Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: 23g5m9aP2ZCywpB63P+WZC0ZiGlcKpgfjerCTMy9aFo=
Subject key identifier: BC:C3:2A:DF:7C:D7:4B:94:EF:EB:2D:FC:6A:F5:EE:25:35:59:2A:07
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 0198D54E7B3752E1660084989D98A1FE4ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 05:02:26 +0000
Manifest this update: Sat 23 Aug 2025 05:02:26 +0000
Manifest next update: Sun 24 Aug 2025 05:02:26 +0000
Files and hashes: 1: BECHjRO1sNTrECspSOXRaHeMWRM.roa (hash: CUP2bSCGR2R7pQJIeBFSspVhJwtI4r06AoqaZ9LnrhQ=)
2: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: FqTir8Y3lH7y6XCjzlZD3v/NnDejQFewQVROCKhnnv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7b:37:52:e1:66:00:84:98:9d:98:a1:fe:4e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Aug 23 05:02:26 2025 GMT
Not After : Aug 24 05:02:26 2025 GMT
Subject: CN=bcc32adf7cd74b94efeb2dfc6af5ee2535592a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:e6:94:55:84:ce:c4:45:c8:74:c7:24:0a:
dc:3b:d9:ec:19:da:fe:68:ce:7b:b1:31:d5:e2:b7:
c5:0c:59:82:83:d8:d1:2a:3c:b6:c6:08:02:30:51:
db:49:b4:7a:68:97:a3:4d:25:52:ea:a3:7e:67:87:
bd:a4:82:d4:45:e2:e4:ff:bb:c1:b0:3c:f7:aa:a0:
7a:ce:4b:c3:44:05:e2:24:d6:45:4e:9a:f9:a8:2c:
46:f0:4d:37:e9:5c:9b:7d:0a:e7:c6:42:56:b5:55:
3a:59:3e:68:75:35:12:c3:23:a0:d2:77:72:42:ed:
ff:1d:d4:24:af:45:5a:3d:6c:f5:3d:99:a7:c2:44:
54:7c:de:3d:f8:7e:01:e3:8e:2e:95:c3:5b:30:80:
58:f3:bf:84:3c:91:67:03:0c:08:85:0b:73:a6:9d:
50:9f:c6:01:8d:72:df:26:7d:c3:27:04:0d:0d:5e:
1a:4c:ff:7d:fe:23:d8:e7:99:80:df:a2:73:ba:57:
c0:fb:fe:ff:de:75:f1:64:19:f9:4f:35:00:d2:a2:
21:7b:7e:44:2c:75:e1:fc:92:e2:eb:1b:b9:a9:c5:
3b:f7:4f:52:ed:f8:01:e9:9a:74:cc:ec:13:a7:3a:
74:e6:56:ef:2e:b8:ee:c1:de:4e:59:ee:a1:96:c9:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:2A:DF:7C:D7:4B:94:EF:EB:2D:FC:6A:F5:EE:25:35:59:2A:07
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:72:2f:15:2d:f5:a0:7d:d7:b6:a9:cf:45:c4:43:81:61:
36:a6:ab:67:bc:e8:74:ec:72:28:55:ba:e7:45:72:6d:77:04:
7f:5d:0c:3f:7c:55:65:62:ed:d6:72:80:b5:e4:f7:4a:3e:6f:
66:99:2e:81:0b:8d:bd:9e:35:b4:50:13:91:50:bd:a2:93:65:
31:88:94:78:e7:f4:04:1d:2d:d4:ed:56:c2:f0:df:2e:2b:05:
c8:93:b1:74:9e:2e:75:71:63:07:d8:db:15:6a:6f:10:82:05:
e5:85:f0:ed:dc:ed:ab:49:2a:de:62:d6:e0:3e:8a:2e:16:9a:
7e:96:bd:ac:ac:87:3b:65:65:b4:cd:ec:c5:94:7a:38:48:c8:
20:7d:6e:79:49:06:c1:b6:fc:ab:c4:b9:d6:c1:a0:55:8f:1d:
bf:f3:a8:6e:41:d3:30:3a:4f:cd:4e:ba:db:77:d0:39:e4:d1:
71:a0:b4:de:fa:b1:c3:73:1f:13:35:72:b9:ec:3d:e6:03:0f:
1b:69:fb:33:e8:39:c7:c7:49:92:bb:bd:9a:cc:0b:98:f9:dd:
64:19:4f:58:73:b2:9f:f5:ff:c2:ee:32:39:89:75:c8:55:89:
c7:da:6e:3a:bb:50:bb:37:b2:2e:49:c2:f1:5e:f0:17:20:dc:
ab:01:69:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:08 2025 by rpki-client