Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: Kum6m/B//J2JJKMzGKA6nnyvNOsUYow8CcdxGBgazxw=
Subject key identifier: E1:58:E6:2B:7F:45:B1:97:E2:58:0B:43:64:04:61:60:1D:B3:84:3D
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 0198D58396A241DAC000111C50BAF69BD255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 15BA
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: +0d1olybNyqMfPpj03+tU9rzDFTFHe+cEfiY4SnHlXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:96:a2:41:da:c0:00:11:1c:50:ba:f6:9b:d2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=e158e62b7f45b197e2580b43640461601db3843d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:1f:f9:2c:11:84:5b:62:b5:17:45:d6:12:
0b:1e:9e:76:63:36:25:2d:35:25:11:d6:c5:c1:ab:
93:93:67:73:cb:2f:99:90:75:1c:06:a2:9b:ff:83:
7a:16:2c:1d:1d:96:e7:50:c3:c1:1e:90:2d:24:e5:
30:c4:b1:62:c1:41:90:06:41:b7:be:fc:a3:58:86:
81:d3:08:b3:b9:8d:11:73:80:1e:ea:47:f0:f7:97:
52:c0:db:76:48:a4:3c:2f:d1:fa:03:c9:75:de:9c:
1a:61:03:48:42:2e:45:7a:31:e8:7b:25:1d:5c:f3:
ad:e3:84:91:17:ef:fa:d4:5d:5e:44:2e:36:46:10:
c4:f2:78:ea:7c:b1:0f:12:5d:41:6d:8a:09:8b:bd:
3d:d3:66:32:07:e8:3c:9b:ec:18:7f:b0:82:ff:2c:
26:57:ff:bb:6b:dd:5c:1e:31:ab:07:f0:cb:2d:04:
c4:a3:cb:e5:02:58:60:04:67:21:57:05:ff:a1:f3:
64:96:8d:d6:d0:30:e0:cf:3e:0b:3a:07:92:22:c7:
11:5f:ff:f3:e1:f7:ad:91:f9:6e:e4:97:52:c9:6b:
50:63:4c:0f:34:9f:b9:47:b5:1e:12:d4:a2:07:32:
71:ca:07:d5:27:79:fd:d8:14:90:b0:ff:31:ea:c2:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:E6:2B:7F:45:B1:97:E2:58:0B:43:64:04:61:60:1D:B3:84:3D
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:da:bd:ec:70:50:0e:d4:cf:2f:70:d4:65:3c:7e:5d:ea:
a5:9f:a7:94:cf:9a:dc:d8:72:bc:b3:b0:08:90:09:c8:2d:dc:
d4:7e:f3:8e:b6:6d:26:ea:de:a9:32:0f:98:d2:04:aa:b3:eb:
76:6a:86:d0:a3:a2:3c:5f:d6:37:16:e8:d7:f9:81:44:e5:a7:
56:5f:e6:ff:f8:b5:fb:4a:3a:2a:69:e5:d5:b3:46:59:46:0e:
00:6d:91:85:94:4c:d8:01:13:f8:63:2b:bb:38:8d:72:62:dd:
5c:44:e8:e2:ad:bb:3a:28:ad:e7:f9:52:9d:5c:95:fe:29:fe:
3e:cd:7c:8d:91:d3:f3:54:e9:c7:b3:88:22:af:98:c5:cf:ec:
42:53:c0:9b:f0:e1:db:a4:56:4a:aa:7f:ae:d6:5a:99:0d:62:
ac:14:e1:27:96:5c:a0:8e:0f:29:51:73:4c:31:00:de:9c:88:
74:64:bb:74:57:2c:1b:bc:50:31:c0:e7:b7:bc:e7:52:e3:e9:
6b:1b:4c:40:42:d4:6f:ee:58:5c:05:a9:0a:49:3f:be:78:d4:
69:06:29:74:7e:d5:b5:2c:7c:5d:14:32:a5:59:e9:af:80:7f:
0d:26:26:d5:90:61:a4:d9:b6:7d:10:42:d7:94:a6:14:bd:04:
11:b4:29:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:18 2025 by rpki-client