Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft (raw, json)
Hash identifier: PdxTMNst+BTk2v0Ki5zqWgf78Klk7XVLGyfV1R+8fLU=
Subject key identifier: ED:BA:DD:3D:44:14:9F:0A:99:7E:1B:8F:13:59:63:24:85:F6:45:49
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial: 0198D54DE2E95703DB93A6271AD9F42B6A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
Manifest number: 0DC6
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (hash: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=)
2: XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl (hash: YcujS8lVudXqzBTOs6FkiDGMcPEK0tee6laC3piMja4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e2:e9:57:03:db:93:a6:27:1a:d9:f4:2b:6a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=edbadd3d44149f0a997e1b8f1359632485f64549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:cf:84:a7:31:ec:fb:92:fb:72:67:17:97:
10:52:bc:6f:a8:7a:ba:83:6d:78:c0:9f:27:d9:00:
a6:a4:cb:64:1c:b8:da:3e:c8:ac:7a:06:b9:4a:36:
e9:82:f0:4e:ed:15:e2:58:99:8e:90:da:56:dc:07:
8e:3c:c4:d8:e3:f9:d7:e8:6a:08:4b:fb:c6:e3:13:
60:38:ae:59:ab:15:02:4d:d7:e8:2a:af:a1:b0:24:
f7:e2:33:3d:56:a5:a5:89:8f:f0:ad:19:72:7b:47:
b8:8d:51:3c:d4:a4:42:8f:b3:eb:90:51:7e:e6:76:
00:09:2f:1b:00:14:cb:1d:22:56:90:7f:e7:06:27:
05:31:ca:2a:1f:58:5e:20:7f:0d:84:fa:9a:e0:20:
03:8f:6c:6d:9d:9d:4a:90:25:fc:ba:7a:d8:b2:94:
41:ef:f9:ad:b6:c6:fd:41:70:71:c3:9d:f6:d8:fc:
08:cb:8c:d3:62:0e:9d:fa:d7:30:52:55:f7:24:0e:
fd:98:09:92:af:fb:8b:82:33:06:8b:f3:16:39:4d:
77:6a:3c:38:b7:3a:a3:6e:80:92:0b:7f:c7:31:ae:
40:40:9a:b4:ed:bb:d7:75:98:67:82:f9:c0:e7:ac:
4e:f4:b7:d2:01:bf:8e:e2:b3:ca:37:3b:39:47:20:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BA:DD:3D:44:14:9F:0A:99:7E:1B:8F:13:59:63:24:85:F6:45:49
X509v3 Authority Key Identifier:
keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7f:1b:d0:15:a3:a7:63:0b:1b:ad:90:70:8a:31:77:47:b9:
87:7e:43:eb:c2:64:4c:32:6f:84:31:79:11:8d:68:50:fa:7d:
6b:f7:47:d4:fe:46:77:7d:f0:c4:b5:24:6b:f7:14:88:d9:11:
3d:c9:a7:5d:5f:43:87:68:3a:b9:69:6f:38:92:a9:80:f4:2d:
c3:6e:e7:a0:4e:18:f7:38:11:1d:78:e2:49:4c:02:78:89:f8:
f6:48:10:ca:2a:e2:94:31:c0:e7:a7:62:2d:be:c6:d6:f6:1f:
35:f3:c0:d0:b3:03:9b:c7:a8:22:4e:0b:07:d4:a0:f1:08:c7:
a9:f2:14:b3:c7:a5:d0:32:26:dd:be:a5:8e:6a:47:f6:dc:20:
d3:93:45:44:5f:f6:75:14:22:33:77:82:9b:48:25:9e:91:24:
30:6b:fc:ed:2a:0a:0d:f6:e2:90:60:ac:e0:69:2d:c8:72:57:
e7:17:49:63:90:9b:bf:dd:be:ef:a3:1e:97:3a:5a:e3:af:ad:
5f:5a:76:5a:7b:30:e1:f7:7f:da:21:c3:e2:9e:e3:27:d4:f5:
85:89:2a:e1:1c:79:e7:29:29:b6:c8:9b:88:7c:35:ba:fe:8d:
38:1a:9f:a9:07:e4:80:db:e8:48:52:a1:0f:8e:07:5d:1e:8a:
c0:23:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:22 2025 by rpki-client