Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: vDQqC2BGUFmHRM6CO0n0oxlSJ2t20XSZdQXbc0rTTqU=
Subject key identifier: 12:2B:D3:EC:8C:63:DE:50:5B:F2:1D:A8:1D:1E:F8:E1:57:BE:23:75
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 0198D65F5ADC71C28495F07262D7142753F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: kFAWzJxAiMhkm4NOvHOiD5PY66g.roa (hash: QJZEuzHLkJsVvRtJ8dcL8i0clH/1NRZmPUpPgEFazCw=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: fQV516AdmKTMGiqEShbdfyC+c+B0TpSUrI8T8Ri90BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5a:dc:71:c2:84:95:f0:72:62:d7:14:27:53:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=122bd3ec8c63de505bf21da81d1ef8e157be2375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:fa:29:b5:ef:db:3f:2a:6d:96:c0:90:3e:
f5:6a:23:d4:eb:cb:29:ee:ab:a6:bc:f2:1a:ab:c9:
68:f4:39:bd:ea:7e:40:4c:c1:03:ed:fd:e2:90:53:
5c:70:98:8d:4d:2c:aa:26:9a:16:3a:a5:75:f8:87:
d7:86:bb:96:ff:50:a5:04:1b:65:6f:85:38:d4:13:
c2:0b:cf:b8:00:a1:87:9c:d1:5c:20:10:f1:ec:da:
85:e7:1c:a8:9d:12:38:a1:6c:67:bc:0b:6c:56:27:
0e:0b:55:a3:4a:9e:63:49:30:af:51:12:d8:24:43:
f3:b2:49:b7:da:6d:9a:47:ab:05:21:8c:7d:a2:18:
f0:ad:af:cb:87:8d:e4:eb:88:f0:6a:99:4f:fd:3b:
c5:52:c5:23:3e:07:c2:e7:f9:5c:65:53:5a:62:cd:
47:a0:6f:43:8b:c8:c3:c9:a1:05:b3:5e:6f:1d:d9:
05:f8:d6:d9:9e:9c:a6:57:17:15:eb:0c:b0:ca:db:
a6:70:c4:4b:9c:58:77:9b:cd:e5:0d:7e:06:cc:d5:
90:f7:a0:c2:89:f0:1c:d8:a1:30:d5:d0:8c:1f:5d:
3a:d3:06:8c:3b:09:d1:e0:d9:91:c3:52:f0:af:ff:
68:0d:56:ee:83:0a:16:1d:73:a7:97:db:31:d1:40:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2B:D3:EC:8C:63:DE:50:5B:F2:1D:A8:1D:1E:F8:E1:57:BE:23:75
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d4:4b:7a:13:a4:14:59:db:3d:4c:4d:b1:38:03:e4:01:ee:
25:2f:88:d1:84:d8:a5:a7:ad:e7:e9:7c:bb:aa:00:4d:39:47:
e3:69:24:58:5f:a3:f9:92:6f:27:90:f4:25:a1:66:18:f7:c3:
18:fd:c6:6d:02:26:bb:ef:98:f4:df:c2:26:f0:73:61:19:21:
43:12:3f:ca:a7:98:d1:2a:ed:e9:9a:3d:ad:52:32:e6:48:cb:
60:b9:a7:8f:9b:28:00:1a:38:62:c0:9d:fe:d3:a0:87:f4:30:
87:f4:4d:84:49:d3:75:c9:60:f5:4b:54:8e:9e:ca:32:62:e6:
5f:99:5e:ac:64:73:41:7b:f9:55:96:67:9c:63:14:a0:88:fd:
dd:75:5a:c0:c8:61:87:61:ca:65:89:bb:0d:0f:b5:73:23:ac:
95:43:01:b9:69:88:b7:cd:df:b0:03:37:07:b3:0b:ab:b5:77:
67:da:6e:ec:5d:56:d7:01:76:7c:40:6b:1f:63:bc:68:be:c1:
e2:da:05:fd:71:94:64:d3:eb:b2:af:8e:29:39:6b:ec:88:a3:
87:db:b0:38:8f:33:46:7c:1d:75:8d:15:d5:a5:09:98:a4:de:
ef:48:95:e7:14:de:91:f8:5c:92:81:58:14:6f:92:10:17:bd:
c9:3f:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:21 2025 by rpki-client