Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
File: XoEWTOOIJZGG-6AVrMSw60i-tVI.mft (raw, json)
Hash identifier: GX5nlyfI7xezn7wmXooB2BJTqIzaHdmp+DWp/sl14ZQ=
Subject key identifier: 66:58:F3:2D:40:F7:21:25:47:AB:BC:5F:0C:75:1B:B3:E7:AB:E5:12
Authority key identifier: 5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
Certificate issuer: /CN=5e81164ce388259186fba015acc4b0eb48beb552
Certificate serial: 01984B537E32BC56711BA36B5942497CE3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 10:00:19 +0000
Manifest this update: Sun 27 Jul 2025 10:00:19 +0000
Manifest next update: Mon 28 Jul 2025 10:00:19 +0000
Files and hashes: 1: XoEWTOOIJZGG-6AVrMSw60i-tVI.crl (hash: DDOt/G4AOrGrDZh9QK4jT+eMU8W6Hv6/hLj2ffQvFqI=)
2: ewmzu1c5hlX5WEsUAJJ_EBHHe8c.roa (hash: LqYC06a3Uz9AaZO7Y0iTGjC5jKrTveBVSDvC1hJ3I8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:7e:32:bc:56:71:1b:a3:6b:59:42:49:7c:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e81164ce388259186fba015acc4b0eb48beb552
Validity
Not Before: Jul 27 10:00:19 2025 GMT
Not After : Jul 28 10:00:19 2025 GMT
Subject: CN=6658f32d40f7212547abbc5f0c751bb3e7abe512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:49:aa:ad:09:7a:09:a4:50:85:b1:d4:23:
d5:db:2b:5d:10:e3:a0:5c:f8:78:0f:b5:c9:22:e6:
bd:c3:2c:b0:19:64:a0:32:3a:8c:2e:79:d8:40:db:
54:60:4d:77:f7:3b:13:8a:fa:84:03:b9:c8:48:44:
54:08:46:ca:13:a9:d0:80:b8:20:de:7e:d3:15:1c:
16:cb:9b:75:7d:ef:52:3a:85:1b:2f:d3:35:6d:61:
e6:1b:b9:e9:35:bf:fa:f7:f9:2d:f2:c0:7c:d0:a5:
f7:1a:71:05:0b:89:91:a2:cb:9e:86:a0:10:2e:f9:
61:ad:60:99:22:36:92:ae:90:57:c7:49:6e:8f:90:
8d:6e:70:f7:45:df:e5:05:ca:e8:c4:3e:09:1b:f2:
cc:3c:d1:ed:f6:9d:ff:71:2e:cd:2e:e2:09:2f:14:
10:37:3c:76:55:af:09:11:93:be:c8:8f:11:74:00:
a6:a3:f2:37:e9:0c:f7:6d:56:fe:69:d4:d5:53:54:
01:4a:a4:c2:fe:88:fe:e5:61:ab:05:59:15:48:6a:
85:83:97:ef:dd:d9:e1:da:54:f9:11:fe:0b:35:3b:
1d:cd:50:a0:0c:10:9e:dd:1a:44:8b:0d:72:23:74:
79:f4:ef:c4:b7:4f:57:14:82:6e:e7:a3:a7:03:05:
00:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:58:F3:2D:40:F7:21:25:47:AB:BC:5F:0C:75:1B:B3:E7:AB:E5:12
X509v3 Authority Key Identifier:
keyid:5E:81:16:4C:E3:88:25:91:86:FB:A0:15:AC:C4:B0:EB:48:BE:B5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoEWTOOIJZGG-6AVrMSw60i-tVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/6b9822-2f3e-45ba-a018-88ba02786d0d/1/XoEWTOOIJZGG-6AVrMSw60i-tVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5f:3e:06:00:62:63:37:15:00:eb:c8:ec:7d:c3:28:1e:03:
f6:b0:5a:64:55:9d:f2:65:50:c9:78:f9:b5:2c:d9:9c:1c:3d:
42:29:ce:cc:df:12:a5:8c:2e:b0:6e:e2:74:e9:4a:3c:d1:ba:
f6:e2:77:1d:8f:65:e0:15:c1:ae:b8:ee:fc:f5:33:f3:33:b9:
52:c0:ef:92:fa:cb:c9:ea:34:25:1e:d4:6b:4f:2e:c8:3a:e4:
e8:11:7a:eb:63:a4:a2:ac:e8:54:40:78:8a:db:fa:54:33:5d:
6e:53:b1:10:31:37:e1:82:f2:4f:48:2b:c1:50:47:c3:2b:16:
58:b2:b6:14:1b:fc:9b:04:07:08:9b:fc:2e:0e:f2:0b:c9:7b:
1d:81:56:f4:61:cf:d1:9d:fc:ba:9e:e7:66:51:1a:90:0d:31:
1b:5f:b2:6a:4f:d1:17:fd:4a:60:12:a5:f6:36:3b:79:e3:03:
33:3b:8d:6e:d2:d1:22:78:b5:3a:18:c2:27:c4:38:d4:ca:dc:
a0:6e:1a:a9:25:af:45:60:24:0c:d2:ef:f4:76:53:8d:7b:0b:
ab:84:ff:b2:95:3c:14:61:49:b9:81:1f:11:63:ce:c2:2d:22:
21:ff:b8:1a:0f:2b:db:0a:e5:b0:20:d5:60:6e:8e:b9:42:11:
e6:f1:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:00:10 2025 by rpki-client