Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: DbM5g4QZE35Bhy/fBe0NeMDndDc9Tu3AkPu637QKF9s=
Subject key identifier: C2:9D:68:16:7E:25:16:A9:4F:F3:BC:C0:8B:2E:05:F5:B4:9D:3C:D6
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 0198D6CD463C02810C3F9DEA9712379FE292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 10E5
Signing time: Sat 23 Aug 2025 12:00:33 +0000
Manifest this update: Sat 23 Aug 2025 12:00:33 +0000
Manifest next update: Sun 24 Aug 2025 12:00:33 +0000
Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: plkCxU55SRukYDhAr9yOZKAgyvS0C4DwZqnJq2ZMcGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:46:3c:02:81:0c:3f:9d:ea:97:12:37:9f:e2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Aug 23 12:00:33 2025 GMT
Not After : Aug 24 12:00:33 2025 GMT
Subject: CN=c29d68167e2516a94ff3bcc08b2e05f5b49d3cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cb:fd:1a:4a:b7:b0:28:f1:9c:dd:c8:43:f1:
cc:30:f8:8c:c0:7b:c7:cf:95:4d:c6:f7:9c:16:21:
bb:a0:e1:7e:54:1d:60:58:3e:1d:f2:5b:1f:38:4a:
5d:a5:d1:14:ad:75:9e:ce:b2:5f:c0:cc:8e:b0:68:
24:5d:cf:18:b5:de:d0:6f:43:75:27:4f:b7:60:69:
c1:ac:01:b1:75:c7:d8:57:ea:b7:52:d1:83:83:5f:
99:0f:f4:7d:da:0a:50:40:de:5d:ac:b4:0d:98:7a:
bb:f6:1c:d6:2d:2a:cc:00:f6:71:06:58:1b:81:7e:
33:c2:e6:c6:0e:3f:2b:e5:96:73:22:51:e5:ae:cc:
4f:0a:2b:d7:72:61:2d:3a:e5:21:ef:32:4c:b8:61:
e6:82:7b:9b:bc:75:4c:c8:22:1a:e8:28:09:72:fd:
7c:d4:1e:6b:af:19:a0:93:b1:d0:78:a8:49:f0:1f:
70:a0:ae:c2:80:33:61:dd:59:b2:ca:ee:68:c7:fd:
b5:a1:d0:3d:3c:31:80:71:1d:65:38:3a:2c:85:b6:
c1:a2:48:49:33:30:3a:09:96:4e:2b:0a:04:06:4a:
b0:f1:ec:a3:19:45:72:a2:77:ba:50:0d:00:ce:ef:
16:e8:cc:93:07:31:94:47:4d:d6:2e:94:4a:e5:7c:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:68:16:7E:25:16:A9:4F:F3:BC:C0:8B:2E:05:F5:B4:9D:3C:D6
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:33:51:e7:51:90:00:65:a2:27:ea:96:eb:dd:a4:c0:45:28:
09:bc:d6:01:0b:76:53:23:0e:84:95:e2:9c:9e:84:a1:68:3a:
1c:04:12:dc:c8:e0:8d:ea:ee:14:4b:d4:6c:64:52:0b:28:e4:
8f:a2:49:70:62:33:eb:d6:84:69:72:2f:a5:92:6a:4f:da:f3:
bc:11:4c:c7:cd:a8:72:9f:5b:eb:36:a0:74:a4:26:42:22:ff:
e6:7c:b0:52:07:42:14:c7:8b:73:c0:fb:6a:88:34:1e:6c:96:
8c:6c:07:94:e0:fb:23:72:13:13:67:68:0c:cd:e2:05:2e:83:
7d:4a:a0:cc:2e:40:18:b0:c7:ab:49:d7:04:f5:02:e8:04:81:
a1:77:e2:26:52:99:8c:b1:db:df:b4:67:2a:01:b7:05:a8:6d:
08:53:85:52:2d:26:a0:de:a7:36:3c:05:e9:17:8d:b4:e8:f7:
83:4d:ce:df:70:0b:24:e7:77:26:89:b6:fb:1d:b8:b7:b9:80:
c0:52:2b:ea:7c:0c:9c:fd:9c:f3:41:47:57:a9:0a:1a:6a:48:
1b:5d:52:6d:14:fb:ce:e1:51:46:11:ca:70:2e:08:e1:01:19:
0e:b6:f5:30:a9:4d:1e:bf:b7:2e:93:99:95:b6:59:6b:0a:d3:
fd:a5:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:37 2025 by rpki-client