Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: tubTdBuXr+c8Irg5Dr76RO6XWRcSSEVf+CQ1lS2KsMI=
Subject key identifier: B6:C7:12:7E:91:8B:C4:CD:A9:1C:8D:49:B9:63:A0:A6:BA:01:CC:29
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 0198D473B2F29BDF7537E60D6D9347E5E70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 022E
Signing time: Sat 23 Aug 2025 01:03:28 +0000
Manifest this update: Sat 23 Aug 2025 01:03:28 +0000
Manifest next update: Sun 24 Aug 2025 01:03:28 +0000
Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: GYs8qRoifoqv1j6t6y3rMKCHy+ngDmyq1wcTnM9Eu94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:b2:f2:9b:df:75:37:e6:0d:6d:93:47:e5:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Aug 23 01:03:28 2025 GMT
Not After : Aug 24 01:03:28 2025 GMT
Subject: CN=b6c7127e918bc4cda91c8d49b963a0a6ba01cc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:a4:77:69:c0:a4:25:e7:d9:60:b0:23:ca:
c3:9a:1a:58:99:4c:0a:2f:5b:e4:b9:0c:a9:ec:7a:
c4:f5:7e:b5:6b:78:06:64:96:78:49:16:04:ee:95:
f8:3f:ab:c4:3e:d8:ab:4f:fa:2e:fe:dc:bc:23:95:
3c:43:6d:7e:2c:4b:ca:b4:10:80:9e:db:7d:e4:0c:
f7:3f:0e:70:3d:15:f7:73:88:04:94:a8:99:fe:6b:
ea:3a:2f:36:77:66:d9:6c:68:98:2b:1a:35:66:fe:
c0:fc:96:3e:17:dc:30:aa:1f:55:6c:5f:91:99:d1:
52:f5:e7:4b:61:ab:cf:06:a5:6c:a8:18:e4:0b:0d:
88:b3:21:fe:5c:df:8c:bf:26:1c:32:c6:5e:29:3b:
89:46:1d:f0:ef:4e:b8:95:ce:35:86:bc:6b:8c:64:
e3:5a:b0:53:09:d0:66:0d:b7:36:aa:26:81:d3:41:
de:aa:8c:20:6b:11:2a:1d:9c:d8:bf:f9:86:1d:e7:
d1:50:3a:bb:9e:56:7c:1f:77:b8:99:86:ff:66:da:
e8:27:6b:25:37:ff:b8:c6:44:60:cc:df:74:3e:9b:
e2:67:88:47:79:e0:f4:73:00:d7:14:09:aa:c9:ed:
d1:11:e3:94:c5:3d:21:10:a4:24:69:c4:92:cc:65:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C7:12:7E:91:8B:C4:CD:A9:1C:8D:49:B9:63:A0:A6:BA:01:CC:29
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0f:47:9b:8e:68:b5:f1:a7:00:12:05:60:d0:ca:59:49:f0:
8a:b1:e0:10:44:41:34:e1:b6:55:55:22:f6:99:80:d6:ca:7b:
3c:2c:4a:f0:25:50:5a:6a:ab:05:83:3c:43:35:59:66:d1:d7:
14:31:51:bf:94:a0:67:c0:97:31:12:3b:94:4f:ba:df:8b:ee:
36:6f:8e:56:7a:74:f3:bc:23:04:78:21:5c:4d:b3:77:e5:c3:
5c:82:9e:84:c5:84:a5:cf:53:ae:32:1a:b0:5b:0f:13:5f:d0:
d5:94:8e:e3:38:4c:bb:76:e5:11:34:01:b0:75:8e:ff:9a:b4:
b2:13:72:92:a9:9b:89:1c:da:4f:35:61:15:79:4a:38:0e:e5:
11:42:9b:5b:ce:ee:58:2f:e1:ae:20:ab:fa:63:e8:6b:ce:dc:
16:51:61:12:71:69:f0:c0:90:3d:16:a1:3d:51:e3:82:01:14:
9c:7c:5a:8f:bf:59:14:e3:ca:c6:7b:4b:c0:a8:7f:e2:8d:14:
f1:bb:c4:4f:da:a6:54:cf:05:a1:24:40:65:c9:b8:63:66:50:
fa:b7:69:1d:f0:ee:27:08:d0:80:44:13:68:1b:84:bb:67:26:
be:84:1b:8c:29:93:e1:ab:98:b3:1c:69:b8:07:71:08:97:bc:
61:0c:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:24 2025 by rpki-client