Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: LV+Hkgg3APkQc8JxWjehUrlQ7xk3yOVkYe3+Yeks0OE=
Subject key identifier: 11:A6:C8:D6:53:50:F3:EF:9E:17:8D:83:AF:8C:16:CF:A9:16:95:17
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 0198421A32DE0B400F6C3498C7605AC41262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0516
Signing time: Fri 25 Jul 2025 15:01:09 +0000
Manifest this update: Fri 25 Jul 2025 15:01:09 +0000
Manifest next update: Sat 26 Jul 2025 15:01:09 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: M5Sj9oXwE2pxEsZ8hxDcZUlr2Nk7+5XbbYRnWXaJtAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:1a:32:de:0b:40:0f:6c:34:98:c7:60:5a:c4:12:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Jul 25 15:01:09 2025 GMT
Not After : Jul 26 15:01:09 2025 GMT
Subject: CN=11a6c8d65350f3ef9e178d83af8c16cfa9169517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:7d:87:77:14:a0:e7:52:d4:09:fa:22:da:
1f:52:bd:0a:af:43:9f:42:7f:ce:c3:b0:5e:ca:8d:
3c:2d:2a:57:31:b5:b6:b6:bd:94:60:30:67:d7:2d:
59:c9:4e:2b:a2:97:62:a0:bf:eb:2f:05:b3:d6:46:
03:d4:d9:2e:58:de:a0:4c:c1:e3:a3:b3:09:12:97:
7e:01:ca:db:47:00:63:17:fe:d6:e0:b0:a5:b3:99:
12:3c:66:c9:42:1b:46:e9:16:d3:86:11:fc:7a:7a:
54:6e:aa:72:d5:5d:7d:d3:d9:5c:1a:e0:47:10:05:
d4:47:06:0b:27:7e:f3:10:a2:5f:2a:85:cf:b5:b3:
26:fd:ca:ba:b1:ab:89:b4:f8:d2:c4:e4:19:6c:2d:
c9:e4:0e:be:3c:3b:c7:cd:ef:53:82:c3:ad:d1:4b:
91:9f:33:77:6e:fd:21:bf:27:4a:fc:7b:ba:85:b7:
74:09:39:a7:74:a8:a5:1f:0a:02:f7:16:00:80:e4:
db:f0:24:02:11:d8:ff:0c:da:23:1a:bd:4c:e8:a9:
f5:26:5e:e6:f6:84:6a:64:9d:53:42:ba:8a:fb:fe:
e3:c2:96:7d:ac:4a:ce:98:5b:5e:4e:f5:20:7c:ea:
51:63:36:43:b5:88:61:a1:fc:18:03:f0:e9:ab:cf:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:C8:D6:53:50:F3:EF:9E:17:8D:83:AF:8C:16:CF:A9:16:95:17
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:69:c9:4d:d3:c1:4c:91:32:0a:34:16:1b:49:39:c8:0a:13:
e3:f6:22:4d:21:12:b6:3c:52:ae:c5:94:f7:90:11:a1:6e:37:
5b:1e:9f:d8:48:1b:f3:9a:ab:13:9a:a0:40:a7:6b:1f:51:6a:
c9:65:7a:58:34:1e:73:59:51:4e:88:b5:cb:8c:3a:7e:66:ee:
1f:8d:9d:56:92:41:84:2d:1c:59:15:39:7e:0f:64:78:73:37:
8a:28:7d:da:87:d5:c3:33:b4:af:05:ad:db:46:4a:22:fc:28:
b3:ac:f8:3f:73:89:fd:2a:9f:77:48:fc:ce:ef:a5:00:d6:dd:
69:bc:24:65:9c:09:5b:98:05:64:d6:8d:a8:ba:70:6e:28:77:
a5:1d:7d:23:d3:17:df:f0:ec:f8:d4:80:e0:0f:60:ef:55:0b:
d6:51:54:74:52:f1:40:fd:66:2d:aa:20:58:7b:ab:ee:9f:b3:
0f:9c:e8:a6:b3:29:a9:e5:ca:dc:aa:84:48:f1:65:dc:bc:43:
c6:72:27:41:dd:d9:55:a2:19:31:36:6e:3b:74:10:60:fa:36:
b3:e3:9f:bb:a6:3f:2b:a4:8e:5d:e6:83:a0:ea:75:cd:66:7e:
af:01:0a:37:7c:4b:ba:54:ba:e8:8e:86:40:c7:c4:8a:7e:25:
ed:c2:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:07:23 2025 by rpki-client