Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: oZFt5Vtm4+1QaSV1qwrTfrDJ3XIAhguDO1YkmggNXOs=
Subject key identifier: 5F:44:2B:15:78:2E:1D:EB:88:C6:65:AE:8C:6C:0F:2B:50:B3:A8:87
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 0198D5F13724EE4115053159DC40E9F2CBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 0218
Signing time: Sat 23 Aug 2025 08:00:11 +0000
Manifest this update: Sat 23 Aug 2025 08:00:11 +0000
Manifest next update: Sun 24 Aug 2025 08:00:11 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: pxPPRya1/w2PmOADnRaFeOTsGYTfrtZ0onJkW0kk1GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:37:24:ee:41:15:05:31:59:dc:40:e9:f2:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Aug 23 08:00:11 2025 GMT
Not After : Aug 24 08:00:11 2025 GMT
Subject: CN=5f442b15782e1deb88c665ae8c6c0f2b50b3a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:9d:38:41:e6:92:62:6b:c0:1c:34:a0:21:
f4:82:d3:ce:4a:56:a9:05:7a:7d:6d:05:2a:7a:b5:
36:9e:98:94:19:ae:dd:63:b4:49:b7:a5:ae:9f:a6:
b8:84:9c:f5:6e:75:92:81:f2:dc:75:80:f8:e1:ea:
9e:8e:6b:17:48:83:7f:87:68:72:33:fd:c6:92:2d:
37:37:35:9b:6e:11:7f:7b:35:01:91:6f:e7:48:7c:
72:66:0c:01:05:e9:63:6e:03:b3:a1:63:a5:29:ef:
d7:50:ee:1b:d5:97:22:14:05:07:ee:04:51:91:7c:
25:f7:3d:d8:3b:56:49:b3:d5:2a:d5:81:59:a0:82:
af:f8:67:29:c0:60:09:7c:45:09:23:e6:21:25:35:
fb:43:21:62:35:ea:25:f0:0b:ac:eb:27:1f:5a:0a:
27:ac:94:7e:41:e1:58:70:0c:68:ad:e8:1e:da:d9:
45:1f:f4:cd:0b:51:36:88:5c:f8:23:0e:1c:c4:23:
ff:cd:8c:8f:8e:6a:a2:ca:32:21:f0:86:9e:79:6e:
e9:d5:66:d1:95:ef:cd:53:dd:89:3f:c6:a4:ab:f1:
36:1f:85:9d:ae:94:3c:26:52:ce:2f:1c:7f:6b:d1:
91:d8:9a:c4:60:81:35:93:20:da:cc:45:cf:76:f1:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:2B:15:78:2E:1D:EB:88:C6:65:AE:8C:6C:0F:2B:50:B3:A8:87
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:06:28:39:44:77:54:15:01:d5:5c:81:1b:12:32:3a:e8:c5:
62:01:88:93:27:ac:cd:06:a5:36:05:5d:90:21:3a:8c:1d:e1:
e6:d4:2e:8f:5a:65:f3:3a:20:5c:70:e6:c9:76:bd:72:a3:16:
fd:3e:83:66:7d:0c:71:d4:98:24:46:99:cf:75:f5:8f:2d:cb:
a0:57:d1:f9:d5:2f:f6:ff:28:db:f6:d0:78:a8:6d:29:89:1c:
a3:f1:87:46:14:82:78:19:b6:9d:68:b9:dd:8d:63:7c:59:ba:
04:93:67:bf:5e:2d:eb:34:fd:ee:63:ba:4a:68:d1:d0:d1:ca:
c5:0d:a0:55:c1:74:5e:59:c9:ab:17:0c:f9:c7:db:f4:60:44:
6a:96:9c:89:bf:f7:ce:82:ee:ff:3d:f3:a8:63:0e:c5:74:73:
d6:05:75:68:2c:60:c6:94:99:b6:0c:5d:3e:f8:70:ed:60:fd:
f9:c9:53:e0:d3:30:fd:f1:08:25:ff:54:af:ed:90:58:76:6a:
73:c2:01:f2:29:57:e9:d4:69:ae:bd:07:31:79:fe:76:6b:38:
13:51:65:de:4f:8e:f6:9d:a3:26:9d:a9:e5:59:c6:16:73:fd:
61:c1:95:e4:fa:c4:98:7a:e1:7e:f2:d9:6b:12:92:a4:d8:81:
4c:37:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:50 2025 by rpki-client