Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: 4ySGmvMjrjv7ia2nWq2MAKCukJD8wkKVDUSGG/RevQY=
Subject key identifier: 44:A2:1F:56:50:05:65:94:6D:D1:63:EA:4F:49:55:A4:D8:D0:C5:5C
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 0198D6298CD24E509288E6824B4F12D77E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0E7B
Signing time: Sat 23 Aug 2025 09:01:43 +0000
Manifest this update: Sat 23 Aug 2025 09:01:43 +0000
Manifest next update: Sun 24 Aug 2025 09:01:43 +0000
Files and hashes: 1: PCViN5XjjWy3uXa6yVs2Quk_6To.roa (hash: Aquofks2bcfd5azy6+IqavH7O37I4bc+/mKKyjG/YPU=)
2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: 3t7EXrYVmBnkMGV2wge07nJNgixi5S7Eh1R20VXMVmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:8c:d2:4e:50:92:88:e6:82:4b:4f:12:d7:7e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Aug 23 09:01:43 2025 GMT
Not After : Aug 24 09:01:43 2025 GMT
Subject: CN=44a21f56500565946dd163ea4f4955a4d8d0c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:74:a4:64:02:ec:4e:32:2b:75:50:e9:df:98:
6e:d3:0e:6e:e8:71:8d:ab:de:90:50:52:d7:69:d2:
0b:57:b6:29:1c:fe:23:1b:73:7f:9f:4a:84:b3:07:
34:40:1a:5d:30:6c:63:a5:ec:cd:b5:93:b5:9b:e6:
67:0f:db:4f:92:7c:0a:a6:01:78:81:cf:db:0a:4f:
54:fd:9d:31:d4:a7:4f:63:c9:af:85:e1:fb:f1:e3:
95:f2:f9:90:d4:d4:d0:c3:05:93:4c:85:df:fc:37:
f9:bb:07:bb:d2:4d:3a:db:40:d9:10:93:e5:d4:50:
b7:3b:fb:f4:10:1e:c2:7a:f5:34:ea:52:94:bd:85:
39:93:4f:73:d1:97:a3:23:79:e4:88:ba:5d:6b:38:
6d:9a:a4:e7:b8:b9:03:8e:65:c1:5e:aa:d1:4f:0f:
b5:df:2e:7a:07:b7:be:a9:b7:b2:d4:76:f8:ad:fd:
6e:56:22:e0:61:51:53:b5:63:a6:e7:d4:90:54:1c:
40:6d:c8:f5:38:0b:7c:e3:fc:78:97:35:a5:dd:97:
79:2d:ba:45:48:cb:91:ec:7f:36:50:c7:98:54:59:
1d:a1:2b:99:95:95:86:3f:85:a3:65:71:83:85:b0:
85:67:74:28:b8:55:13:cf:9e:fc:0e:e5:71:c1:a3:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A2:1F:56:50:05:65:94:6D:D1:63:EA:4F:49:55:A4:D8:D0:C5:5C
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:66:70:be:ae:77:fd:7b:6e:d4:06:5f:05:c5:9a:9b:0c:25:
d2:92:a6:a6:95:78:33:9e:48:89:40:d4:a2:ba:70:31:93:54:
d2:8e:71:87:03:a0:5d:f8:f9:83:79:2c:11:6d:64:f1:c2:68:
14:2d:6f:bb:bf:f7:0e:b5:b6:10:34:04:e1:15:32:fe:e7:6f:
69:79:2a:9c:b7:41:53:e0:d1:88:f4:78:87:2c:9a:02:4c:76:
ea:0a:a6:51:6b:6f:c3:d2:2a:27:8e:9d:84:04:c3:db:fd:23:
14:28:46:c6:b5:0b:51:40:00:00:03:de:dd:6c:65:99:e7:ac:
7b:80:25:53:e0:96:c6:5a:f6:5b:18:08:51:bd:09:24:e1:11:
aa:8f:db:57:7c:70:7e:2e:53:bf:8b:1e:e9:04:c5:07:0d:b5:
27:84:ac:f6:ec:70:23:c9:50:0e:29:66:07:3c:44:7e:7a:27:
5e:a8:87:95:df:32:9a:47:a8:8e:f8:8f:95:0c:c3:bb:85:b4:
71:90:5f:5c:2b:80:ad:8d:19:19:ef:4f:0e:77:40:44:8b:b4:
73:d5:88:b6:fd:a8:c5:e2:45:8a:79:a0:fe:ae:38:e3:c6:c2:
dd:fa:5d:e2:26:c0:75:5c:0b:14:f4:21:2d:27:59:54:96:2b:
f2:e7:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:56 2025 by rpki-client