Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier: 1IseeKGr+i7wYWihtFIbkS/kGuwXxoUtuJ+N7qFm4ws=
Subject key identifier: FC:F5:BB:41:98:30:2A:49:55:AC:7E:5C:8B:BC:89:C3:BA:67:3B:41
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial: 0198D5838661870870FA38D8671BE4C89F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number: 15A1
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=)
2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: ZGnzNQ5WYsaT+KvggTmhaEyByJoyUr0Mo6Sq2DTzxHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:86:61:87:08:70:fa:38:d8:67:1b:e4:c8:9f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=fcf5bb4198302a4955ac7e5c8bbc89c3ba673b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:07:46:ec:7c:b7:b5:5c:45:55:6f:0b:61:
28:ef:45:c8:d8:8d:8d:1a:79:19:37:03:f7:b4:0d:
80:a7:35:94:90:f6:7a:47:5a:f4:cb:77:56:88:22:
e6:19:41:63:1a:0d:b5:b4:c5:5e:f8:02:26:8e:65:
0d:71:cd:76:19:53:95:85:f0:c1:59:37:66:90:b5:
89:13:b5:56:1f:43:3d:78:23:cf:df:1e:cb:35:61:
55:36:ec:ea:44:06:c8:50:7e:5b:fa:08:eb:c6:04:
f6:26:5b:b9:6d:c1:13:62:f9:3b:4c:cc:82:94:7a:
b7:4c:6c:91:78:c1:32:06:ed:9a:56:79:0f:6d:4e:
9f:74:d3:d6:a7:be:94:b8:d7:9f:75:05:ef:e0:8e:
7a:4a:7d:ff:40:8a:8d:e6:6c:14:22:e6:b4:a7:c3:
5c:9a:2d:62:83:e0:bf:66:6a:99:6c:10:45:87:5b:
52:2e:dc:cb:af:38:91:ea:d2:74:a4:9c:08:aa:c2:
31:97:32:9d:88:65:c6:ed:b6:88:c0:3c:8f:54:c3:
cf:36:b7:58:1f:8d:09:38:a3:7d:12:9d:54:48:fd:
ad:3f:12:64:0d:32:da:51:d0:63:11:67:90:f0:2b:
46:6b:b0:79:23:9f:a9:45:57:7f:52:a4:63:e0:72:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F5:BB:41:98:30:2A:49:55:AC:7E:5C:8B:BC:89:C3:BA:67:3B:41
X509v3 Authority Key Identifier:
keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:d1:7a:17:2c:eb:10:ef:1a:88:fb:d1:a7:c2:ac:ff:e7:
52:1b:bf:9e:cb:6c:aa:96:3c:45:2d:9b:11:f1:a9:eb:aa:18:
84:f0:16:24:47:fc:57:fd:a7:9b:e3:02:e6:70:ea:13:ef:99:
ea:94:dc:74:78:7d:c4:e4:3a:80:0d:df:f2:b2:5a:79:a9:04:
bc:f8:a5:39:33:4b:a3:f8:e8:e7:70:d5:ff:f4:9c:04:b9:b0:
c4:e9:ef:9f:ab:e3:c9:a7:c7:5e:03:5a:19:3d:f9:3b:0c:8e:
6a:77:16:51:cb:54:31:3d:23:33:4e:f6:8e:9d:16:4c:98:7e:
ae:76:93:87:28:e8:f3:ac:8c:da:da:65:6e:ae:bb:70:d7:98:
31:b1:2c:54:b5:ef:9f:03:f9:36:2d:c2:76:f1:c7:b3:1a:72:
d5:56:40:e3:20:3d:de:c8:f4:b8:b7:c1:ac:8e:08:19:a7:f8:
9a:15:22:8f:56:91:cf:e6:c2:15:75:ab:f7:5e:63:a4:1c:cc:
31:28:ce:48:fc:d9:4c:50:3b:0d:7d:32:74:59:db:fc:b1:cd:
cf:60:7d:09:e6:2f:40:3d:56:7b:c0:18:75:48:1d:9a:77:91:
c9:f5:bd:4d:2a:6e:be:05:22:db:6b:5f:d9:85:8f:a5:9e:d1:
18:ca:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:37 2025 by rpki-client