:1f:a9:d6:59:a9:49:3f:74:36:4c:79:
7d:42:87:06:e0:72:ed:7e:77:35:3e:f8:94:52:4b:
86:cb:18:b3:6d:8c:0a:26:20:e6:ad:74:60:a0:a4:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:54:46:E7:9E:3E:1E:3A:D0:75:D5:03:17:86:11:FB:E5:74:8F:99
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a9:f4:2c:16:2c:59:e3:4a:71:40:77:b2:8d:55:a9:39:a9:
8c:67:f2:69:4f:6d:3d:54:17:b5:ae:dc:be:ea:ba:9b:75:15:
cf:7a:1b:80:70:ab:33:96:65:d8:07:1d:55:a1:45:d3:5f:f8:
28:33:28:1f:67:65:bf:50:51:4a:86:9d:d1:bc:d5:f9:64:0e:
46:c7:8e:44:d9:9c:b9:ee:aa:be:80:44:fb:83:6b:2e:a1:80:
92:c7:71:1c:18:f2:56:46:21:b6:8b:42:fc:c6:52:ea:ae:53:
d3:94:b3:cc:ce:50:07:47:40:72:f8:6a:de:4d:d5:35:87:ae:
52:ac:89:70:4f:51:22:2a:22:4d:ec:f9:c7:41:0f:69:9b:44:
1b:1c:b3:5c:34:54:c5:bb:0c:07:17:26:ca:8b:8f:cb:ad:aa:
e4:ca:a5:d7:b0:6d:d7:ba:a5:1d:67:45:c0:8f:d3:d2:a5:e6:
12:89:19:85:66:93:59:1c:9d:9f:55:15:cb:8e:cb:f6:f1:1a:
35:dd:b7:4c:e3:d3:b9:23:9a:ad:16:9c:67:68:92:ca:d0:26:
4a:82:3a:53:6e:26:1b:03:1d:5b:63:49:d7:53:c3:a0:b1:6e:
21:53:b3:35:6a:8b:c7:7c:7c:82:c1:d5:c9:7b:f9:20:63:f1:
29:0f:b3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:45 2025 by rpki-client