Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: G3/jBP08mcBdn/rprOFzIwtRcPdo12JsTzK9JxqZyao=
Subject key identifier: 4E:E9:23:26:2D:F5:68:59:3D:30:9F:55:92:48:9F:C3:0B:33:B0:2E
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 0198D473ED92BE92EA25E175C8057F82359A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: Bdx8dQk7Va/G1dwUAucF3ObkEo0PSnVsR4kaNoFEN6s=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ed:92:be:92:ea:25:e1:75:c8:05:7f:82:35:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=4ee923262df568593d309f5592489fc30b33b02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:aa:14:45:ef:4c:25:78:6a:e9:84:bc:76:
62:c8:ad:39:73:cb:c9:da:cc:9d:4e:b7:70:ba:96:
00:ba:74:ed:9e:bd:89:13:be:d5:33:bf:7b:66:fa:
d3:6f:f5:25:2a:b7:37:4b:d5:40:2b:ca:44:6e:09:
5d:56:9a:6e:69:c1:f8:d1:cb:4f:7e:ba:c4:1e:c9:
6a:39:f1:b1:93:60:44:0a:e2:09:81:09:28:8a:16:
fa:7c:30:50:e2:62:61:e0:74:5f:a7:d1:d5:c6:bd:
e2:e9:29:18:23:ae:e4:f3:53:3f:9a:84:e1:22:3b:
d6:71:f0:5a:1e:f7:2c:68:aa:6e:b0:f0:57:03:3a:
9e:16:48:bb:85:cd:c8:06:3d:35:e3:48:a2:0b:47:
25:26:29:8e:86:5b:05:83:71:c4:ba:7d:2e:eb:36:
55:b7:56:4b:51:e4:81:ba:c1:38:53:8d:fa:c7:9b:
c7:9d:a0:ed:0e:96:ef:81:fc:bf:f6:64:14:7d:81:
d0:a2:fa:e5:48:f8:ab:a3:00:9d:64:10:16:ed:43:
48:c5:d0:5c:ca:5e:22:66:ea:25:86:73:bb:93:8f:
0b:c8:24:2a:cd:a9:b0:11:d1:fa:71:52:0e:9c:14:
75:52:34:6d:9f:b1:e5:f5:25:ee:16:78:02:0d:76:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E9:23:26:2D:F5:68:59:3D:30:9F:55:92:48:9F:C3:0B:33:B0:2E
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:40:cf:00:1f:21:c5:8f:bd:bc:b9:b4:b9:5d:96:ed:eb:d7:
ff:e8:7e:f5:de:9a:f9:56:5f:db:2d:bf:a5:d4:c1:c2:b7:df:
13:ed:58:d5:e7:80:7c:4d:de:3d:da:41:98:59:a3:3c:46:f9:
c1:86:9c:4f:19:05:60:ed:d8:7e:d7:06:5d:8d:7b:06:16:b7:
60:8f:2a:97:49:bf:dc:00:0e:ea:f5:a9:80:db:14:12:61:32:
68:d5:8d:fb:a2:79:85:79:3e:3b:66:66:a4:8d:20:45:03:cc:
d0:84:a4:77:61:ef:c5:64:4f:98:44:3c:bc:08:d1:65:3a:2f:
b2:c7:f3:c2:70:28:55:77:6f:cc:17:54:38:0f:b9:64:e8:0c:
7a:17:27:32:fb:a6:ef:ea:08:63:8e:91:f1:35:46:41:02:17:
19:37:c4:fb:9c:c0:f3:dd:ff:97:b1:62:0f:c8:26:e4:eb:c7:
25:57:70:b4:78:63:6a:fa:aa:90:e3:02:1f:47:b4:c7:b2:d4:
b5:da:a0:09:25:c8:37:b6:7c:16:4b:f6:da:a9:e1:99:ba:43:
21:2c:a3:99:c3:34:92:63:72:e8:ed:72:d5:c1:16:79:7d:92:
67:4d:c1:7f:2f:29:8a:49:e9:bf:2b:61:81:c7:f7:0f:4a:f6:
a7:a0:76:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:31 2025 by rpki-client