Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: 1ihVbyQp9+CiUkGaTLiLV6FdQYjhwn/dsm/SfRszJGQ=
Subject key identifier: 5E:12:72:19:09:38:83:F5:64:81:0A:7B:E1:F4:2D:CF:17:14:EF:8B
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 0198D66061A9414B221635BE5625A4537A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 0227
Signing time: Sat 23 Aug 2025 10:01:37 +0000
Manifest this update: Sat 23 Aug 2025 10:01:37 +0000
Manifest next update: Sun 24 Aug 2025 10:01:37 +0000
Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=)
2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: 6nOFrKHNKe3HbNixfdL7bsYP68slNTUaKmupVJ3YSSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:61:a9:41:4b:22:16:35:be:56:25:a4:53:7a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: Aug 23 10:01:37 2025 GMT
Not After : Aug 24 10:01:37 2025 GMT
Subject: CN=5e127219093883f564810a7be1f42dcf1714ef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:63:6e:55:69:5f:d6:60:e7:1d:05:21:e9:
63:b9:0f:bd:d6:9c:c8:b8:c4:e1:c5:5d:88:89:fb:
4c:d0:14:2b:00:c4:00:48:28:a3:85:34:f1:59:fb:
dd:09:98:b4:ab:b7:e9:6f:84:fe:68:04:e2:27:2a:
b8:5b:2d:9d:42:6a:e3:d8:6f:e6:f1:a6:93:49:67:
31:a4:ba:c6:3a:ca:d5:02:95:61:1d:9e:1d:15:bf:
65:cd:ce:63:81:b8:ef:b2:34:96:90:0a:96:bb:ed:
73:1e:7d:9e:fc:eb:48:e4:42:0a:5c:b5:3a:75:34:
0d:68:89:a5:13:11:51:58:7a:2c:33:93:b3:60:33:
71:87:f1:19:58:b4:70:a3:f7:a6:39:5b:f2:e4:64:
ae:c8:c7:d1:34:30:45:bb:d3:ff:f9:43:e1:6f:96:
9c:d1:4f:b4:cf:32:4f:5d:7a:d5:08:8a:20:cb:b8:
19:f4:14:ba:3d:bb:a5:3a:d1:61:04:ee:57:50:0f:
2e:0e:a6:0d:f8:b5:f6:46:45:75:a3:92:cc:26:75:
ae:a8:ba:6a:e7:50:b6:3d:cc:bd:98:46:df:fb:ba:
44:ea:2f:77:80:09:d3:2d:82:f5:17:62:21:43:6e:
2f:19:f2:42:b5:34:1b:41:e7:82:81:1a:f4:e3:83:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:72:19:09:38:83:F5:64:81:0A:7B:E1:F4:2D:CF:17:14:EF:8B
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:6d:91:cc:db:1c:33:5f:c1:73:5c:86:a0:ae:05:4b:82:56:
df:76:be:1c:98:d0:eb:be:40:fc:9f:13:64:0d:99:b4:0a:00:
42:3d:05:cc:f4:43:ca:43:d4:d0:2e:28:c1:9b:6c:86:90:f1:
ee:9c:11:65:d9:f0:06:b0:24:16:64:c4:ca:44:8c:f3:00:65:
21:76:9a:16:ae:71:1e:86:e0:cd:5b:fd:01:26:fa:6f:5e:c4:
a8:78:0f:e6:27:65:19:ab:14:f5:25:4d:b9:5b:5d:a6:df:b7:
fa:c4:84:d0:2b:53:35:ed:b7:7b:8d:aa:1e:83:be:c9:c9:ba:
9f:10:54:3e:96:83:4d:07:32:b9:08:eb:85:b4:f0:7c:51:19:
91:97:f2:66:9b:7a:19:e7:1d:b9:27:c7:c0:98:e2:20:78:8c:
ba:d6:61:53:5c:9d:af:34:a3:62:b1:b9:35:3b:08:50:ef:cc:
99:48:d2:b0:e4:83:39:2f:f5:3f:7c:0e:1c:7d:10:75:95:5e:
00:5e:49:9c:d1:1d:2e:1b:14:6d:10:89:58:b3:45:83:4b:c5:
81:66:79:7f:a9:4d:03:86:f6:f6:9c:20:27:94:db:eb:31:8f:
57:1d:fd:24:7c:c7:7c:72:1b:25:2a:a6:fb:74:75:fa:43:05:
f0:60:a7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:50 2025 by rpki-client