Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: eWLS8Y3hOg0/mE00iAL2v5DszwfiWRt2H84YhT7BUZQ=
Subject key identifier: 30:07:33:BE:04:A5:DE:A8:62:4D:39:5C:74:EF:EF:B2:42:0F:4C:B3
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 0198D69842C3C1B8B7E7B67B18BC5858480C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 11:02:39 +0000
Manifest this update: Sat 23 Aug 2025 11:02:39 +0000
Manifest next update: Sun 24 Aug 2025 11:02:39 +0000
Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: MLzlMse0kA0gbRoljIvTshM1qE+UKBrhvjDqOlo4mLg=)
2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:42:c3:c1:b8:b7:e7:b6:7b:18:bc:58:58:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Aug 23 11:02:39 2025 GMT
Not After : Aug 24 11:02:39 2025 GMT
Subject: CN=300733be04a5dea8624d395c74efefb2420f4cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:15:39:36:1c:c2:ef:f7:76:fe:1b:c0:43:
d7:f2:92:06:bd:56:2b:26:b7:e5:76:91:14:50:84:
2b:73:7b:e9:62:d4:cc:1a:a2:25:ca:19:c1:ae:da:
4d:b5:b2:15:f3:68:11:18:2b:6c:ae:ed:3e:8c:7f:
42:2f:07:7d:89:92:8e:3a:e6:75:fa:49:69:c4:b4:
ac:7e:12:a3:00:b9:8c:bc:2a:6e:16:15:1a:62:64:
27:89:94:a8:6c:a8:c7:3d:5c:0a:aa:01:18:56:a2:
c5:08:5d:3c:dd:9c:80:31:69:54:66:4d:92:d1:eb:
ab:f0:ab:64:d9:a2:0b:c9:ba:49:d5:fa:46:f6:b0:
11:fc:86:37:9e:50:db:33:58:a3:82:c3:e5:53:a2:
1e:95:3d:2a:05:a2:87:15:67:f1:68:5f:2f:da:6d:
67:77:61:55:f4:ce:db:db:d2:20:a3:f3:39:65:7e:
fa:db:7a:ee:26:fe:87:c0:75:b1:a2:fa:bf:2f:67:
e1:88:82:9e:4f:2a:dd:54:ff:a8:1f:2f:9b:3d:38:
90:1b:50:49:33:11:d9:f9:66:a3:f3:98:31:17:23:
91:f5:78:25:bc:97:6a:77:81:f8:de:65:ce:5d:cd:
a0:b6:50:5d:b1:c1:ac:af:10:98:e9:97:95:d8:7f:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:07:33:BE:04:A5:DE:A8:62:4D:39:5C:74:EF:EF:B2:42:0F:4C:B3
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4a:fe:51:aa:e3:e3:e9:95:ce:47:ff:85:84:5a:db:f4:b0:
ff:8f:db:0f:4f:7d:39:a4:08:c5:25:c1:02:11:d5:95:d3:dd:
ad:ec:22:59:03:02:bf:24:16:0e:47:8b:19:09:5c:18:1e:37:
98:5e:ea:1b:62:6d:8b:0c:55:2b:f8:67:75:8f:a0:90:ff:81:
cb:3e:cd:48:de:77:c7:48:ac:4b:68:77:b4:7b:d9:0b:52:44:
3f:ae:90:13:2f:7a:da:12:92:28:69:bb:d0:b4:e1:fb:6c:a5:
70:0b:a0:24:35:06:70:23:ff:8a:9f:b8:50:dc:c3:ae:9e:a5:
c8:ca:16:38:52:c3:65:df:6d:a4:81:e1:34:93:ed:f6:7f:56:
ca:72:ff:b1:ad:db:9e:10:74:98:06:44:25:5b:8c:48:8a:3a:
14:79:c5:94:3b:f9:13:fd:43:19:1d:ed:06:6f:96:39:92:05:
23:fc:3f:6e:13:3e:24:b3:48:73:b2:25:a9:0a:20:64:12:7c:
42:6f:eb:28:9e:6f:b7:81:2c:67:14:32:c8:85:c0:4a:b7:70:
a4:b0:40:19:b6:a9:4f:39:5d:74:08:ab:1b:ea:94:a6:20:2f:
aa:2b:3e:e9:18:66:fc:35:30:94:41:3c:9e:81:90:72:65:ea:
2d:1e:09:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:45 2025 by rpki-client