Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: SBxL1knJlkCzAIir9VDXqY6bJAzb4hEmcfpKuZX9Dk4=
Subject key identifier: 6E:D7:61:5A:32:75:D8:17:D3:B1:5D:C2:6C:E6:37:C0:9A:71:28:42
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 0198D4E08DB1E1BF5146D392545F1F8E8371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 1044
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=)
2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: e/zl9AT5sm5p0xW+NLDzC72LLaIY4F4L7+f1+hMoc5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8d:b1:e1:bf:51:46:d3:92:54:5f:1f:8e:83:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=6ed7615a3275d817d3b15dc26ce637c09a712842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:a5:92:bd:22:26:39:b4:a9:ba:1b:b7:15:
66:72:17:62:a8:9e:bc:4c:d1:87:46:42:27:c9:d2:
80:a8:13:bf:7d:39:fd:b5:d5:0a:eb:6d:4a:29:be:
10:7d:0f:e5:c4:3c:4c:d5:fc:d4:da:26:82:fc:f7:
68:dd:42:e9:2e:6c:01:0d:02:dc:68:8a:89:6e:6b:
a0:3f:31:ae:bc:9f:3d:b8:ca:5d:4c:bb:89:c2:56:
10:f5:b3:61:31:3f:c9:d5:54:f1:80:50:1b:e7:ef:
c3:4c:17:6a:e1:3e:72:56:e5:16:5f:cd:da:1d:15:
b6:db:12:16:ad:c5:04:8c:d4:b7:69:1e:fb:77:bd:
d6:62:8a:7f:3c:f2:d0:9e:ed:e2:39:ed:51:93:e1:
72:f4:f1:0f:f9:c7:bc:d9:0e:4c:b7:ad:82:74:13:
c6:1c:f3:ae:af:fd:6b:b6:f8:8a:06:54:e2:8a:eb:
eb:28:fe:f9:46:31:d7:70:10:66:2b:64:a9:8e:0f:
e4:6f:b6:f1:2f:26:f4:a1:e2:c2:b2:59:e8:17:df:
cf:0b:8f:18:03:19:be:c5:cb:89:5f:62:d0:db:b1:
8c:6b:80:76:6d:82:34:55:3e:9c:87:4a:3b:87:f8:
fd:a2:d2:f1:d4:d2:bb:01:b5:dc:9a:74:6f:dd:26:
10:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D7:61:5A:32:75:D8:17:D3:B1:5D:C2:6C:E6:37:C0:9A:71:28:42
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f0:38:4c:ce:43:7b:cb:91:43:11:41:06:de:6a:71:cf:54:
99:79:b9:ea:30:82:93:32:6c:14:d4:c6:46:42:ba:6d:db:f8:
6c:6b:a6:59:d9:11:50:db:06:d2:8d:e4:2b:f2:e1:d2:ed:7e:
0d:e3:e9:2f:d8:29:75:a7:25:b1:cd:0c:ef:39:4f:e1:19:24:
74:9f:10:52:9c:5e:13:89:78:34:86:f9:d0:31:50:03:b1:52:
3f:39:21:d9:45:c8:4a:81:97:80:b9:d8:66:a6:84:7f:68:48:
35:09:21:13:b0:7b:e7:d3:63:cc:dd:57:50:ef:cc:1d:f4:b3:
5f:d7:bf:25:fb:b5:bc:da:f9:93:c7:4f:37:22:a2:1c:9c:39:
b0:5c:7c:70:72:33:02:b6:bf:9a:5a:52:e4:9e:de:2d:73:57:
81:c2:b3:c9:33:04:be:6c:c5:b9:70:d4:d0:c6:52:df:6d:19:
d4:c9:b1:72:64:13:41:d5:e6:d9:d5:15:1c:de:bc:18:7c:a2:
23:17:6f:a7:17:91:26:27:ea:98:f0:5b:98:31:b9:89:08:8b:
e5:3e:26:25:b3:91:78:24:68:68:13:39:c8:15:9e:99:b4:90:
e2:3f:45:e8:f0:3d:c7:d3:8f:fe:9e:a8:9b:01:09:f3:40:66:
ac:11:44:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:15 2025 by rpki-client