Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
File: XiMd-Hvf4ien5eQZNANwurMB4nk.mft (raw, json)
Hash identifier: jasDqjhcnTcjE8xwwp/IWXkruGXr5OrQpOFSA1q8UVY=
Subject key identifier: 4F:A3:16:86:6C:BB:CC:51:FE:F1:95:5D:37:41:0D:92:A8:59:A6:2F
Authority key identifier: 5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
Certificate issuer: /CN=5e231df87bdfe227a7e5e419340370bab301e279
Certificate serial: 0198D65F2AE977FF60F8B7638A8542DF4090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
Manifest number: 0C4C
Signing time: Sat 23 Aug 2025 10:00:17 +0000
Manifest this update: Sat 23 Aug 2025 10:00:17 +0000
Manifest next update: Sun 24 Aug 2025 10:00:17 +0000
Files and hashes: 1: XiMd-Hvf4ien5eQZNANwurMB4nk.crl (hash: ljvG4oCG5LRfr0U+hIOcaRw9EmpbZ7h7pkNh3r4Vmzc=)
2: w5D1yX-tZICiSwFR7jL3CytqOn4.roa (hash: 2NNJMvsHwacMFGzvYSwe5becAnCEvkEVPVyFOuRSFjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2a:e9:77:ff:60:f8:b7:63:8a:85:42:df:40:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e231df87bdfe227a7e5e419340370bab301e279
Validity
Not Before: Aug 23 10:00:17 2025 GMT
Not After : Aug 24 10:00:17 2025 GMT
Subject: CN=4fa316866cbbcc51fef1955d37410d92a859a62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:9f:12:50:e6:61:d5:49:94:77:d1:0b:6d:
46:34:96:f9:02:35:ec:e8:e7:0c:4d:41:6d:b5:85:
ec:bf:cb:a2:1e:a4:94:9b:b2:c7:15:14:cb:72:dd:
55:b4:bf:a4:77:1c:5a:61:a7:b4:85:83:b1:be:ff:
a1:4f:a8:df:27:e3:4b:23:bf:56:99:28:76:8d:bd:
86:c0:03:07:c2:eb:c8:96:76:94:08:d0:f3:e6:60:
04:86:15:d4:9e:aa:c2:7f:36:3f:ea:a5:88:3e:74:
58:a0:e5:9d:f0:f3:f3:17:55:c1:dc:06:f8:67:a3:
98:d3:c2:bf:fc:0b:a0:5e:ad:95:2b:a0:48:4e:f6:
c8:e0:12:96:c8:d9:9d:89:77:b8:5c:7b:08:3c:53:
b2:06:21:27:03:1a:2c:27:8a:5a:60:0b:b5:2b:62:
c1:36:ed:1d:51:15:dd:69:22:e9:ca:5d:46:dc:1c:
19:3f:ad:37:39:02:37:ba:6c:8e:2d:a3:bf:d4:14:
33:12:81:0b:5a:b6:9a:40:ba:81:8f:df:e1:9d:87:
97:e3:f8:97:83:5b:87:2a:a3:32:7e:94:4b:79:2b:
93:f5:1d:27:c6:39:ce:95:d7:48:76:38:09:9e:7e:
dd:bb:d8:24:39:c2:58:09:36:28:a5:b5:22:d0:ad:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:16:86:6C:BB:CC:51:FE:F1:95:5D:37:41:0D:92:A8:59:A6:2F
X509v3 Authority Key Identifier:
keyid:5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:28:0a:04:7f:96:00:e9:9d:db:92:f9:ef:c3:b5:b7:1c:c8:
a3:4f:91:1a:ae:17:d6:c2:7b:83:c2:75:a7:72:98:1f:4c:0c:
d8:47:35:b9:b4:2f:1b:f3:87:2c:13:42:cb:77:da:c7:5f:26:
5e:93:dd:c3:ba:4b:83:7b:4b:07:76:6d:c7:eb:47:fc:09:7b:
d8:4d:98:72:da:75:67:bc:c4:4f:c3:bd:c8:fc:b6:8d:90:b8:
aa:43:33:53:98:ef:17:b5:25:17:87:e5:87:fb:5c:38:68:b8:
32:ad:be:b7:cd:20:34:91:98:a4:b3:43:e3:ab:67:90:06:29:
83:05:59:71:9d:65:53:13:a5:76:00:35:34:a5:1a:45:8b:9b:
b6:c2:49:41:70:52:c7:c9:0b:88:8f:51:2a:ab:01:03:bf:b7:
3f:2f:eb:73:97:cb:33:f0:b2:73:90:a0:30:67:d9:5e:a3:d2:
fc:14:3f:3e:a4:1a:b9:b3:b1:af:7f:cd:f1:94:e5:56:77:06:
6f:11:d8:40:e2:55:fe:3f:47:33:ef:ae:b1:8d:9f:6d:f5:2f:
bf:17:83:0b:7e:07:d8:84:58:92:74:c6:2d:76:f1:a5:8d:af:
6d:e7:95:5e:5f:f3:02:07:f3:3a:ae:d8:db:12:3d:89:ca:cb:
72:5d:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:30 2025 by rpki-client