Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: a97owmIU/zdrDmwiAz+tdxNLxHAL6baxqNmb58qDtts=
Subject key identifier: D1:BD:B3:6F:B8:77:B1:BD:49:47:CB:00:A1:18:86:85:B7:59:CA:D7
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 0198D85116D98C7D10A412960A20DF6C902A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 0599
Signing time: Sat 23 Aug 2025 19:04:09 +0000
Manifest this update: Sat 23 Aug 2025 19:04:09 +0000
Manifest next update: Sun 24 Aug 2025 19:04:09 +0000
Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: 5eIG0xWr3gY9Dvw0RtxYtIh7B4wCz9YRRjsRPB39RWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:16:d9:8c:7d:10:a4:12:96:0a:20:df:6c:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Aug 23 19:04:09 2025 GMT
Not After : Aug 24 19:04:09 2025 GMT
Subject: CN=d1bdb36fb877b1bd4947cb00a1188685b759cad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:d3:d7:f8:ec:33:33:b0:30:1a:ef:41:54:
a9:25:1d:8d:50:cb:29:ee:46:74:97:e2:b8:78:bf:
8b:10:4f:13:2a:c7:a1:20:0d:16:41:49:0c:a9:11:
4f:43:c6:e5:ce:ba:c6:e1:c0:ad:ed:98:f4:24:4d:
a1:93:9d:66:54:67:87:f9:62:73:09:de:1a:36:88:
68:da:bb:3a:bb:43:b8:9c:8a:cf:35:09:0f:da:94:
50:53:06:e7:1e:9d:ca:9c:20:31:49:ff:14:51:43:
81:9b:af:01:31:f2:c4:24:34:22:23:6d:c2:c5:58:
a0:76:58:af:1c:9b:8a:eb:83:53:11:5a:ba:e1:5b:
32:9a:67:5a:d2:73:bb:49:0e:22:24:17:61:73:e8:
8f:36:5e:2d:29:43:71:64:e3:1f:51:f4:1c:c5:ea:
f1:ea:99:79:05:c5:24:7c:40:56:f8:a5:d9:89:39:
0e:72:91:f8:23:d8:ba:6b:d3:6a:d7:bf:00:09:a9:
c1:f5:a3:3f:e8:66:6c:85:2c:c7:69:04:aa:ce:8e:
9a:45:87:11:98:60:8b:55:29:69:6c:d1:d9:6f:52:
92:e5:b3:3e:55:a1:ea:a2:36:9a:33:ae:fb:7e:a5:
1e:20:7f:2a:68:ed:16:56:b5:2f:a0:02:40:60:96:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BD:B3:6F:B8:77:B1:BD:49:47:CB:00:A1:18:86:85:B7:59:CA:D7
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:25:af:d4:26:77:ef:16:d6:4a:69:66:11:9b:9c:46:a8:11:
91:2e:fd:97:f8:29:39:c7:5a:c4:bd:19:95:eb:52:04:da:47:
27:95:12:c7:a6:ee:3b:64:7c:f7:8a:36:ff:55:03:87:4b:86:
59:d2:d0:99:73:d1:2d:90:40:fc:84:6d:4d:1d:33:2d:c8:cc:
c7:9d:c5:06:ca:12:5f:1e:f0:99:10:93:1f:ae:e9:d7:b2:30:
84:40:39:48:d4:d1:18:39:a3:9c:cf:8c:11:17:ec:21:0b:f9:
d9:12:57:1d:c1:42:48:b6:36:55:c4:1a:25:6e:39:f3:22:5e:
9c:d3:ca:0d:d3:d9:a2:be:75:76:62:ce:21:bf:d2:cb:31:80:
c5:77:7b:ec:2d:20:53:88:ab:2d:ef:8e:66:ad:3b:0f:0d:f0:
9e:2a:dd:2e:53:cc:6c:de:fe:bd:d0:05:01:89:bb:a6:b4:14:
55:5e:89:ff:5c:70:b0:0d:80:61:d9:53:c1:0b:24:e5:7c:db:
7c:c5:ad:39:0f:75:1c:7f:82:c8:dc:00:3e:20:1d:21:e5:65:
66:b8:b4:2b:b0:f1:57:0d:3b:9a:a4:d3:f4:2a:99:fe:50:56:
25:50:ad:09:91:2e:75:9d:a0:2b:47:54:ea:41:0a:55:10:57:
b7:f0:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:24:57 2025 by rpki-client