Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: be571hnrOmpkJGbwaL7l0UcmMXgGWHESN80etyqu5Ho=
Subject key identifier: D4:83:66:81:1B:95:3B:37:A8:EB:01:3F:6A:96:FA:19:63:A5:87:C0
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 0198D5F15A72B0A1B4B97A2562C1C44ABEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 0AB4
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: k3/XopgEXFO35QcplZkxVuq/bF9JFJHbPeC9WZZKnJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5a:72:b0:a1:b4:b9:7a:25:62:c1:c4:4a:be:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=d48366811b953b37a8eb013f6a96fa1963a587c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:ab:4f:17:88:c0:91:e4:58:ab:30:bb:c3:
ef:b1:f7:cd:58:3e:63:28:1d:68:0b:a2:94:68:6f:
82:7c:fe:e4:1a:c6:5e:93:c4:b0:58:6e:34:13:29:
07:ab:2b:21:b1:d5:4c:f8:cd:e3:c3:f6:de:5a:13:
a9:5b:cf:8b:0c:4b:d1:c9:3a:41:fe:d3:92:33:e3:
6e:69:d6:34:28:0b:c5:dc:f6:f7:e5:3c:79:d1:5f:
57:49:89:33:6b:3a:de:57:4c:61:9b:08:ff:6c:cc:
fe:a1:5f:57:1a:c7:19:82:55:d3:68:1a:a4:bb:4e:
da:44:0e:71:c6:36:ce:03:b6:42:53:10:62:a1:2a:
e9:e7:c5:a8:c7:e0:c5:35:65:21:e2:fb:a3:35:7c:
bd:ac:90:71:15:d1:1b:09:ee:7f:b0:20:c6:3a:47:
3d:7c:2f:5c:38:eb:ad:4f:fc:7a:ca:64:a2:0d:81:
de:f0:b0:47:6e:2c:61:e3:27:54:66:48:50:bf:10:
4c:79:40:28:99:e0:82:8b:4f:61:b1:eb:34:c3:c6:
26:55:a6:a3:75:99:ee:85:0c:9b:6a:c8:78:f2:26:
69:de:ca:ff:6d:d8:68:07:6c:41:2d:75:11:4c:25:
f0:67:2e:29:52:6d:9d:86:02:48:e8:4d:68:3e:34:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:66:81:1B:95:3B:37:A8:EB:01:3F:6A:96:FA:19:63:A5:87:C0
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fc:86:12:8b:73:08:96:42:17:e4:c1:4f:16:93:7c:9a:1f:
f9:f8:52:8d:66:58:8e:56:12:43:7d:a9:b2:18:2a:1c:52:b1:
1e:8c:c9:3b:68:ee:67:32:c0:e9:5e:60:aa:dd:fa:8b:1c:d4:
08:5a:27:14:8a:c6:34:2f:b7:fe:fc:dd:51:a4:9a:aa:74:f0:
f0:e5:05:99:f9:96:d7:34:25:17:af:3e:de:09:52:85:a1:2d:
e3:2e:64:50:11:7f:ed:a7:56:52:26:59:b5:65:98:16:7e:de:
f8:46:39:57:14:0d:9b:09:c9:24:21:1c:58:16:e5:eb:83:f8:
d4:32:86:b5:02:d3:ba:81:af:4d:97:f9:ed:1c:45:d9:43:e1:
f0:d6:4d:6a:f6:f5:d6:3f:60:f0:ae:e9:46:f1:41:73:bd:52:
94:84:3d:81:70:a2:10:f5:7b:24:7b:ba:07:8f:bc:aa:3e:42:
ea:84:9f:2d:12:c6:d7:63:7e:33:14:c6:ac:b4:e7:54:2d:70:
85:1e:07:a0:64:54:9a:aa:67:f0:e0:a3:d5:3f:f2:12:e9:30:
23:8d:0a:d2:53:a7:74:ec:19:3d:b4:fb:3c:64:84:cf:8e:13:
08:ad:6f:95:ec:4b:22:35:a2:bd:96:80:1a:db:03:b5:f8:5b:
1d:25:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:21 2025 by rpki-client