Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: iPP7UoS/Of1QaoAtfB+jiESG/8Osn2jOI13SFdKHKYw=
Subject key identifier: 63:E9:47:2A:F0:72:A7:3A:BB:22:C9:DD:BD:4F:4D:DE:E5:DB:11:AC
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 019854FD087080D9734BF8BE65A5DC75AA3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 1226
Signing time: Tue 29 Jul 2025 07:02:05 +0000
Manifest this update: Tue 29 Jul 2025 07:02:05 +0000
Manifest next update: Wed 30 Jul 2025 07:02:05 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: uQ0WhjjDB2zRRFs9r/xMi78N+bxmVnUlws6W0KHOZcs=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fd:08:70:80:d9:73:4b:f8:be:65:a5:dc:75:aa:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Jul 29 07:02:05 2025 GMT
Not After : Jul 30 07:02:05 2025 GMT
Subject: CN=63e9472af072a73abb22c9ddbd4f4ddee5db11ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:c2:05:aa:5a:b2:88:24:b3:20:73:fb:20:
d1:34:19:9f:f0:1a:b3:4f:16:0b:9e:f1:dd:3d:d1:
2a:7c:e6:0c:d3:26:b8:24:d2:33:32:5a:69:5f:18:
a2:90:bb:3b:91:cd:6a:bf:eb:c1:ff:ae:88:1f:71:
09:d6:67:8f:f0:64:66:95:5e:ab:aa:6f:7d:5d:6a:
57:97:6c:b8:f3:2d:e3:78:9a:4d:47:f1:4e:06:4a:
d7:a6:d7:f7:dc:0c:72:07:d3:d2:88:41:24:8b:38:
97:11:86:9c:c4:b9:24:31:fd:e8:19:23:3c:c3:b6:
4a:bc:87:e9:7a:55:84:99:e1:c1:90:d3:a8:44:44:
c7:1f:e5:1e:b9:b9:33:07:ee:f9:ac:6a:d3:cd:a9:
a8:ff:b9:b7:b7:97:72:db:9c:94:02:18:f9:fe:d0:
50:24:60:48:a0:4b:28:c7:21:4f:d3:ae:28:89:36:
bd:c0:b0:4a:9c:25:0c:99:29:a1:82:21:02:91:25:
79:03:6a:65:79:53:72:f3:8b:d2:34:ff:bd:f8:aa:
ed:ea:00:6c:fe:bc:30:97:5e:d3:2f:b9:f7:d0:e3:
27:c2:ec:49:18:96:68:ac:77:99:c1:7e:ce:3b:03:
75:d9:9a:3f:45:b7:c1:cd:38:4a:18:5c:ce:23:f8:
8e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:47:2A:F0:72:A7:3A:BB:22:C9:DD:BD:4F:4D:DE:E5:DB:11:AC
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:60:d7:6f:26:9f:4d:9b:33:32:f6:c2:e8:8f:71:44:13:7a:
b6:82:4c:25:76:dc:e6:75:fa:b5:ff:7f:11:f6:9a:fb:ab:b5:
ac:66:ac:14:d7:02:e7:5d:a4:31:a8:a1:88:e9:6b:29:9b:51:
1e:65:ba:09:ae:23:ae:63:65:00:26:cf:c1:03:52:77:b3:cb:
a2:da:a3:c3:39:42:39:db:0c:21:e2:6c:b3:cd:6f:59:9a:e4:
3a:86:85:4d:28:21:bb:a6:de:3d:8e:bd:4c:9a:a3:cc:a4:69:
ca:0f:fa:27:70:a7:68:44:28:07:c6:6c:e1:2e:d7:56:bf:1a:
ee:de:21:cd:33:c9:aa:c0:1f:8f:2c:03:b1:c9:ff:88:03:18:
ca:d0:38:ed:fa:ca:5c:50:3b:9e:1f:11:5e:f2:9d:f3:2e:cb:
e6:88:bd:04:82:bd:6e:59:88:0f:6c:aa:bb:71:52:85:3d:f4:
b2:eb:10:9a:b2:54:55:29:a3:ce:96:46:80:d8:c1:5a:00:ff:
9a:e5:ec:cf:70:a3:3d:9c:c6:de:44:87:22:43:41:e2:c6:65:
98:1b:4f:93:89:ac:20:13:57:ec:c1:ef:2d:9c:7c:a3:94:33:
37:05:fc:00:6c:c3:d7:be:36:47:4f:48:43:af:1a:99:fb:10:
99:dc:27:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:21 2025 by rpki-client