Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: 9EEPcMZ9uO36yqrGRP4uNuMK7+TDkm4rx7P8du6BOXU=
Subject key identifier: 0B:58:22:CB:DE:90:23:F1:4F:EB:15:FF:77:5B:2D:36:70:A1:93:B8
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 0198D5BBC6317BC1F790E684F21A91FDDD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1384
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: yPsVWqb9ubRVfWAivDil6akiJbv1btqKoPdRI0Wx+WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c6:31:7b:c1:f7:90:e6:84:f2:1a:91:fd:dd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=0b5822cbde9023f14feb15ff775b2d3670a193b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:06:f6:57:4b:02:52:f4:83:ec:74:47:3f:
01:19:77:2b:21:e1:11:c7:ba:ae:2c:40:3e:fd:42:
7d:15:09:02:e2:39:14:b6:fa:59:9a:b0:54:85:51:
11:b3:6c:67:79:de:e3:fe:3e:b9:57:53:70:5d:4b:
0b:33:d0:77:f4:2c:bd:bd:a7:e1:93:d1:df:9b:be:
8f:fd:1e:b0:f4:92:b9:2d:06:92:f2:1e:ba:ff:f6:
90:7a:6d:ed:ab:9d:4b:07:29:58:dc:06:35:24:61:
22:c9:06:39:65:67:22:29:30:67:f1:88:53:97:a3:
0d:9c:d0:f5:54:a4:7e:e1:eb:61:ed:53:2b:65:10:
d2:3d:2b:f2:87:da:77:7e:48:91:95:42:fc:10:22:
42:5f:1d:3b:7d:bc:56:1d:c8:04:8c:4f:79:5d:e3:
f0:9d:fa:3d:36:0d:12:1f:40:6a:ab:1b:8b:60:93:
8e:9e:3e:d3:ee:32:be:6b:b7:4d:f8:d4:f8:f2:36:
d0:5b:15:a8:ad:12:1c:12:89:90:3a:1f:ef:9c:5a:
c1:0f:6e:f5:2d:fc:b5:5e:3c:c4:83:7c:77:d6:81:
49:09:25:20:82:21:76:a3:9f:b1:bf:4c:68:8c:b5:
09:95:bb:ab:83:d8:8f:48:99:11:73:79:f3:7f:bf:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:22:CB:DE:90:23:F1:4F:EB:15:FF:77:5B:2D:36:70:A1:93:B8
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d4:d7:90:ec:5d:e6:32:f2:cf:23:66:9e:a7:8a:be:3f:46:
ea:7c:e1:d5:60:c8:26:f6:24:03:7d:0d:5b:7b:ee:fe:c9:86:
ed:24:ca:69:38:b3:17:25:93:e8:13:e1:ba:da:fe:0c:36:01:
d1:c2:90:e7:95:e5:ed:ee:e7:84:81:fc:d1:5d:89:46:28:be:
5b:a8:b4:d0:8e:0c:3f:50:c8:c6:18:9f:6b:0d:37:bf:f3:6e:
c8:0c:21:73:80:e6:03:99:45:39:9d:19:bd:97:37:24:59:84:
40:03:26:60:fb:8c:4d:0b:fd:20:49:9b:35:7a:ff:31:c0:df:
45:ed:e6:0d:53:02:4c:71:51:1e:ea:24:dc:ca:9a:dd:c5:bc:
c0:01:67:38:63:31:9c:36:f7:d4:9a:96:0a:c8:86:53:90:ad:
b5:db:e3:2f:e1:eb:3a:02:9a:97:29:b4:5d:a4:a0:86:dd:63:
f5:b9:ed:ec:b1:a0:78:f7:87:05:46:4b:f0:85:c7:54:32:dc:
3a:96:bc:d2:4a:8d:28:cb:22:f8:87:c5:c2:67:d5:bb:ec:ea:
4a:57:36:6f:89:19:45:92:cf:c4:e9:10:88:b6:ab:59:cf:df:
e7:d4:01:c1:6e:27:ae:37:c9:fc:43:d2:36:19:34:1f:58:96:
07:23:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:34:58 2025 by rpki-client