Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
File: xeP39AwQDf_bGBIccmGZ6FgExYU.mft (raw, json)
Hash identifier: y9AnFDcn4ADHGklEvfpUHKGqC0+oNiadesYFAXRzDYM=
Subject key identifier: BF:1A:64:21:74:35:E7:5B:96:FE:37:96:44:F6:CE:46:5F:F8:D9:92
Authority key identifier: C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
Certificate issuer: /CN=c5e3f7f40c100dffdb18121c726199e85804c585
Certificate serial: 0198D54EAA7E7FA9BCCA7AD87B801E40C3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: pziQk_Jpqg7RVSwxW0kshn-FxgM.roa (hash: 3IfnTIQK5ln+c+ATiKdOHRNEXtXgflbchwoY1RIrNJU=)
2: xeP39AwQDf_bGBIccmGZ6FgExYU.crl (hash: 2TAFUJ2UIMd8CKhzMQh63JwrIWpMrPmo56PKDE/qrQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:aa:7e:7f:a9:bc:ca:7a:d8:7b:80:1e:40:c3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e3f7f40c100dffdb18121c726199e85804c585
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=bf1a64217435e75b96fe379644f6ce465ff8d992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b5:5c:87:c6:a5:94:68:b4:6c:d2:16:76:b6:
d5:3d:78:55:6f:f6:f9:6d:9c:66:7f:d7:c7:04:93:
63:9e:ab:5b:f3:29:dc:bd:6b:2d:84:11:c9:36:dd:
81:ca:db:31:d6:94:83:50:0b:e6:cd:82:e6:39:72:
e5:07:75:91:22:3c:1e:5f:c4:17:70:bb:b1:10:30:
9c:94:56:70:e5:e0:dd:9f:d1:45:e6:0f:2d:71:c3:
67:e8:fc:a9:39:ff:9a:05:90:95:52:5b:a4:1f:04:
ae:18:04:5f:c7:69:6e:8b:2a:00:34:a6:ba:c0:03:
e9:8c:65:c0:da:78:73:e3:dd:8a:81:9d:df:5b:b4:
10:ff:d8:64:0e:d0:f1:e2:08:01:89:26:76:10:e4:
29:78:41:36:ea:cd:0f:94:b1:9b:5d:30:a1:22:e3:
7d:d8:cb:ad:5e:71:a9:62:69:e2:1c:e7:d5:62:b1:
ca:ae:01:95:cc:88:05:2c:1f:36:22:19:cf:77:14:
21:04:9f:bc:4b:d0:1e:ec:d5:77:36:92:e8:b2:be:
0e:f8:b1:6b:e3:a1:3a:af:d3:70:f8:a8:17:48:aa:
30:02:68:87:c1:19:4f:e5:fe:a1:f3:90:11:b4:04:
52:6e:e8:7e:97:ea:12:45:31:ad:42:d9:24:a1:23:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:64:21:74:35:E7:5B:96:FE:37:96:44:F6:CE:46:5F:F8:D9:92
X509v3 Authority Key Identifier:
keyid:C5:E3:F7:F4:0C:10:0D:FF:DB:18:12:1C:72:61:99:E8:58:04:C5:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeP39AwQDf_bGBIccmGZ6FgExYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eaf6ed-baf4-41bf-9f22-7d972e1d2e61/1/xeP39AwQDf_bGBIccmGZ6FgExYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:56:c7:c0:c5:aa:2d:1e:c3:7f:6f:30:78:0e:d8:f4:a3:20:
1a:77:96:1c:5f:83:8a:81:32:96:53:b2:1e:94:13:56:3f:4c:
26:b1:0e:b4:4f:b7:90:b3:28:72:5a:39:40:9b:29:1c:73:a1:
b5:db:17:e9:e1:3e:09:66:31:52:94:06:27:9c:4c:f1:45:8f:
0a:ed:58:43:bd:93:3b:e0:ba:52:8a:6b:43:79:04:e3:5b:9e:
b3:6b:fc:1e:14:11:73:ab:f8:c4:ee:41:6d:53:e4:1f:9b:17:
6b:70:f3:73:6e:2d:0e:55:bc:f3:c0:2a:5d:b1:32:6d:1d:dd:
80:2c:87:a5:36:7c:f8:0b:3c:b1:09:c9:c2:0a:19:aa:d7:08:
44:4c:c5:36:07:fd:ff:d2:aa:2a:ce:b0:8b:3c:28:74:10:20:
ad:9f:df:72:a9:40:dc:9c:a4:c9:24:87:15:16:93:7b:6d:38:
a5:a9:e5:a7:f4:df:e0:d4:cd:82:7e:11:d7:e8:ab:89:b8:0c:
51:69:1c:24:31:f6:78:0c:43:4e:0f:90:bf:6f:1b:22:c6:70:
13:e8:52:09:c0:8a:53:6a:55:28:11:ad:1a:23:95:f9:9b:88:
12:83:e2:39:4d:a9:63:8b:d7:45:fd:4f:4b:0d:a8:d0:f7:e3:
81:50:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:40 2025 by rpki-client