
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: d5ONLtLHApFLmKT3wMvAAYyXA8EhIVnscghXVXqifF4=
Subject key identifier: B7:80:58:67:0D:70:AD:00:D9:70:CF:9C:BC:1C:F0:66:4D:F6:72:A6
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 0198D54EC05413F6E789A3821EE1DDB7F45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 0F76
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: nn1g84lmAsj+3FOFt6zku1mN5wQcRvBSx2lkGtiSWFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c0:54:13:f6:e7:89:a3:82:1e:e1:dd:b7:f4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=b78058670d70ad00d970cf9cbc1cf0664df672a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:dd:8f:cd:41:d4:3d:77:4d:7e:7b:83:13:
07:68:e8:f7:e2:40:fe:d3:3f:bb:86:08:13:b0:6e:
a5:e7:ca:c4:3d:1e:b1:21:5f:ba:00:51:50:ce:e8:
ac:ba:26:f6:73:20:70:bd:8e:63:e8:45:cc:50:7b:
d4:7e:98:2c:3e:c4:b2:64:b1:d2:27:45:f9:d8:65:
de:61:6c:4e:2a:77:88:87:63:e2:4d:c9:a6:e7:c0:
c8:4e:96:72:4a:56:5a:07:be:67:77:c5:06:86:35:
fc:8f:66:87:45:6c:14:34:ac:f1:cd:ba:9d:07:60:
b8:02:00:19:4e:3b:3e:d4:6f:73:53:c3:cd:f7:71:
62:db:d0:fd:47:07:44:ec:bf:0c:48:9c:d0:d3:82:
3c:4c:49:08:25:65:42:de:62:2b:59:2a:d3:44:1f:
1d:aa:9b:30:39:08:9b:42:aa:23:ac:c1:74:24:cb:
50:6e:4b:de:a9:ff:6a:6c:14:16:b7:62:2a:fe:4d:
dc:b7:68:bd:81:9b:c2:f0:1b:39:c8:cb:49:59:7b:
e7:bc:70:33:9b:ee:83:91:20:3d:59:b3:87:ce:8e:
0b:70:ec:fb:26:d1:c1:2d:0f:b8:b7:7e:76:a2:44:
62:b5:95:4d:21:72:0a:26:e9:45:6b:2c:5e:5b:79:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:80:58:67:0D:70:AD:00:D9:70:CF:9C:BC:1C:F0:66:4D:F6:72:A6
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bd:9d:a2:36:11:5c:9d:35:c3:c7:fa:27:77:2b:d7:de:44:
12:8c:a3:4b:01:71:1e:eb:95:3f:b3:bb:8d:2c:7c:b3:18:b6:
7b:d4:17:b5:a9:56:22:11:0e:1b:d7:56:17:cc:37:d4:a1:28:
40:36:12:99:32:3d:c8:e3:53:d5:ce:13:c0:14:8e:f1:ed:07:
fa:48:6a:78:8f:13:65:b2:8f:22:9b:a7:fa:74:8a:ed:8c:a3:
02:f6:79:54:fa:a7:a0:e8:49:1b:74:11:ca:bc:db:43:da:78:
92:60:40:9e:e6:a5:0e:c7:1b:45:48:3f:a1:38:c2:b6:3d:f0:
4f:53:5d:bf:24:38:77:2c:34:9d:93:95:d6:4a:cc:48:12:a8:
a3:0d:1e:00:b3:b4:c5:0a:d9:8b:11:b0:c2:75:6c:e5:25:e1:
8a:75:82:74:3e:c4:0b:0e:66:55:75:cd:d2:79:14:99:d1:97:
76:e3:73:06:1a:8d:72:4b:41:19:e0:d6:61:9d:69:79:a8:53:
8a:88:c9:51:94:6d:5c:86:b2:09:76:15:43:cf:63:c2:72:33:
ba:02:3f:ee:f2:79:1b:bd:95:9d:06:6c:54:04:4c:df:af:88:
69:87:7a:dd:69:30:0c:e7:ea:56:a1:95:bb:bc:43:32:d6:fa:
f4:4e:cf:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:40 2025 by rpki-client