Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: OJaTggQ00CxYPvNYt5EcOsuql86qD33cVuS7TFUgf3Y=
Subject key identifier: 66:C9:E2:D6:F7:8D:50:EA:64:44:3E:5E:E0:C9:37:49:7A:4B:5C:82
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 0197C9824A957F2025AF2D91E0FF8F99C043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 018D
Signing time: Wed 02 Jul 2025 05:00:48 +0000
Manifest this update: Wed 02 Jul 2025 05:00:48 +0000
Manifest next update: Thu 03 Jul 2025 05:00:48 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: 55Gk5K56vmy2jg6Q7N7k2vAPBYGBxAXBnkR5TaIyDvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:4a:95:7f:20:25:af:2d:91:e0:ff:8f:99:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Jul 2 05:00:48 2025 GMT
Not After : Jul 3 05:00:48 2025 GMT
Subject: CN=66c9e2d6f78d50ea64443e5ee0c937497a4b5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:09:c8:c0:59:a7:90:ec:66:d7:eb:9e:8b:f4:
66:b0:24:dc:63:7d:ea:43:47:a1:4f:e1:d6:71:c4:
c2:12:30:df:3d:96:ec:54:b1:16:58:2a:8d:f3:af:
78:97:bb:81:86:11:54:d2:bf:66:87:f0:02:fc:73:
c6:be:1e:80:3a:ac:f4:fb:01:95:ac:4e:fb:f2:9f:
ff:6c:f4:cf:6b:17:13:f1:9f:ac:54:13:77:3b:e8:
a5:0c:a2:05:de:08:99:db:c3:91:70:10:8f:a6:32:
ee:d9:cb:ad:62:88:d2:56:1a:a6:ac:15:8e:3d:0f:
b8:5f:db:7f:bd:34:f0:46:db:90:1e:88:ef:63:62:
4b:a6:51:7e:c7:eb:5d:82:78:47:6c:8a:6f:e2:5b:
9e:9a:ec:d3:70:0b:3e:5b:db:d7:ea:51:04:58:41:
1d:b9:cd:76:4e:72:85:12:09:dd:05:37:eb:cf:20:
42:28:7e:7e:1f:a2:bf:1a:dc:52:c6:c4:b5:1e:83:
cd:92:b5:a3:d8:c3:86:a7:14:5e:18:ee:97:46:8a:
81:59:41:c3:8a:6f:b2:1f:54:ce:9f:78:48:4f:5e:
5c:15:0f:f8:d8:4d:f1:a9:17:02:a1:6b:dd:e2:35:
96:a4:3f:dc:32:87:ab:e1:fe:37:8f:50:13:92:91:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:E2:D6:F7:8D:50:EA:64:44:3E:5E:E0:C9:37:49:7A:4B:5C:82
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1a:3b:2d:c3:b8:2b:c7:a2:d5:db:9d:6c:e2:87:44:fb:a4:
6f:69:80:b6:8a:9e:07:e0:c9:d9:cb:c4:ec:dd:99:ef:dc:c0:
10:7b:f5:c9:6a:ce:42:87:93:cc:0b:b0:7d:fd:15:db:a5:29:
78:a0:72:d2:67:c1:2b:f7:0b:d5:00:b8:73:5d:5b:2d:7a:76:
c6:73:81:e6:84:e4:9b:d5:7a:e3:d7:12:7e:bc:5e:c1:5e:49:
f2:4a:b2:d4:a9:6b:31:c7:45:d3:4e:8e:b7:a6:24:f9:83:22:
c4:d9:57:5a:97:97:1d:c9:e9:ff:1d:68:bb:43:62:1a:d2:63:
e2:5f:53:9b:b7:b1:40:27:51:10:2a:83:1d:63:3f:9a:8d:98:
3d:0e:08:0d:d6:ba:67:4f:4f:bd:81:61:2c:ed:ef:af:f4:80:
68:b3:43:86:00:a6:58:5e:06:6c:e9:b6:dd:83:f1:a0:40:a2:
d5:3d:ec:c6:69:b0:4a:f1:7c:b2:dc:ac:62:ee:d1:38:27:ed:
06:12:78:c0:d0:95:f3:be:59:f7:f7:bd:85:7f:d1:3b:91:2e:
9f:68:bd:40:a1:f8:c2:22:f7:b9:5b:89:d2:28:0b:fa:16:19:
8d:84:db:47:99:2b:75:c8:1f:5c:38:79:d1:ab:44:e5:8d:bf:
d0:05:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:59:16 2025 by rpki-client