Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: 4RfV8RtlwbYBg0fOmVKWJGKgWMPf2JHK8y+wb8vZIAw=
Subject key identifier: 9C:4D:D0:D0:C8:A1:32:B1:E9:08:8C:CE:9F:76:80:DC:F2:3A:96:39
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 0198D698314ECBCDD2D7C8DDC6CEF935D62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 10A4
Signing time: Sat 23 Aug 2025 11:02:34 +0000
Manifest this update: Sat 23 Aug 2025 11:02:34 +0000
Manifest next update: Sun 24 Aug 2025 11:02:34 +0000
Files and hashes: 1: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: AutHLBEbWfkcNFEOhlcqT/BwzfWWN4YYqKbYbnUJCx0=)
2: wqBO6BWlzfH_2H8niSBLpjOhxuU.roa (hash: 5SSaQkHwuEWAOjr3+WUmjpF1re5YywGBgiTcg/L5BcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:31:4e:cb:cd:d2:d7:c8:dd:c6:ce:f9:35:d6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Aug 23 11:02:34 2025 GMT
Not After : Aug 24 11:02:34 2025 GMT
Subject: CN=9c4dd0d0c8a132b1e9088cce9f7680dcf23a9639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:73:d9:f0:36:39:dc:bf:8a:83:c9:8b:94:
5d:b3:e7:8b:2a:94:85:6c:a5:cd:fc:fe:e5:e3:2e:
bd:75:1b:59:aa:dc:6d:7d:2d:29:8b:0b:d9:91:93:
b5:bf:a8:33:9d:96:e3:fb:c6:89:ab:42:db:56:6d:
d0:d9:88:79:8d:35:fe:04:c0:b6:58:ef:9d:49:03:
09:83:98:d3:1b:f7:7d:57:e1:87:32:92:ba:ad:bd:
f4:21:1e:65:3b:3d:1d:86:15:f4:97:1d:d0:46:96:
13:b3:ee:91:53:86:50:7d:90:de:38:90:8f:24:64:
b7:60:2d:5b:87:3c:a4:03:54:d7:13:a3:53:12:21:
7c:90:56:bf:ea:4c:08:3f:ed:ee:25:f0:65:10:6d:
97:16:24:81:03:c4:a0:c2:64:c0:68:30:87:03:95:
fa:66:7e:a6:66:7b:53:e8:5e:bb:48:30:2a:74:53:
db:3c:c2:56:89:f5:e8:e7:e9:67:a5:b7:17:e0:d6:
f5:c2:3c:2b:88:90:70:3e:56:46:dc:33:57:39:18:
3a:58:22:7f:b9:87:87:aa:99:b4:d5:a1:c3:3a:89:
17:89:d1:3f:4b:7b:27:6f:51:06:54:b9:b6:00:ab:
02:5d:bc:18:0a:64:c9:51:33:18:bf:ea:4e:6c:fe:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:D0:D0:C8:A1:32:B1:E9:08:8C:CE:9F:76:80:DC:F2:3A:96:39
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:38:53:e9:b6:fa:50:26:00:e9:cb:77:7b:70:0b:2f:a6:
75:b3:3d:ad:2e:2f:ce:bc:76:ad:d4:a8:2c:80:89:0e:3c:0e:
69:f8:80:cc:ae:79:21:37:0b:25:a0:48:af:15:2d:71:5f:81:
03:a4:ab:10:f4:c6:e7:75:45:a5:4d:8e:32:3d:bb:cd:21:f3:
87:7a:fa:90:67:9e:47:76:f8:c7:4c:d9:1e:10:42:ba:b2:89:
99:c5:ec:ab:e8:7c:6d:ce:b4:19:00:3c:9f:70:69:04:92:50:
31:d5:c2:65:7d:92:99:3f:a6:78:b9:6a:bc:74:21:8d:71:11:
80:aa:86:2c:b5:cd:60:d4:9c:e2:04:fc:73:54:5c:bb:14:f0:
21:6a:5d:30:55:90:0d:1b:2d:97:a7:7f:30:00:fd:25:69:8c:
d2:ab:70:81:f8:7b:bc:5b:cd:50:5f:ee:05:77:39:5e:4e:cc:
ff:60:bc:e7:43:74:b6:b5:22:ab:5e:14:22:e4:8b:5f:58:cb:
e9:0b:19:47:86:9b:2a:8e:8b:8c:3b:81:48:64:a1:89:e7:77:
dd:47:74:84:e8:1a:6d:a6:c4:ef:92:a6:7b:08:6e:09:d6:9c:
18:b7:78:bc:aa:64:22:17:16:e0:23:cc:a2:ab:30:e5:7e:07:
5f:9d:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:29 2025 by rpki-client