Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: +fbqEe9tE1eLlFJJnuTBj9F6n9MNVg1Zsritcy4/8Og=
Subject key identifier: DF:1C:CE:7F:2D:F7:F2:5A:10:07:2C:78:B7:98:25:54:2E:57:C4:7D
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 0198D54E13F56EFF003B9D66A49709CCD55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0A81
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: IzmeYXYlO_xmlW74WeQyL7gffpE.roa (hash: Z5XX/V/bAHCE8fRhzNUzhUtEMOMQ14B1YoCinHSL1lM=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: 8lH6OTjqtqSr/41uSRn0B+VG79vK1/YgZFCOVk2JRMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:13:f5:6e:ff:00:3b:9d:66:a4:97:09:cc:d5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=df1cce7f2df7f25a10072c78b79825542e57c47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f3:04:25:40:73:f8:d6:33:bd:23:81:40:18:
b0:fa:31:c8:46:41:0a:9c:48:07:05:fc:37:b3:f6:
e7:20:b4:bf:21:23:eb:4c:af:92:8d:f1:60:28:10:
7b:84:ec:4c:7a:df:5a:4f:ae:18:ba:70:3e:cd:75:
5f:76:7c:9e:e7:f9:3b:3b:2d:b6:f7:d8:93:65:a0:
31:02:5b:ad:2d:a8:b5:77:3b:20:f4:89:72:3e:6b:
62:a1:ca:d7:2e:c6:7d:17:c3:64:a7:8c:17:50:3f:
18:eb:10:1b:11:99:f1:fb:01:68:39:72:e5:30:09:
cf:31:0e:09:d9:f8:75:94:2b:a9:e6:2a:5c:3f:32:
07:a4:c8:ec:e5:17:2f:b3:d4:7f:19:07:be:87:00:
7b:0f:3d:a1:b9:cb:6c:66:e2:3d:28:22:72:80:8c:
71:5d:38:14:f2:ab:6d:41:0e:34:d9:8f:c0:1d:65:
3d:de:77:29:0b:91:c3:92:61:1b:c9:e7:e7:e4:ae:
49:10:7e:8a:bd:49:a8:97:bf:56:f8:c8:b6:8a:0c:
50:60:9d:8b:fc:73:37:93:dd:9b:2e:86:34:ee:55:
70:6e:a3:92:1e:78:10:48:f0:b6:17:b6:7d:e6:0c:
3e:5c:07:e7:fd:1c:ca:72:4f:c5:b8:04:82:43:07:
0c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1C:CE:7F:2D:F7:F2:5A:10:07:2C:78:B7:98:25:54:2E:57:C4:7D
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fa:13:61:79:27:dd:7d:bf:42:6b:c3:df:fb:87:f1:f9:0b:
d9:64:b1:24:d4:7e:0a:bd:15:48:6f:c0:2d:91:86:0e:33:a3:
ef:d4:51:9b:34:db:4b:2a:c7:ef:a9:51:81:48:f1:c8:26:d4:
0a:72:96:c6:e1:45:f0:55:d5:c3:ff:6d:3b:82:83:70:6b:a0:
7b:f3:15:72:7a:0d:f9:05:97:01:4e:9f:a3:d1:81:9a:ae:6a:
d1:a3:89:3d:6a:72:ea:e2:b2:73:98:a2:89:54:48:54:b1:34:
a2:f9:fa:a2:6a:37:36:1c:2e:c2:21:bc:bd:94:e2:90:46:bb:
c3:2f:20:11:81:14:e6:2e:da:a6:b1:e0:07:b4:ff:56:ae:cc:
c6:af:b9:1e:ab:c9:19:85:6b:cb:15:da:9b:17:0d:de:15:a0:
29:ac:de:57:5b:6a:45:81:14:e2:6f:ce:a3:94:50:c6:05:e5:
01:de:11:52:8b:f4:6f:9c:85:c1:3d:a2:60:72:80:4f:d2:e6:
8e:f6:5e:f0:d4:1f:9c:af:74:e6:ec:03:45:84:b7:26:48:71:
fa:1a:a3:74:46:a2:0a:d0:4a:dc:1b:e5:7e:f5:1c:a0:c5:47:
7e:09:61:87:32:94:0d:91:e1:9b:7c:df:ee:6e:37:bb:2d:1b:
a7:38:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:31 2025 by rpki-client