Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: CTT2o4D6ILJJglrM6SAge1zU6v+rlcgUJ6xLmIZrsHI=
Subject key identifier: 51:92:A1:0A:72:CC:C9:F5:49:78:01:CA:51:FE:16:03:F7:93:7E:52
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 0198D54EB54B9EE3B32E9A09B46CC75BAB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 15CC
Signing time: Sat 23 Aug 2025 05:02:41 +0000
Manifest this update: Sat 23 Aug 2025 05:02:41 +0000
Manifest next update: Sun 24 Aug 2025 05:02:41 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: 9ycgEvmj6f0I6VijCpLOf74nbYhEh5Hen8vi0FIqLaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b5:4b:9e:e3:b3:2e:9a:09:b4:6c:c7:5b:ab:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Aug 23 05:02:41 2025 GMT
Not After : Aug 24 05:02:41 2025 GMT
Subject: CN=5192a10a72ccc9f5497801ca51fe1603f7937e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:b5:87:a4:5e:14:10:46:e7:0e:ee:28:91:
91:18:b1:51:fd:ab:45:be:59:df:e9:58:63:f5:8b:
92:cd:a6:08:2a:f9:63:ef:55:73:41:b1:4c:b8:93:
9a:7f:05:99:18:1c:cd:32:41:7b:65:90:2a:7b:67:
38:43:77:93:c5:58:84:c1:e9:05:4d:22:b1:ec:22:
87:ae:03:08:03:7d:ac:21:0d:70:3c:13:52:8d:2b:
aa:cc:a8:f0:a9:50:06:d2:68:fb:bf:dd:f0:0d:6b:
2c:91:87:0a:79:5f:52:65:db:d1:76:c4:63:21:99:
b1:e1:38:cb:00:53:dc:91:40:30:1e:0e:6e:10:ce:
ff:9c:e1:5a:9b:46:03:7f:3c:90:ef:b9:ae:03:ef:
82:da:cd:38:de:79:52:47:66:13:04:44:d9:eb:14:
fe:6d:cb:00:68:85:54:e6:59:7f:83:08:f2:c6:0b:
d1:d8:14:dc:2f:fa:59:70:76:88:8d:be:c0:fd:8b:
29:eb:3c:47:0f:7a:bb:4e:f4:35:79:4a:84:78:ee:
e5:d9:42:9d:7b:49:7e:2c:e8:bc:83:be:66:00:da:
5f:c1:4c:e1:e4:06:90:0c:f3:45:3b:fe:30:2a:9a:
56:59:a6:2d:6d:fe:57:25:c7:22:25:38:9d:8f:51:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:92:A1:0A:72:CC:C9:F5:49:78:01:CA:51:FE:16:03:F7:93:7E:52
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1c:a6:6c:20:6a:89:91:d8:97:a1:5e:7a:84:26:d3:48:4c:
c4:64:6c:51:24:54:57:10:29:6a:55:63:38:89:a1:f1:03:9f:
53:e2:ce:81:9a:3e:b1:ba:fd:e7:15:bd:a9:f8:4c:bd:82:ca:
2c:14:7d:9c:39:eb:dd:96:9a:a4:4e:c3:8f:46:f7:0f:1d:5b:
17:39:77:06:57:fb:d6:0a:68:11:15:3f:bc:11:79:17:fa:16:
0e:54:57:1d:f6:6f:df:01:9d:62:60:2d:ec:5e:92:0c:f0:b6:
84:39:5f:f9:b9:1f:09:d5:01:53:0f:50:22:a2:0f:c1:c8:32:
52:20:2f:36:59:d2:fe:96:d8:08:18:83:20:50:45:63:65:98:
ff:14:3b:f2:f2:29:63:7c:6c:04:62:2c:7f:cb:3c:ee:2b:07:
8c:d7:4b:c1:41:35:bf:15:bb:76:e5:15:5b:d4:b2:65:f9:28:
09:a8:a1:e9:b9:40:4e:2a:c0:60:f1:40:ce:7b:ed:21:e6:48:
f4:4b:2c:73:a7:b4:7e:b9:d3:74:fb:ec:d6:4e:ed:3a:97:e0:
41:e9:e6:9a:bd:49:8e:f4:33:5a:12:46:15:76:fe:7e:63:9e:
12:86:01:12:73:ee:33:ea:01:09:6e:b1:3a:97:13:d5:51:5c:
df:c4:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:58 2025 by rpki-client