Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.mft
File: XasLCOUfgYIkYp-zohHYPVvjVEA.mft (raw, json)
Hash identifier: gSBuI/JCZoDvs1PJ5SdSYC9axmkWb/nMRkqPR6XSoxY=
Subject key identifier: FE:05:B8:41:B0:07:06:B0:DB:83:8A:D9:42:71:44:EF:45:04:4E:B8
Authority key identifier: 5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
Certificate issuer: /CN=5dab0b08e51f818224629fb3a211d83d5be35440
Certificate serial: 019848F730B985C861342A8B3D4435E343E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.mft
Manifest number: 140E
Signing time: Sat 26 Jul 2025 23:00:16 +0000
Manifest this update: Sat 26 Jul 2025 23:00:16 +0000
Manifest next update: Sun 27 Jul 2025 23:00:16 +0000
Files and hashes: 1: J3IfRy5hJG3sO5FFR3klCa0Rmag.roa (hash: y8cOLwfC28T1Q/CwomIs12ZpdB8agP1zP7ErrJL2HLM=)
2: XasLCOUfgYIkYp-zohHYPVvjVEA.crl (hash: rCUUaM8UXrsUbnZgljtj/sXfGP24EsPb3REvdayGw8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:30:b9:85:c8:61:34:2a:8b:3d:44:35:e3:43:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dab0b08e51f818224629fb3a211d83d5be35440
Validity
Not Before: Jul 26 23:00:16 2025 GMT
Not After : Jul 27 23:00:16 2025 GMT
Subject: CN=fe05b841b00706b0db838ad9427144ef45044eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:48:b0:3e:c6:90:26:75:77:2c:7e:30:a2:8c:
f9:82:5b:76:71:f5:c5:38:96:71:c2:28:5e:0d:61:
1a:5c:d6:93:28:a3:c8:c0:97:b1:da:39:3d:0d:7e:
f4:f0:68:cc:57:5d:e3:df:69:5d:c7:d0:fa:54:0b:
5d:d3:4b:12:6f:92:a7:c9:0e:eb:cd:dc:84:49:83:
de:22:ea:32:b7:76:61:53:5e:17:c8:b0:7c:a7:6c:
6f:e8:52:db:4c:9b:07:52:e3:32:51:1e:94:ed:4c:
b3:2e:6d:6e:e8:a7:0c:6a:a2:ee:51:79:3a:84:cb:
1c:b1:eb:a1:31:a7:13:96:26:64:1e:b6:2a:3b:25:
a7:3b:31:f7:34:8b:ee:61:41:88:2f:d9:82:e8:3a:
43:05:a8:48:23:22:0f:d9:63:21:4d:40:4d:41:3d:
8f:fd:f2:7b:60:87:30:b1:f9:bd:0a:98:44:bf:cc:
c0:45:c6:50:be:f3:0f:2f:a6:45:6a:ae:69:e7:90:
3e:cf:ad:e1:f0:e6:89:b0:46:be:b7:f0:3d:71:72:
19:42:bf:e8:ba:95:3a:d7:fc:65:6c:0d:a0:dc:08:
23:56:77:1e:a2:31:81:20:e4:66:bb:d0:cc:de:fb:
0a:0b:10:af:d8:6b:00:8f:d0:fb:fa:6f:25:5f:7d:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:05:B8:41:B0:07:06:B0:DB:83:8A:D9:42:71:44:EF:45:04:4E:B8
X509v3 Authority Key Identifier:
keyid:5D:AB:0B:08:E5:1F:81:82:24:62:9F:B3:A2:11:D8:3D:5B:E3:54:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XasLCOUfgYIkYp-zohHYPVvjVEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e62089-b98a-4fdd-9c4e-62789182a0f3/1/XasLCOUfgYIkYp-zohHYPVvjVEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:91:f1:5d:a4:10:f5:1b:78:c9:71:d0:d9:06:76:9f:37:db:
79:1a:46:1c:23:a1:ea:71:d3:d6:43:ec:bc:bf:48:b5:27:cd:
5d:7f:e6:dd:f4:6a:43:ff:3b:93:99:ac:bd:2d:ee:45:d5:cf:
16:a7:e8:15:98:e3:6a:45:22:83:fe:fa:0d:bc:2f:f6:46:17:
e6:25:84:5e:5c:da:98:83:80:b9:a5:d6:1f:56:c9:ba:4a:2d:
bd:b0:59:a2:c1:5b:3b:f2:d2:88:64:08:f8:d9:fc:ae:00:45:
12:c4:1e:30:b1:71:e8:a2:5b:b3:42:8b:48:48:f6:86:f1:ca:
59:8a:99:cb:69:c7:64:37:6a:bd:97:64:7b:d2:56:79:9b:ac:
df:53:70:47:db:81:ee:b1:39:3f:06:d1:cd:55:23:d3:fe:c2:
e7:70:08:78:80:d0:dc:dd:63:f6:37:71:ae:74:6a:57:f9:59:
fd:8e:cf:58:48:75:df:2f:a4:a5:77:67:e0:81:a6:b3:7d:e8:
d2:1f:88:99:e6:f9:4f:91:a2:d6:8a:a0:6c:b8:cd:5a:73:10:
92:7d:15:61:e4:c2:3a:a2:df:93:80:cc:5c:77:f7:e5:da:15:
d3:2c:ee:f4:76:f3:5a:f2:fe:eb:5e:9c:c1:e2:ca:db:a1:b1:
26:28:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:29 2025 by rpki-client