Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: abCQDg2tel6agtzI5lPmhRyLz105W2e3UyJ6MICc6Io=
Subject key identifier: B3:4F:C9:B5:79:AF:7E:19:9C:34:86:E9:21:18:6E:9E:6F:51:94:D5
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 0198D5F173ECA2C506CBB2561549FA1707D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 12AB
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: qQ0qoXApxZFBzJOZR6dT1z2MEtwkmXMjQXQ8YJzaFQM=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:73:ec:a2:c5:06:cb:b2:56:15:49:fa:17:07:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=b34fc9b579af7e199c3486e921186e9e6f5194d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:c9:75:39:5c:aa:82:58:41:79:18:c7:e7:
d8:f8:f4:05:77:d5:61:af:62:a4:5b:13:8c:e8:bf:
4e:60:a5:3b:a7:c3:0d:8a:50:cb:cc:91:7b:09:b1:
5f:54:93:b0:d0:a7:70:e3:db:c0:fe:d1:d6:4f:84:
5f:7b:7d:35:33:42:fc:bc:be:72:d3:41:87:be:28:
2a:b3:d8:84:27:1d:89:a2:70:ce:35:c6:68:ca:69:
31:31:19:d0:5d:ea:50:8e:9b:84:6f:b2:73:a5:cd:
ac:1f:2d:8e:d6:ad:98:8b:1a:43:5f:33:2c:06:98:
e4:f5:b2:f8:eb:bb:aa:dd:9f:c7:77:d4:5f:bb:a6:
cf:0a:d0:66:4c:5b:6b:da:2e:dd:a2:bf:75:bc:70:
be:d1:a2:fe:60:d7:61:f4:35:54:83:ac:a9:37:82:
15:28:fe:e5:f9:3e:db:6a:ab:72:7d:e8:09:47:c6:
53:4a:ca:b1:6b:76:95:ba:e4:11:0e:09:67:c9:b9:
cc:9f:70:60:bf:3f:c7:4e:4b:e1:31:8f:a9:5e:af:
29:84:c6:8e:e6:44:5f:7a:37:59:28:a3:81:8b:ae:
c8:c7:e0:ba:bc:45:18:61:0e:43:91:8a:90:ed:39:
4b:78:33:30:f7:1b:f1:2d:ce:9e:57:f7:82:17:e4:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4F:C9:B5:79:AF:7E:19:9C:34:86:E9:21:18:6E:9E:6F:51:94:D5
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d8:a9:16:f8:5b:63:1f:28:1d:d8:92:97:30:dc:ad:a6:54:
b6:e3:22:df:0c:a5:db:b1:24:ed:f3:2a:01:e8:2e:47:5d:23:
1d:fe:b1:74:d7:8a:63:85:0c:4c:49:ab:0c:e6:b1:cf:fc:c8:
2a:87:ce:26:12:ca:ef:db:a9:ab:ab:3d:ab:48:56:6f:1e:5d:
f1:8f:77:94:5e:0d:a6:ef:0c:6b:02:72:94:8c:63:04:79:79:
ee:90:dd:f2:be:2e:37:51:04:1f:91:d6:91:e2:fc:f2:a2:fd:
2f:b1:9d:e6:f2:99:e0:a0:b9:38:e9:1a:62:49:19:7c:2f:c9:
c4:1b:d9:66:1e:60:6c:ea:cc:44:25:3a:25:0d:ae:d5:6d:96:
9b:97:9f:13:1d:1b:de:69:80:c4:85:e1:9f:24:de:c7:06:e7:
c7:88:4a:e8:96:60:d0:c2:28:a3:d7:26:bc:e8:f1:f3:65:ee:
fa:a9:46:58:6a:66:9f:e0:b2:9a:bd:75:e4:e3:b7:48:8f:5a:
4e:91:17:c2:b4:9d:1a:74:47:92:24:1a:33:6c:d0:7a:e2:fd:
a0:03:21:af:e2:bf:a8:d4:f6:0a:4d:ef:a6:e4:3e:2a:0b:62:
7b:26:7a:e2:41:ff:74:55:38:9f:ac:d3:a0:88:c5:bd:df:95:
43:ba:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:47 2025 by rpki-client