Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: GYHrBGWLZruTyeybgKqOWNinHYs87c9aHQU+qrF5DaQ=
Subject key identifier: 5A:E7:26:19:C2:83:4E:86:B0:24:51:F4:BB:82:77:D9:E3:20:06:F2
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 0198D5BB99D46314BEED1BB4D0D22892BBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:38 +0000
Manifest this update: Sat 23 Aug 2025 07:01:38 +0000
Manifest next update: Sun 24 Aug 2025 07:01:38 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: jykK2AZ6T/3hrpYtxwMmufMrw4cbViUzap+0kUMHLbU=)
2: hmvS4nDPTxWW6kYfDbr8j0yfqsA.roa (hash: lNR9K/eeK5h6bqGDhHsX+aTIDMdTknqLa5mK45GIX18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:99:d4:63:14:be:ed:1b:b4:d0:d2:28:92:bb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Aug 23 07:01:38 2025 GMT
Not After : Aug 24 07:01:38 2025 GMT
Subject: CN=5ae72619c2834e86b02451f4bb8277d9e32006f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:07:df:1f:4f:3f:e3:cb:6b:8e:ad:9a:7e:
13:17:85:26:2c:27:8d:06:7c:aa:51:28:35:49:8a:
69:2e:7f:7c:ef:1b:03:59:85:02:63:29:d8:b6:6d:
1c:0e:0a:d4:bb:a8:1e:94:9f:11:ea:8c:c8:81:64:
13:24:58:4e:2b:38:62:08:ce:78:62:05:1e:04:79:
b2:e1:1d:68:6d:d8:fb:63:3f:a9:d0:69:d0:b2:75:
19:aa:e0:c2:ed:03:2b:75:60:e9:aa:df:b7:b8:17:
13:5a:8a:10:64:d2:5b:48:81:ab:f2:71:c0:f2:1d:
69:86:48:ac:40:1e:15:72:8d:e3:a8:30:f6:2c:82:
b3:4e:51:10:58:5b:c8:bc:75:43:e7:45:e3:ee:30:
d2:ad:94:57:82:a5:0f:e4:79:f6:ea:43:29:04:35:
b1:91:55:e2:bf:d7:7f:f9:d5:37:6a:96:c2:88:27:
f0:b5:07:36:de:10:1e:e1:66:4e:23:b5:a2:e8:77:
05:7a:1b:6c:1b:1c:05:62:95:34:66:a3:5b:b1:75:
57:75:38:33:0e:e9:cd:6a:83:97:56:77:9c:b3:38:
75:b0:22:9b:c0:70:98:f1:e2:80:01:40:89:ea:ad:
3f:a7:89:06:d5:27:5b:5e:87:c1:9f:e6:de:d5:e0:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:26:19:C2:83:4E:86:B0:24:51:F4:BB:82:77:D9:E3:20:06:F2
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:df:f7:a3:ed:e5:22:20:29:df:74:4b:8e:aa:34:d3:7e:ad:
81:2b:41:f5:2c:94:83:84:bc:8c:25:f6:13:f6:d8:51:9a:09:
a7:b2:46:d8:cd:8d:77:d4:e9:4e:d0:aa:b7:82:1f:d5:52:f1:
73:69:5a:1a:32:ea:c4:68:88:e5:8c:e3:b7:9f:1e:19:38:72:
79:d4:13:24:96:4e:b4:98:c7:1c:38:a6:b9:93:1b:74:ea:8c:
62:70:bc:7e:a1:4a:f1:72:55:7c:91:c4:b7:c5:ed:d1:6d:90:
61:23:26:4d:1d:ce:1e:f3:1d:a1:5b:ca:73:8f:40:fa:c4:69:
69:33:2a:af:f5:b3:fe:d3:22:db:97:d4:d7:dd:af:1f:6f:9c:
76:eb:f8:fb:fd:7d:15:1d:9e:ef:35:25:d3:e4:4d:6a:c5:3e:
1b:60:d4:73:28:00:38:ec:b3:a9:d5:17:39:78:5b:7b:50:96:
6e:7c:0f:27:62:ba:77:4b:5b:54:92:18:54:5a:e4:c2:e3:12:
cb:b3:7c:26:9b:97:14:95:e6:54:32:bf:dc:fe:03:cf:85:e1:
59:2a:19:ae:fb:50:45:23:da:33:23:4b:fe:7b:ef:d6:53:87:
88:ae:ae:26:c1:17:1d:a8:9e:39:97:0f:5a:04:72:a8:de:5f:
81:d2:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:58 2025 by rpki-client