Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: tQjj0NiqA7pScfdttQr2u0NK6fKOdInE003+zmb5t04=
Subject key identifier: 07:1E:54:DB:BC:00:D8:C7:39:4C:A5:28:48:8C:35:5C:BE:4F:4F:C8
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 0198D5838AC7F04D664D6F14C91E051BD88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 06:00:24 +0000
Manifest this update: Sat 23 Aug 2025 06:00:24 +0000
Manifest next update: Sun 24 Aug 2025 06:00:24 +0000
Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=)
2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: 4jR9j9qIztyyzWrNbHwzRC4dcbHvj2wAiOFDD14Yojg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8a:c7:f0:4d:66:4d:6f:14:c9:1e:05:1b:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Aug 23 06:00:24 2025 GMT
Not After : Aug 24 06:00:24 2025 GMT
Subject: CN=071e54dbbc00d8c7394ca528488c355cbe4f4fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:e9:9f:3e:41:78:53:d6:5f:20:b9:d9:69:
01:81:71:16:e6:de:40:66:12:da:88:da:81:a0:42:
3c:62:02:51:47:2c:b4:76:8f:d0:f5:b7:7f:43:af:
c3:75:15:4e:da:90:e5:0c:00:59:0f:6b:6d:fe:ee:
7b:fd:4b:7d:98:bf:c9:70:57:cf:a7:f4:1f:c5:13:
da:e8:57:44:65:3c:71:b4:d4:ab:04:6f:d4:74:62:
fa:13:5c:38:57:b7:dd:2d:dc:46:03:e4:f0:19:6e:
30:40:cc:2a:33:f7:db:09:80:dc:74:f0:37:c1:69:
d4:e6:41:28:5f:f6:21:c2:fb:5a:e9:18:c5:ff:d6:
6d:7a:1f:53:fb:e2:69:5a:bb:6f:e5:d2:e3:8e:6c:
6b:42:55:d7:b8:77:20:63:61:17:60:d1:e2:c0:b7:
37:6c:76:e9:bb:c9:2a:3c:e5:0f:36:67:60:2d:dd:
93:b6:c3:93:43:6b:01:af:05:b1:dc:cb:46:74:4a:
8b:95:dd:68:d8:de:3f:4a:b2:37:84:1e:ae:a1:55:
2c:a2:9a:bc:0b:57:3b:7c:c5:5b:7c:24:a7:b2:4f:
12:7d:ff:31:74:41:4d:b5:30:6a:8e:50:26:11:3d:
1a:8a:25:36:8f:a8:fa:da:39:66:85:35:dd:88:6a:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:54:DB:BC:00:D8:C7:39:4C:A5:28:48:8C:35:5C:BE:4F:4F:C8
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:96:ec:59:d5:e7:27:ea:fa:60:a7:75:7b:5e:74:84:3d:ad:
10:d7:93:fe:b3:20:e6:e0:1e:eb:b6:1b:78:13:62:3a:f8:30:
cf:0e:9c:14:3d:fa:1d:af:2a:19:7c:33:73:e2:7c:c6:67:52:
ce:0e:1e:0a:d2:0f:20:14:01:7c:de:bd:87:53:d6:56:17:71:
ae:ab:d1:90:9c:de:c2:d7:09:19:86:1d:c8:8f:a7:2d:59:f5:
c3:7b:85:88:ef:4a:29:7d:07:fd:08:b3:7e:81:b2:be:f4:b6:
49:98:4e:50:83:8b:ae:02:32:a3:39:73:24:7a:40:f7:99:07:
7b:35:7e:48:a5:a8:71:4a:63:3a:26:a6:ea:99:c9:c6:0a:69:
92:56:e3:f7:3f:f6:74:d5:6e:d3:df:05:01:90:09:8a:8e:66:
04:92:d7:10:97:18:fc:bb:35:0e:1a:91:bb:f0:70:78:c3:24:
f5:01:d4:28:65:49:6d:1a:40:22:46:be:d0:96:33:c5:0d:45:
ce:d0:00:68:a5:bf:35:b4:28:8c:27:d4:30:bb:0c:ea:70:a3:
d5:af:7c:9f:47:7b:e4:d5:e4:44:3b:a1:bb:88:91:c5:02:cc:
44:26:f6:c0:89:26:90:a6:4f:0c:da:47:ce:6a:e7:05:35:62:
83:20:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:55 2025 by rpki-client