Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: Wd0JaqtIy91EB0aMOQNFYT5lFVgRzxEol7Jl5A5AuUA=
Subject key identifier: AA:FC:75:70:3A:1D:3D:77:35:09:48:86:1C:1C:E0:D4:A9:CA:8F:CC
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 0198D5BB7DC637003B73EF76AAD60912A17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: SuBSyDxsfO1RKNxc6cxhF4I4mKi3U17xHMvK78E5Zr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7d:c6:37:00:3b:73:ef:76:aa:d6:09:12:a1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=aafc75703a1d3d77350948861c1ce0d4a9ca8fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:30:f9:ed:b8:68:b5:99:14:e4:4c:5c:eb:
26:d5:0e:b9:b0:71:3a:17:46:5a:55:ba:7a:2f:e4:
04:b3:fe:f3:aa:85:b1:e8:c8:ce:29:62:cb:e5:de:
6f:e8:53:cb:95:cf:31:5a:71:42:1e:f8:f6:81:ec:
21:d7:bd:d2:1c:40:19:8f:19:ae:e2:4f:11:19:a8:
57:ee:b5:e3:17:da:21:92:4e:db:70:68:99:dc:89:
96:4a:78:96:89:df:26:b5:83:66:c5:f6:c5:04:9a:
5c:b2:cd:39:ba:db:1a:6d:ff:fd:cc:81:dd:72:eb:
d2:24:b2:a6:95:c0:f2:d2:39:7c:4e:6c:14:e0:e9:
20:8f:fa:8d:e4:12:ed:fa:38:46:a0:ac:5e:f0:fe:
50:a8:8d:89:1b:29:6d:24:f4:65:ab:df:d2:5d:97:
a8:e3:f5:d9:5f:17:1e:95:0a:d8:b6:3a:40:fd:4b:
a1:a3:9c:95:d7:eb:62:3b:81:11:9a:58:99:80:fc:
ab:f3:99:a9:e8:72:9d:8f:4d:7a:fa:13:be:c9:51:
36:04:5a:e2:fb:4f:82:c6:bc:19:74:8b:57:3e:59:
99:73:fa:49:2d:c6:94:87:de:66:29:38:f6:56:a0:
eb:e8:04:a2:1a:10:37:f0:7b:e0:35:6e:e7:ef:bd:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FC:75:70:3A:1D:3D:77:35:09:48:86:1C:1C:E0:D4:A9:CA:8F:CC
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ad:03:12:fe:67:a0:5a:df:bf:f5:de:75:da:e2:f5:f8:8b:
77:fd:91:fc:65:9e:53:9e:cb:e7:4c:4d:bf:44:13:4f:96:8f:
4b:05:78:c8:e1:cd:48:74:8d:7f:65:aa:91:8e:4e:23:0b:fe:
6a:f7:77:12:de:16:89:e6:c6:0c:b0:18:b8:07:16:ff:f9:bf:
4e:6b:23:22:c0:94:86:29:9b:a8:5c:8f:19:7b:8e:14:92:c1:
93:91:6f:b5:1a:27:f0:13:e1:de:93:68:e6:eb:34:fb:80:26:
3d:64:e7:3e:4e:08:6b:5c:ff:f1:26:95:2b:3a:89:cb:4a:88:
a8:ac:05:27:11:b4:8c:d0:ca:44:32:93:82:44:c2:9f:d2:c5:
7a:fd:f2:3b:fb:e7:c7:04:7f:79:0f:36:7a:69:92:03:aa:5f:
d8:0a:55:41:0b:b2:d6:98:31:2f:3e:ea:09:22:8b:ed:35:dc:
67:94:3b:60:89:8d:1d:89:e6:e3:c0:08:05:7f:86:7d:8f:65:
52:6d:28:4f:f6:19:bb:2a:2a:60:80:28:c9:b4:09:5c:0c:d4:
fc:3e:16:24:ff:85:b3:3e:4e:1e:8f:86:45:b4:5b:6e:56:5e:
5d:c0:c6:1e:5c:8d:a5:28:52:95:4c:45:df:2b:14:1c:bc:d9:
4a:7d:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:33 2025 by rpki-client