Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: k42hmQ5JC4UkFuiugNmsYcqm6QyAGhR3j2EdCyb7fLA=
Subject key identifier: 3C:E5:CE:B8:D1:1C:3E:35:43:19:AD:C5:3A:43:93:6C:15:EE:88:6C
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 0198D5BC16CB1030CAB35536155AD1154A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0A15
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: YnesF+rhio3t8FUVFmCaiWvL3Vp7L8gcJRcx0M6YWJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:16:cb:10:30:ca:b3:55:36:15:5a:d1:15:4a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=3ce5ceb8d11c3e354319adc53a43936c15ee886c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:c9:f5:d9:dd:74:e7:4c:1a:55:2c:c9:c0:
c7:a4:52:83:42:ce:83:35:96:3c:77:9e:00:11:a5:
3d:fe:6e:ec:59:14:76:52:cf:4d:9d:94:59:c8:3d:
8e:35:4a:9d:8c:4c:18:16:25:2e:5d:ee:68:08:f9:
58:e5:ff:1c:ce:46:05:b3:cf:0c:91:5a:1e:26:e7:
d8:c6:b9:50:0d:22:82:af:fe:2e:88:85:71:5c:eb:
48:fb:e5:23:17:6d:a5:dc:93:da:75:07:f5:9f:a8:
d5:35:61:5c:c1:bf:4a:94:1e:43:36:45:fc:2e:b5:
c8:49:75:c1:48:f6:f9:d2:eb:d9:73:67:41:27:b5:
7b:a8:2e:15:a7:95:c3:d0:fb:06:db:24:5c:17:2b:
da:6e:cd:4e:6c:10:de:ce:51:93:d3:a5:d9:56:6d:
e9:ef:a5:30:9c:92:7f:47:11:5c:de:64:71:30:cd:
fd:2a:14:03:34:9a:12:13:51:ae:b0:77:36:c5:9f:
f5:76:a3:74:7a:84:31:b3:96:89:c9:07:d4:e4:b0:
07:4c:2d:f6:88:30:fd:e1:94:e0:a0:9d:73:17:3f:
aa:ec:3c:55:0a:18:fd:22:a0:18:df:1d:31:bd:e4:
6a:eb:e6:03:02:53:08:71:6c:74:1a:7a:fc:8e:78:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E5:CE:B8:D1:1C:3E:35:43:19:AD:C5:3A:43:93:6C:15:EE:88:6C
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:76:b2:b7:dd:f6:70:6d:77:fb:89:bc:c6:0d:29:8b:4e:c5:
97:21:da:df:48:c4:f2:72:57:82:a4:1f:28:81:7f:e1:ce:d7:
91:27:0d:28:31:64:4c:5d:96:f9:68:32:61:f5:23:aa:5e:c2:
6a:c1:27:7d:39:08:ce:ad:a2:2f:99:c2:ca:88:98:85:c5:09:
b5:01:fd:fe:a3:37:d3:e8:0f:88:22:cc:c7:0d:4c:95:ff:a5:
37:c2:47:6b:1b:80:ed:e6:76:8b:a3:8e:a2:5e:cb:5c:dc:b1:
8b:f5:ae:c6:39:2f:a0:21:c2:96:30:bf:37:e7:ae:be:bb:4c:
36:48:0b:61:2d:4e:d9:ff:0c:01:58:0d:46:68:4a:50:3a:07:
88:62:2a:9b:56:76:e9:44:12:f7:34:5f:1e:1f:1d:c0:86:22:
7e:76:4e:d7:db:5e:d4:0e:34:8e:36:f2:e7:c0:18:97:ba:f8:
84:b0:63:1d:c4:38:62:ce:39:5a:75:a3:8b:ad:ba:d9:a1:5a:
dc:2f:96:ba:da:ce:fc:56:39:b2:d8:50:bf:4f:c7:56:7c:1e:
7a:b3:35:91:ab:c0:1c:5c:42:cb:1e:ab:04:e5:38:bf:38:0d:
02:2a:72:61:23:be:74:57:e5:3e:85:9e:2d:36:69:87:eb:62:
6e:b5:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:09 2025 by rpki-client