Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: skelNlHie52QCy1LwDvxASHrtI9R7grOOZhoO/pg8T0=
Subject key identifier: 89:A5:F4:9D:00:86:6F:F1:02:30:D3:5B:0F:46:54:29:4E:7E:CF:AC
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 0198D660912FEF4346B076CE00B7DDD1CD8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 086D
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: OiPsaPrKn3Yq0HiFl00KPwDLRLvFh6HCzvHrT+Lqras=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:91:2f:ef:43:46:b0:76:ce:00:b7:dd:d1:cd:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=89a5f49d00866ff10230d35b0f4654294e7ecfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:b0:6b:4a:5f:6f:76:17:6b:d5:53:e9:4a:
61:c9:a1:ab:52:b3:0e:cd:cc:c4:c9:fb:cc:6a:1b:
f5:6f:4b:2c:d1:a8:20:3f:d2:13:0e:c5:ff:93:ad:
1f:17:8c:30:32:0d:aa:5a:2b:32:0f:50:a9:40:6c:
c0:ea:14:3a:66:17:02:21:ca:fc:48:13:d5:da:58:
ce:a9:82:fa:51:22:d4:77:60:ea:ca:2a:d3:e8:6b:
29:4f:45:93:6b:e3:fe:92:15:73:32:6c:d9:b9:3b:
19:9b:ec:2e:25:07:61:bf:1a:94:70:f9:c2:de:68:
15:e0:ea:5f:2c:1d:16:ce:bb:73:6a:66:7c:6f:0e:
59:c7:6b:12:7a:9c:88:0d:7c:b8:af:c1:b1:d0:b3:
bd:ea:34:82:fd:aa:0f:dd:29:d2:82:3b:94:95:11:
08:16:eb:09:6b:79:17:eb:e1:56:f2:44:4f:23:01:
d5:a9:48:2a:37:6d:c5:9a:50:5d:7a:89:ae:ea:de:
f1:82:23:24:ca:4b:fb:59:14:fd:3f:73:05:96:01:
2e:e0:e9:fe:8a:07:10:e3:a8:53:bd:73:6d:73:19:
d0:4d:82:94:bd:db:1f:72:de:6f:e3:34:30:ab:d8:
03:2e:f7:bb:12:63:53:99:0d:52:d8:73:42:e5:ac:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A5:F4:9D:00:86:6F:F1:02:30:D3:5B:0F:46:54:29:4E:7E:CF:AC
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:71:05:62:73:eb:09:93:45:70:43:9a:f8:9a:4e:06:8a:
8d:0d:29:45:da:b5:e6:67:df:83:d9:51:d3:e8:0a:ab:7f:eb:
4a:98:2b:b8:5b:e7:12:b9:e7:f2:df:35:50:c8:98:c4:3b:98:
86:e5:af:90:87:d1:f6:90:ed:a9:d6:29:9f:03:db:13:d8:21:
f6:9c:2d:a8:8e:be:4d:9f:f6:ad:53:c4:ce:02:41:ae:ef:68:
58:25:54:94:5d:02:eb:b1:52:82:0e:5f:6e:1b:3a:c6:96:53:
8d:3e:58:e3:59:9b:7e:9e:31:b0:2b:b2:f2:40:f8:45:06:67:
ea:fc:64:b9:53:51:69:4c:7b:61:ed:5c:d9:eb:ac:5f:1d:1e:
59:9c:ce:fa:88:b4:24:36:ba:18:be:4f:e0:c0:65:8f:38:5b:
08:2d:7e:12:26:d7:58:63:b8:73:03:49:19:e2:73:a9:e0:28:
42:2b:ed:25:ab:98:2e:69:3c:ff:b6:56:bd:05:6f:df:49:60:
ff:b0:cf:06:6e:a8:08:22:bb:27:80:99:20:7e:a0:4f:19:44:
61:4a:6a:b9:6d:88:ca:5d:78:ee:ec:26:1f:21:8d:df:e2:2a:
34:18:15:6a:c1:51:f6:13:9c:6c:9a:f0:20:5e:37:e9:83:4e:
86:44:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:27 2025 by rpki-client