Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: vosxpevr7HST3Hg6AU38RojuJsV+FG2x8D+jliKiIOA=
Subject key identifier: E8:A5:4B:2D:AB:EC:EB:EA:4E:E4:98:32:30:4D:E3:94:7B:94:05:49
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 0198D472D0A9153D52923C505419CB62273E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0C53
Signing time: Sat 23 Aug 2025 01:02:30 +0000
Manifest this update: Sat 23 Aug 2025 01:02:30 +0000
Manifest next update: Sun 24 Aug 2025 01:02:30 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: //u1/+8sDe2lyH9B6kg2PR0PA+IX4yjytzipMMua/04=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d0:a9:15:3d:52:92:3c:50:54:19:cb:62:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Aug 23 01:02:30 2025 GMT
Not After : Aug 24 01:02:30 2025 GMT
Subject: CN=e8a54b2dabecebea4ee49832304de3947b940549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e0:0f:2c:20:7d:8f:90:2a:81:7f:fa:15:f6:
11:05:3d:09:70:d0:25:25:b6:fe:7d:c9:39:6a:37:
79:fa:a0:9a:90:30:00:1b:43:08:32:39:0b:fb:0d:
84:cf:35:37:2b:63:c4:9a:f8:7c:04:1b:15:fe:87:
20:9a:1e:83:99:fb:ec:b3:92:db:69:08:d4:9a:17:
b6:35:ef:c6:57:cc:72:98:68:56:c4:bd:77:78:ed:
a0:8d:2b:dd:5d:5e:91:ce:95:f0:c8:b4:0a:7d:a9:
a8:a1:d5:b3:8d:7a:d5:27:97:d6:d2:24:6b:19:3a:
b7:e9:ea:32:3f:f3:e3:21:e2:b5:60:18:56:74:32:
17:32:86:a7:a2:ac:72:f5:96:94:57:5d:00:1c:6b:
3f:5a:63:82:a2:db:1e:66:7c:f9:63:74:4d:12:67:
34:86:cc:b3:48:4b:63:15:18:9a:f8:6c:ae:eb:e3:
c8:d9:0b:32:d5:c9:5d:2d:50:c4:ac:81:d8:13:7a:
aa:11:ed:4d:b9:82:55:34:f9:4e:f8:45:6a:27:c8:
6f:69:7b:86:6e:0d:99:9f:39:73:29:5c:de:d2:8d:
32:ce:bd:58:59:92:c0:0f:f0:1b:35:f3:fb:f3:c6:
e1:49:18:9f:b6:5f:3f:3c:15:fe:c8:8d:c3:3c:fb:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:4B:2D:AB:EC:EB:EA:4E:E4:98:32:30:4D:E3:94:7B:94:05:49
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d6:01:58:d6:ca:23:60:1e:d2:4b:e7:0f:47:5d:61:81:43:
68:b2:b2:98:36:72:79:bc:55:ff:ed:c3:d0:c1:5d:a1:bc:eb:
c8:28:29:39:f8:47:e6:b9:1f:ad:94:b5:c2:5e:c6:21:b0:f8:
8a:20:30:00:3b:b4:6d:ed:81:28:81:a0:c3:43:46:ba:c8:61:
37:2f:4c:99:d3:ce:b8:b9:88:d2:43:82:ad:f0:1e:02:75:5d:
90:62:77:a8:0d:bb:8d:70:5a:e0:e0:00:07:63:03:2d:cb:07:
8d:59:81:13:e1:2e:aa:53:0d:8c:45:bb:25:4c:55:ad:1f:2d:
c0:27:ec:bb:47:f2:b5:f1:e9:2b:3f:fb:f7:2d:a6:7e:d0:34:
e4:43:00:73:ed:b1:c0:a0:c9:08:94:2b:12:d0:58:88:f0:18:
2f:b3:08:c0:8c:23:ba:17:68:81:8e:b2:79:8b:fe:41:51:da:
04:be:e3:da:09:2f:06:30:5d:6e:ac:08:50:f8:0b:d3:76:70:
4e:03:5c:9e:67:c2:7e:4b:84:aa:eb:d0:ff:f6:65:e6:a9:70:
5d:4e:04:48:98:4a:c6:15:b7:b1:31:6d:0f:11:fe:1a:19:7e:
f4:5d:56:f2:96:39:ed:0b:e5:b2:93:78:41:52:e7:07:b2:70:
9e:7f:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:38 2025 by rpki-client