Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: PPYXhmXExutfVfXDw4iccmzCCQ2J6TBOsk82eHsd7hY=
Subject key identifier: 1E:B4:47:79:76:D1:5F:87:AC:72:9F:B6:90:95:8E:AE:B7:00:AE:EB
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 0198D474016DACC8FFC92B16A1381E56944E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 059E
Signing time: Sat 23 Aug 2025 01:03:48 +0000
Manifest this update: Sat 23 Aug 2025 01:03:48 +0000
Manifest next update: Sun 24 Aug 2025 01:03:48 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: 0u6eOsUoqkVBF0pJVGsMva6yuCEsjPyqFIKtiBy5P54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:01:6d:ac:c8:ff:c9:2b:16:a1:38:1e:56:94:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Aug 23 01:03:48 2025 GMT
Not After : Aug 24 01:03:48 2025 GMT
Subject: CN=1eb4477976d15f87ac729fb690958eaeb700aeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:64:0b:46:92:69:54:3a:0f:30:e5:f1:41:
51:54:01:d2:7a:8d:35:9f:67:80:84:21:f5:56:f0:
4a:eb:a6:bc:4e:cc:6f:c9:e4:4c:f3:0a:1e:9d:b2:
c2:07:fd:f8:b3:5a:39:9d:46:d7:75:96:d3:63:b8:
e4:fe:7e:71:0d:ce:d2:fd:aa:42:a0:98:a9:11:f8:
47:5f:1b:39:42:c5:0e:3b:0c:d2:0e:30:d9:a8:a8:
4b:29:54:52:7f:93:54:fd:2c:69:82:f6:11:69:17:
16:9c:21:b7:08:2e:9d:8f:6f:08:f7:58:f2:ed:d7:
ad:1f:5f:ff:91:7b:0d:1a:c2:a9:ab:2d:17:23:98:
36:ca:ee:dd:18:34:70:6b:28:23:05:63:c7:06:d4:
06:a8:08:cb:c3:32:aa:18:0e:58:35:ad:26:4b:f1:
78:e7:26:44:24:5f:b6:25:99:9e:d0:a8:2f:c6:62:
d5:7e:5b:e5:e9:46:d6:27:69:7a:70:6c:5a:77:39:
18:7d:83:9f:2c:e7:82:ca:bb:09:ce:a1:c4:7f:14:
15:5c:5b:fd:0a:c9:ef:4a:df:60:ea:1a:18:3b:cf:
50:5c:99:77:52:44:fe:8c:89:02:67:43:61:5b:67:
c7:56:3d:c2:3a:42:5a:6b:62:83:94:b6:ed:ee:69:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:47:79:76:D1:5F:87:AC:72:9F:B6:90:95:8E:AE:B7:00:AE:EB
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:01:5c:ca:8c:e0:d9:d2:69:e2:27:ab:b1:b2:33:84:d1:
56:93:e1:ed:1a:58:0d:59:12:04:c1:54:e6:de:51:de:4d:fc:
e4:50:15:c1:8e:9c:cd:28:08:b5:02:11:6a:5e:3d:67:58:2d:
19:1f:96:42:c1:06:38:60:b0:b1:e3:80:69:c0:ae:a8:75:d2:
9a:d2:69:91:b7:da:29:3b:52:4e:98:fd:d7:2a:bf:56:e0:9d:
1d:a3:69:a7:ad:8e:1b:be:7d:38:c8:8b:9b:27:6e:60:66:bf:
f9:e2:0d:95:d9:c8:54:82:01:53:bb:33:eb:6d:13:61:59:08:
84:44:c8:71:95:24:58:dc:a5:31:08:6b:51:63:a8:36:11:64:
a7:35:1a:93:64:f8:44:c8:d9:e3:e6:25:c4:8f:d0:40:ef:3f:
c3:7a:c7:56:73:bb:0c:84:4d:8a:0d:dc:ad:3c:8d:ef:13:e4:
18:1b:57:e5:c6:35:da:f7:fe:11:37:6d:78:20:3b:50:1d:dd:
07:90:e7:b3:8f:f1:43:c9:78:9f:c8:7b:52:40:17:77:04:99:
66:5e:45:b6:c2:d3:5c:85:a0:42:ed:27:d6:01:df:ee:dd:8e:
80:54:8d:0e:61:ff:2d:ee:e3:41:40:9e:ad:08:5c:94:7c:62:
f5:cb:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:44 2025 by rpki-client