Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier: GIkEkKDbWcH1vYonfuQLuFNqKDVPpicIRCXqhh5j5tI=
Subject key identifier: 5F:AA:89:D8:AD:27:9A:C1:84:8C:1B:4B:F7:47:FE:F7:1C:DF:88:39
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0198D5838DC5606CAE8CD046AA17B6BB5D7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number: 0DC6
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
3: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
4: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: 1wuI0wJR8lQbuwqA3WEqzjWxmPhtM8iiM8B2NeiKwjI=)
5: dpxenuQjvci3ZpL8nHgF9W3MKcg.roa (hash: 6lYuC3m8waBrvvEp1GSL1BkXD3kqcshc7yTLgiT2sJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8d:c5:60:6c:ae:8c:d0:46:aa:17:b6:bb:5d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=5faa89d8ad279ac1848c1b4bf747fef71cdf8839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:4b:f6:ff:c6:c6:3f:29:0f:5e:e4:a1:10:
7b:de:6d:22:71:6e:8e:9b:d5:19:16:b4:7d:e3:93:
11:90:b0:7f:56:be:02:7a:3e:1e:21:69:7f:83:39:
ac:a4:d4:c2:55:39:82:38:b9:67:d6:82:03:45:71:
18:49:59:2a:4e:f6:ba:e0:d1:41:d8:5f:d0:cf:b1:
86:73:bd:06:29:f8:a8:bc:3b:7b:bf:47:c9:34:0f:
eb:fc:07:ac:a6:9e:a2:5e:4a:5d:de:ac:8b:c5:92:
80:23:97:ce:d7:ec:5c:89:0e:6d:99:c5:73:59:6c:
33:e4:96:f4:f1:db:68:b3:31:73:7c:1e:00:c8:7e:
e1:99:70:c6:ff:c4:b4:7f:e8:b1:a6:58:10:66:08:
0c:5d:e5:f8:d8:dd:77:fd:af:47:a8:a5:ad:d1:fc:
66:fb:ea:08:be:b1:6b:b5:69:66:17:84:56:e2:db:
d5:31:8e:ea:74:07:45:c2:60:13:0a:c3:c5:f4:43:
ee:70:31:71:f1:59:6f:e3:1d:a7:37:e8:e1:79:97:
26:54:a0:1b:84:5c:d7:cc:a2:80:8d:3d:4e:57:c1:
51:09:82:8f:4c:d1:f0:f0:e7:aa:11:83:b8:48:52:
9b:fa:95:63:6c:6e:c5:93:15:aa:15:72:b0:21:70:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:89:D8:AD:27:9A:C1:84:8C:1B:4B:F7:47:FE:F7:1C:DF:88:39
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4b:75:6b:22:0d:fd:05:7e:ef:f9:5e:81:93:ef:94:c7:b6:
a5:6d:8e:ec:50:b4:e1:8a:9e:af:81:f0:d1:c1:ba:e2:50:f0:
b7:c9:1d:a7:b8:5f:75:d0:8d:bf:69:9a:3c:27:34:17:58:a7:
56:67:45:4b:a4:11:88:b2:53:fa:0c:49:17:65:54:6a:44:dd:
b6:a0:5b:bc:13:31:3c:52:80:49:86:53:dc:2c:9d:cf:bb:55:
b4:ed:17:18:b8:34:c6:3a:f7:b3:8d:34:3c:c2:7b:34:d9:d5:
d3:50:ce:a2:29:d5:ba:58:9a:0c:e2:24:ac:d8:f4:d2:9b:8a:
8f:df:bf:45:ba:35:47:9b:18:07:9b:6f:be:52:f7:fb:e3:52:
f0:5e:d6:15:0c:3d:30:3f:b8:a9:01:26:66:1f:d2:b8:5a:8a:
b5:6e:b9:b9:2b:97:7c:da:d9:35:69:52:82:10:2c:cd:a2:79:
59:77:f8:37:24:72:25:50:68:3e:9d:44:8c:66:95:ae:cf:15:
2f:ad:a2:02:b0:62:48:a7:74:cc:41:3d:e9:01:a5:d6:66:f3:
36:ea:ba:8f:75:48:58:ff:46:67:c6:ee:4f:69:9d:ec:44:8b:
d7:b7:0e:26:cc:05:a5:78:1d:8d:72:3e:6e:d7:17:ba:7e:06:
9e:47:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:29 2025 by rpki-client