Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: PVyN7AfTuhBo0MSaYlmc7XpjKXt6aIN2woECEok30jA=
Subject key identifier: D1:B6:F5:A5:86:16:3D:7E:5C:1B:B6:DF:A0:B8:45:63:38:38:A5:89
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 0198D4E072DD1E72D02FB2AD91E221DDC8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:15 +0000
Manifest this update: Sat 23 Aug 2025 03:02:15 +0000
Manifest next update: Sun 24 Aug 2025 03:02:15 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: nJmQXUG8+1rAGchH/4B7zktnqc/avv4nm1tj0pXgM9g=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:72:dd:1e:72:d0:2f:b2:ad:91:e2:21:dd:c8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Aug 23 03:02:15 2025 GMT
Not After : Aug 24 03:02:15 2025 GMT
Subject: CN=d1b6f5a586163d7e5c1bb6dfa0b845633838a589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:a8:9a:c9:44:05:76:4c:28:30:be:64:3e:
63:7d:bc:17:86:a3:11:b7:df:52:a2:a4:a0:00:36:
50:5e:c4:08:2b:a6:12:d2:ac:c8:0b:49:b9:b2:ed:
fc:36:23:68:4a:0e:87:41:92:06:7c:e6:26:22:ff:
81:2a:b5:3f:d5:4e:b7:7a:1a:0d:dc:37:8b:e6:53:
8b:34:95:c8:5c:3c:24:27:05:84:fc:0a:5d:0f:11:
4a:db:98:12:7f:75:84:e3:71:99:38:72:90:ac:7d:
3c:cc:85:53:90:d1:e3:63:73:0b:93:11:24:53:30:
78:9d:97:2b:98:18:d5:e4:c0:30:e1:99:98:cc:cf:
9c:0b:0c:76:76:d4:6a:0e:73:2b:17:ed:ff:ff:26:
47:0e:31:b9:0b:45:66:02:e7:8d:59:58:fe:8f:41:
b2:16:42:16:af:53:be:85:51:d1:b0:2b:47:61:a6:
a5:3d:19:a6:f5:69:3a:0b:c9:fa:5e:50:65:8a:4f:
59:db:57:a2:f0:98:e7:08:b3:88:d4:53:07:6d:57:
69:3f:af:df:39:db:95:86:8d:f5:c0:86:d4:22:aa:
d9:97:c8:f1:cd:0d:72:ce:82:83:d5:d0:3e:24:cc:
b2:0c:f6:e6:7e:d0:ba:82:db:80:10:28:22:18:96:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B6:F5:A5:86:16:3D:7E:5C:1B:B6:DF:A0:B8:45:63:38:38:A5:89
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:19:ee:55:60:94:ed:74:0d:09:dc:09:9e:95:20:d5:92:
40:53:fd:84:b9:51:66:fa:8b:a1:d6:ac:d5:08:41:e9:56:81:
e3:b7:52:74:0a:05:db:0e:b0:d0:7b:20:7a:85:c8:5b:ff:0c:
4d:4f:aa:38:b9:f1:f4:81:07:81:ff:f0:1b:03:e6:6c:d2:d0:
12:05:c5:da:8e:fe:ba:8d:be:93:33:ae:86:a0:d9:53:03:84:
eb:60:7b:75:df:aa:f5:5e:fe:e5:1f:0c:76:52:17:71:31:ce:
9b:52:a5:66:ef:10:93:1d:65:4b:8b:d8:30:3e:12:8c:ff:3b:
d8:d6:55:36:77:4d:94:e0:99:8e:e9:09:0a:bc:37:3d:6f:0b:
aa:dd:6e:0c:1f:b0:09:60:99:bb:00:70:4e:83:22:c7:8b:47:
c8:8e:8a:72:5f:6e:b1:f9:f4:c4:a1:f5:77:b1:f2:70:be:c9:
fe:d8:6a:1b:bb:1e:6a:ae:a4:0b:59:b9:52:44:62:74:78:cf:
04:bc:4b:25:48:d9:2f:34:09:31:94:cd:f4:ed:87:4a:ff:6d:
b0:5a:cd:0f:2d:72:2b:2d:f2:cc:48:58:7e:de:ae:45:ce:ca:
0b:db:9c:8e:95:4e:33:64:0c:bc:2a:12:e9:9d:22:e4:1d:00:
9d:5a:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:21 2025 by rpki-client