Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: Qtv9Fq1uuwm1Yb7wNIQMqW2NJyRe6XgA0plAl0Bl2ig=
Subject key identifier: 86:83:CB:7E:86:61:4D:2B:3A:34:7E:08:82:E2:A3:05:D3:AC:CB:17
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 0198D4E0A4D0C9E89E38A5D81912F08DB6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0562
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: SQ66cHvBfkqcFdO8WFir/38mO9W1GGedzVJQ8KzG9s0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a4:d0:c9:e8:9e:38:a5:d8:19:12:f0:8d:b6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=8683cb7e86614d2b3a347e0882e2a305d3accb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:25:b9:0f:e7:ad:aa:0d:a8:87:0b:06:4e:
bb:81:dd:86:9f:76:5c:0d:5c:7f:c0:12:3b:53:b6:
95:98:98:a3:da:31:0f:11:20:04:8e:3c:4a:20:da:
3b:4a:a7:03:94:5e:b4:28:b6:17:7d:ba:a0:77:88:
aa:a4:1e:6c:5d:82:df:0f:89:52:e6:43:2a:52:b8:
a8:9a:0c:92:b1:40:c4:1c:3d:01:13:bc:3d:94:3c:
ae:cf:ad:34:73:1c:15:02:8e:65:c1:98:5b:8e:28:
50:ed:77:2f:0c:89:76:d1:26:07:8b:7f:ef:50:9a:
51:98:e4:d8:54:2a:ce:2a:ca:8f:f2:4a:c9:cd:2d:
9e:41:4e:57:32:88:d0:39:d1:41:5a:af:91:5f:df:
03:43:4f:97:62:0e:db:db:30:da:ba:6e:03:9f:71:
1a:c2:cc:b0:7f:ef:6b:42:f6:80:68:33:ad:0c:d9:
2a:2c:25:20:76:04:3b:cb:d8:a3:c9:a9:f7:14:f8:
8d:22:e1:ed:62:8c:75:f0:5c:7a:57:16:7e:33:85:
8d:e9:35:68:c4:28:d9:4c:16:50:06:f5:a8:dd:b8:
7b:09:85:fa:02:db:33:55:d9:3c:52:ba:b7:a4:b4:
e8:06:2a:18:86:2f:cd:a8:e0:7b:a9:70:2a:f0:0e:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:CB:7E:86:61:4D:2B:3A:34:7E:08:82:E2:A3:05:D3:AC:CB:17
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:67:2b:3e:36:d7:3b:2c:7f:e1:bb:af:6a:2a:96:fa:30:52:
78:33:f4:b0:41:bb:dc:fa:4f:2a:e0:5f:98:c6:9c:1d:3f:96:
b7:2d:9d:d4:a9:98:4d:ab:55:cc:31:ee:34:56:57:d2:7f:c6:
e1:bc:3a:48:03:af:4d:f6:97:2e:06:d8:d6:59:c2:7e:bc:71:
42:b8:d7:72:57:04:36:6d:e4:2b:a0:f5:26:3b:d7:ed:69:59:
e6:fa:47:1e:f8:bf:b2:29:19:da:50:c3:e1:1f:1a:20:2d:a2:
9a:ca:83:5a:cb:52:51:6c:19:05:31:a8:53:83:c3:1f:b1:ce:
0e:b4:3d:e7:ca:c2:b5:b3:b5:30:be:e2:68:78:c1:c2:eb:4e:
02:6a:f7:85:2e:a9:c2:07:35:37:91:f9:f9:e3:eb:fc:12:cc:
e2:35:37:71:89:ef:d2:f6:c9:13:61:eb:ef:f9:60:8c:67:39:
b4:7f:a0:b5:13:3b:2b:c0:da:37:9d:c4:b0:7b:6e:03:0c:b2:
51:e7:5e:fa:72:4c:4c:c1:53:28:36:be:d8:b1:cf:33:b8:36:
cb:00:a5:c4:17:14:83:38:de:50:2c:86:dd:14:27:8f:fd:19:
3a:6d:26:98:d1:ff:9d:af:95:e9:1e:35:79:c1:65:31:0e:50:
9c:41:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:32 2025 by rpki-client