Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: R32CBsVYUmLA9MbvbUsv4bhuS0P1h/ydAXfKp/qIEn0=
Subject key identifier: F8:1D:5C:B4:8E:DB:A9:8D:8D:E2:E3:5E:19:E8:78:C0:C6:D7:45:5B
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 0197B7EAA02FBAB4C5CB572617795C4AFE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:36 +0000
Manifest this update: Sat 28 Jun 2025 19:01:36 +0000
Manifest next update: Sun 29 Jun 2025 19:01:36 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: bMATauugehBLYgJSTY09XML2eGjBHqkatyD1jcOb6ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a0:2f:ba:b4:c5:cb:57:26:17:79:5c:4a:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Jun 28 19:01:36 2025 GMT
Not After : Jun 29 19:01:36 2025 GMT
Subject: CN=f81d5cb48edba98d8de2e35e19e878c0c6d7455b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:03:5b:8c:f0:b5:74:07:6b:26:af:66:79:
c9:e1:c0:d7:29:8d:49:95:21:95:cf:73:8a:28:b1:
d7:44:f7:77:b1:e7:94:cc:cf:4b:b0:26:89:95:0b:
ab:d4:f4:6b:de:f1:fe:0b:9e:21:d8:24:75:d0:16:
22:2a:57:11:2b:9a:88:45:38:08:17:35:2c:b3:a6:
e7:bf:fd:4a:9d:f0:74:66:a2:f1:a8:c6:66:89:8c:
c8:ff:a7:80:6b:97:b9:3f:e1:64:ee:9d:b4:ca:46:
95:e1:81:86:0d:4c:0f:e8:18:80:0f:96:cd:4d:f9:
25:a1:2f:8a:07:7b:4e:9f:92:23:87:b5:4e:1f:91:
b0:3a:5e:4c:0f:42:b3:b5:79:17:f4:3e:7b:b0:04:
7f:7e:22:b8:9a:67:7a:23:3d:b9:9e:13:3d:08:22:
b5:25:13:ff:f9:61:96:bd:b4:b0:46:7b:cf:58:c2:
72:48:eb:09:fd:9f:16:3c:5c:5f:52:79:e7:d8:ea:
4a:6c:bf:32:1e:24:02:23:b3:a9:fd:68:d2:be:c9:
f4:56:47:1f:a3:ff:cd:5f:20:81:8a:df:4f:22:32:
4a:81:8a:b1:19:ec:ec:6f:19:40:80:41:ce:3b:df:
aa:f0:0c:d6:fa:16:1e:3e:e2:65:16:ee:f4:dd:c5:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:5C:B4:8E:DB:A9:8D:8D:E2:E3:5E:19:E8:78:C0:C6:D7:45:5B
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5e:7b:86:bd:35:be:65:d8:72:31:66:0e:2a:84:50:b3:a8:
e2:28:a5:b1:b0:ad:f1:8c:c3:ea:7c:b6:02:74:a6:86:4a:4b:
08:54:e9:b1:e7:d3:a3:b2:b7:e7:f7:08:df:b9:a1:e5:51:48:
b0:25:54:07:fe:6c:1d:eb:a5:01:65:a2:80:52:4f:c3:60:fd:
8c:75:d3:c5:34:e1:a5:21:90:14:40:6d:e7:48:ce:70:1c:eb:
5a:26:af:f1:a5:f4:60:05:f4:f9:83:28:0a:7d:78:0b:17:a7:
30:de:3c:71:2c:04:bb:78:4a:cf:a2:02:63:53:05:28:f3:b4:
57:ae:96:8a:e5:e9:5b:8f:4c:01:86:a7:5c:20:17:e2:0e:ea:
08:67:48:50:e8:a1:64:60:42:bf:9b:6e:84:23:e0:75:bc:c4:
c0:d4:4e:cf:74:55:70:54:98:b8:6e:a5:28:ad:74:fb:79:a8:
c4:df:84:64:cf:e3:4a:e1:be:2e:00:f3:9b:56:0a:e5:59:00:
c1:f2:d9:d8:74:5f:16:cb:e9:24:b8:1f:37:07:9f:54:68:0d:
56:52:83:17:21:51:ec:23:a1:73:fc:c1:00:08:f8:57:92:5f:
df:d4:7d:3d:2c:1c:4e:e2:5d:58:4d:b0:f9:f9:53:c1:55:66:
21:f8:48:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:58 2025 by rpki-client