Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: Zvn9RO4V6ty4Aun8LVGC0KO+fs4VGXpunX2TQiPD7PA=
Subject key identifier: E0:5E:18:28:D1:3E:81:ED:DD:4F:62:4C:F1:7D:49:92:4C:51:40:B7
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01983FBDDAF1E576C357E9688A2B6CBA644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 15FA
Signing time: Fri 25 Jul 2025 04:01:03 +0000
Manifest this update: Fri 25 Jul 2025 04:01:03 +0000
Manifest next update: Sat 26 Jul 2025 04:01:03 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: lJTSayyT5QTDE20kUNKGK1AIKtcWqaIvGpFnV5eLhZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:da:f1:e5:76:c3:57:e9:68:8a:2b:6c:ba:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jul 25 04:01:03 2025 GMT
Not After : Jul 26 04:01:03 2025 GMT
Subject: CN=e05e1828d13e81eddd4f624cf17d49924c5140b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:88:d5:e5:51:e2:8b:78:5d:d8:bb:a5:b3:6e:
94:17:c2:2d:24:8b:1d:48:fc:22:87:ce:b1:92:34:
2e:df:87:8a:e6:6b:62:5c:07:33:a9:85:76:c2:48:
28:c2:34:30:b6:b4:01:a2:e3:ef:58:11:07:61:06:
9f:7b:9e:a7:87:ca:3d:83:b8:59:fe:65:62:eb:40:
15:b5:50:e6:f0:45:72:48:8d:f9:74:df:29:66:42:
18:c8:99:e9:e2:b5:39:e1:8e:ef:c3:df:77:d4:4b:
5e:55:34:ed:99:ac:ef:a6:68:a6:81:30:a9:0c:ac:
15:f0:3c:4d:82:8a:4c:2b:dc:6b:ab:16:7e:8d:e6:
53:dd:0e:4e:9f:b5:ce:6a:23:74:bf:63:96:18:20:
3f:87:c8:73:b0:52:6f:1e:28:99:f6:93:ca:b7:09:
18:4e:29:2b:f4:b5:75:0a:df:21:4d:cb:47:ba:a7:
89:05:c9:ca:db:f5:c7:fc:ca:3e:42:fa:79:a4:89:
8a:dd:07:d3:f7:3d:b3:84:f1:89:b2:08:09:c9:7b:
86:0d:15:38:03:70:48:35:ce:de:47:4b:5c:29:c2:
bd:e6:9b:57:6b:2f:76:61:cd:6e:6f:83:24:88:4c:
16:8b:82:8a:59:27:fe:0b:9d:f6:3c:7f:73:d3:7f:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:18:28:D1:3E:81:ED:DD:4F:62:4C:F1:7D:49:92:4C:51:40:B7
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:57:c8:c0:b8:40:79:ca:bf:9b:d3:e4:33:61:3f:d1:2a:
1e:60:a8:aa:52:c1:73:a9:f0:8d:76:53:0f:ed:95:a2:51:e8:
86:8a:c1:da:6d:35:90:fa:1f:ff:9b:d6:4d:0d:8c:95:1a:48:
94:e7:4c:f2:d9:63:c8:e9:2f:15:e0:31:42:47:16:78:db:e2:
54:c4:1f:c5:3e:cc:3d:15:7f:7b:79:5a:5f:71:14:0a:13:0d:
5e:7e:ea:bd:22:7f:77:87:fc:29:e3:12:82:f8:37:a0:18:a7:
f9:c1:50:85:1d:25:cb:b7:65:c8:4c:66:cc:19:a2:46:d9:a9:
50:8f:20:98:76:a5:81:5e:c4:c7:be:f8:6c:e4:13:ef:5f:87:
b8:11:5c:bd:f3:2b:99:99:f9:23:ca:6a:f2:b2:8c:5d:2f:06:
05:89:6c:bf:94:b8:9a:61:ff:55:80:09:e8:fe:bc:4a:6c:88:
f6:04:a5:92:b2:13:bf:0e:c3:a4:19:34:0b:6d:b7:04:a0:7e:
c1:70:11:d5:87:90:91:d0:0b:8d:9d:9d:fb:d4:c9:6b:8a:15:
d3:14:86:86:a8:34:26:cb:99:fe:58:a6:c5:4d:4b:4b:9d:6b:
bb:99:1c:3a:9d:94:11:ed:b7:9c:08:c2:9e:5a:20:52:24:1a:
f4:8d:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:40 2025 by rpki-client