Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json)
Hash identifier: +9a1MYH9Xp2XLX4+IV546yn+caVY0Nzy3PdFbdsDQKo=
Subject key identifier: 89:BD:AC:2E:85:8F:FD:1E:EA:27:75:08:25:A2:A1:2F:B7:25:E0:58
Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Certificate serial: 0198D73AEC3CDAD2FB6E86254C79ABEC4D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
Manifest number: 0615
Signing time: Sat 23 Aug 2025 14:00:19 +0000
Manifest this update: Sat 23 Aug 2025 14:00:19 +0000
Manifest next update: Sun 24 Aug 2025 14:00:19 +0000
Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=)
2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: qDQ5Kz6jpji4iNnmr1YkOFdmIkeBTVXz065oafJsnlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:ec:3c:da:d2:fb:6e:86:25:4c:79:ab:ec:4d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035
Validity
Not Before: Aug 23 14:00:19 2025 GMT
Not After : Aug 24 14:00:19 2025 GMT
Subject: CN=89bdac2e858ffd1eea27750825a2a12fb725e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:92:b2:08:39:e3:9a:2a:10:42:bd:06:b7:
55:5b:dd:2d:4e:ea:50:31:d4:a0:70:16:0f:ce:53:
5f:e3:ee:94:53:e3:7b:7a:96:c6:a2:9a:a6:18:1b:
90:55:f0:d1:48:47:42:d0:60:bc:79:b4:45:21:4d:
4b:14:4b:5b:1b:77:f4:74:17:bd:d9:46:6c:7a:65:
ed:25:dd:73:d9:3a:fc:e3:08:7d:40:3f:43:48:f5:
a0:64:72:7a:d0:d6:3c:09:28:e5:10:be:76:cf:61:
44:af:1f:2c:4d:6e:1a:0e:e3:2e:01:51:ba:fe:b8:
20:21:73:b9:13:3b:65:35:b4:b0:c2:4c:28:51:88:
af:ac:62:b4:50:ab:2a:dc:c3:91:ca:93:3f:59:19:
3f:1f:61:f1:a4:f8:e2:44:a8:6b:50:42:1f:8b:86:
71:98:c5:41:e2:c0:84:05:05:be:9b:09:a6:cd:5f:
b2:09:68:a8:48:0f:ea:98:7b:98:e1:ea:6c:c9:e9:
8a:d5:64:17:b3:78:ec:75:50:b7:22:4a:88:e6:16:
98:c3:67:00:2e:0d:26:e1:f5:42:3f:a4:65:ac:79:
05:81:28:0c:49:70:38:b9:1d:bc:38:eb:b2:1a:11:
a8:51:92:7a:10:07:1c:c2:73:fc:83:a3:9c:c2:19:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BD:AC:2E:85:8F:FD:1E:EA:27:75:08:25:A2:A1:2F:B7:25:E0:58
X509v3 Authority Key Identifier:
keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:63:18:ae:f6:97:5a:4a:3f:c0:40:fa:e4:54:3b:fe:a3:3d:
6c:ac:45:91:e7:cf:3c:8b:e1:44:b2:e0:d0:e5:ef:5b:91:2d:
cd:d5:8f:f1:c5:b0:1b:c2:90:24:25:77:c3:9a:f9:99:2c:8b:
e3:48:ee:57:e0:2a:3b:10:b1:bc:d3:a3:ab:26:05:8e:5f:4c:
cb:a6:34:5d:bf:df:00:72:1c:2a:e1:84:a5:4e:d4:45:79:6a:
54:27:92:55:37:b9:50:fd:97:ca:ec:e9:93:0c:91:cc:3f:2d:
8a:f0:89:25:ff:34:ca:af:e6:d1:3d:7a:c4:bf:1c:f7:f3:c9:
28:ad:29:cc:a5:6f:87:7b:3f:9d:78:a0:ee:b2:9e:e9:0a:71:
5d:b2:05:7d:42:54:a8:b2:e2:2d:2f:66:a2:f4:06:f6:0b:7e:
48:4d:0a:ac:88:58:21:c3:ac:30:46:1e:f4:b2:48:b9:5b:00:
57:47:a8:d8:6a:1a:35:2d:73:c6:40:d8:4c:2a:23:70:5f:f0:
15:21:5a:dc:c5:dc:1d:62:2f:60:53:1e:ae:f3:2b:6e:3f:3e:
97:31:ca:03:00:26:61:c2:8c:55:b6:be:31:7e:96:b0:b5:e4:
3a:e0:13:bb:0a:52:d5:47:93:1a:6a:3e:91:b0:c1:4e:d6:6c:
d0:ed:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:45:02 2025 by rpki-client