Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: JRejoasd2Wt1VEsiPPdRv+0FPejBIQT1UnBrR99479A=
Subject key identifier: A6:51:47:30:AB:61:97:77:B9:23:BA:EE:7C:97:61:E5:3B:66:83:79
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 0198D54DC6222CE98D624736D08505F50B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 054A
Signing time: Sat 23 Aug 2025 05:01:40 +0000
Manifest this update: Sat 23 Aug 2025 05:01:40 +0000
Manifest next update: Sun 24 Aug 2025 05:01:40 +0000
Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: s4i/sNxXFsVlMUFfAkwlXLlD13FeK7RI2o6CXaVNw0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c6:22:2c:e9:8d:62:47:36:d0:85:05:f5:0b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Aug 23 05:01:40 2025 GMT
Not After : Aug 24 05:01:40 2025 GMT
Subject: CN=a6514730ab619777b923baee7c9761e53b668379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:6f:3e:70:99:5e:9e:14:f6:dc:08:16:d2:
94:b6:4b:a9:c6:cf:2e:0b:4b:63:9e:5c:a8:e2:5f:
70:c0:b1:a2:73:47:15:c0:97:4c:94:70:af:7f:e0:
c5:81:cc:0a:7b:55:a0:d5:54:bb:c8:8b:72:7a:ea:
b9:43:5a:56:e7:4c:e4:e5:5e:dd:07:4f:a7:1b:20:
d0:b0:1e:51:4a:df:ca:b0:0c:5f:f1:98:37:ff:98:
82:5f:4c:ae:59:2b:bc:55:c6:36:71:36:f0:e7:ea:
71:1d:13:00:e4:de:b9:31:df:0b:f7:5a:87:48:5b:
a6:a9:30:35:1c:5e:55:55:ec:36:02:a3:8f:68:44:
ee:e4:c1:b0:b3:2c:e2:06:05:de:2b:2c:ed:03:e3:
59:35:17:66:bf:b0:74:c3:df:de:7d:2b:ca:95:44:
ae:e6:0e:69:d2:bd:92:4a:6c:e4:a9:69:c3:34:a4:
a5:c5:76:f2:bf:92:e4:14:77:a6:ca:48:fc:39:83:
a7:57:c1:55:96:80:45:8b:1f:85:ae:81:eb:c6:ef:
63:f7:ae:8c:2d:1e:57:fa:f8:6f:44:4c:77:9a:0f:
13:48:f3:dd:90:ab:7e:28:d1:cc:dd:56:42:bf:30:
6b:3e:c0:2d:23:09:1a:29:b0:8c:e5:e3:37:29:1b:
5f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:47:30:AB:61:97:77:B9:23:BA:EE:7C:97:61:E5:3B:66:83:79
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ed:ed:28:84:09:7e:dd:db:a4:fc:9f:cc:c6:d2:09:a7:87:
79:6e:fe:20:22:b1:4a:1a:9c:6a:19:f0:6b:66:5a:96:9b:19:
d2:8d:f6:c0:b2:31:de:91:42:76:e3:13:4c:53:0c:a0:53:40:
f0:44:18:d6:42:b0:20:b1:af:a7:ca:b7:2c:e3:93:89:6e:21:
e8:f7:4c:3b:fe:9a:d9:9e:c2:7b:7d:f5:47:ac:fb:16:25:b3:
eb:b1:c7:b7:1e:82:2d:2a:49:f1:aa:a6:be:55:92:0d:5d:59:
8a:16:cf:12:13:a9:f4:4f:d3:41:d7:c6:1e:67:1e:e2:8d:8d:
f1:28:66:6f:42:79:83:c8:a1:50:60:6a:ce:d5:a6:65:aa:b8:
b6:3b:a3:d9:6f:16:39:b0:6a:b3:2d:a8:97:81:35:c3:a9:2d:
39:00:15:de:f8:57:40:32:89:60:86:dd:1d:60:21:fa:68:eb:
52:64:d4:1c:0a:38:57:6d:7b:6e:34:78:7b:bb:65:5e:ca:70:
7f:48:ee:be:44:fa:59:52:bd:2c:3b:5e:67:48:4d:7d:14:8e:
01:bb:08:2c:7d:04:c1:ec:b1:c9:2e:b7:eb:6c:1d:20:2e:b3:
df:30:72:c9:a4:09:dd:78:ad:d8:08:be:cb:12:f2:09:90:15:
d1:09:4e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:46 2025 by rpki-client