Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: Qzr6iYdi/3k/LeANnOOl/9qlyNTQrDxmf4le/g/iMZQ=
Subject key identifier: BE:CF:68:66:52:9E:5B:B1:B2:D5:54:B1:B0:4B:91:7C:3C:29:54:A3
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 0198D54E13EB0F3C201EE697C4100C215C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 064F
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: ym710J68MyMJyDvN11McHfATsdox7G129vR6S2gm6EE=)
2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:13:eb:0f:3c:20:1e:e6:97:c4:10:0c:21:5c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=becf6866529e5bb1b2d554b1b04b917c3c2954a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:e7:d7:5a:01:f9:b6:96:87:1c:37:d8:82:
06:8d:0f:3f:5b:5b:ee:b3:42:b5:03:ec:d9:50:c4:
6a:00:55:08:52:72:ad:d1:b5:da:29:0d:08:a4:32:
44:cf:79:5b:ad:5b:17:a8:84:c4:2f:6d:e7:ff:ff:
96:de:3f:c6:fc:c9:ff:e3:e1:d4:dc:e5:39:5c:f1:
8c:6e:d8:ec:57:b8:c4:6b:80:59:14:c9:cc:b2:a7:
87:c6:0f:15:19:46:44:17:ae:fe:3f:e4:05:68:2c:
ba:34:83:53:6b:0c:ce:2f:39:8d:b2:7a:33:83:d8:
da:c9:fd:47:55:5b:11:60:ac:49:02:b5:60:3b:aa:
6a:78:cb:ac:31:f7:65:25:aa:04:44:9d:47:96:f1:
7d:79:70:ee:3f:30:f0:52:f9:cc:f1:e8:0b:bf:50:
2e:da:13:c5:e2:67:9b:2c:6f:71:09:13:f8:05:2f:
01:be:bd:0f:ca:c6:0d:1d:c5:f9:78:ef:ac:48:c2:
c0:cd:9d:af:e8:05:94:11:44:3b:a5:11:b4:ba:eb:
40:53:71:dc:8b:b8:ae:c3:6d:67:43:26:8b:51:25:
cd:c7:67:a7:9a:17:4f:a2:a4:e7:13:fa:44:26:f4:
1a:d1:a1:ea:09:08:92:d6:5c:6e:30:03:47:b8:9c:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CF:68:66:52:9E:5B:B1:B2:D5:54:B1:B0:4B:91:7C:3C:29:54:A3
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fd:16:c5:34:85:a5:f3:d3:f5:0a:93:9e:a1:2f:bc:7b:0e:
98:5f:00:80:2a:4d:02:1f:13:55:6e:c4:1e:f5:a6:80:05:6f:
ff:fd:fb:b5:aa:64:61:35:0c:3c:7a:9b:58:2b:36:84:83:15:
9f:f8:c3:25:45:7f:69:89:41:7a:12:5c:4f:fc:f4:bc:64:e2:
9d:c7:a7:aa:b8:dd:e1:e0:29:a0:56:26:ea:14:a9:52:1a:7c:
99:d3:09:66:09:91:6f:76:04:aa:b4:fe:12:06:67:bf:6b:52:
22:83:4a:1b:f1:11:06:c5:9e:3c:3f:98:14:0c:bc:ef:18:50:
24:78:ab:d6:3b:72:33:2b:6a:7c:6c:0d:87:87:87:0c:03:ce:
19:88:1a:bb:bb:2b:04:9d:1e:30:2f:75:ea:a3:24:bf:75:5a:
84:1b:22:1f:ab:eb:42:6c:47:e7:c1:87:dc:79:5a:b0:e3:59:
09:bb:40:75:4a:90:b0:fa:09:3b:c1:b1:50:ce:49:4d:eb:e8:
ee:41:ed:9e:b8:36:c9:f0:05:f7:79:f3:b6:e0:b1:37:59:a7:
0b:fc:80:76:8c:09:cb:3c:18:36:13:2d:e8:91:38:4a:33:14:
dd:0b:96:ee:69:70:4f:8c:9b:2f:7a:47:e9:eb:1c:9c:78:0b:
8a:0a:23:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:46 2025 by rpki-client