Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
File: xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft (raw, json)
Hash identifier: MNJCxAgLzUvBA+WBRmoIpCSnY8/Z8ixJ8x8b7UmPNLc=
Subject key identifier: 9D:B8:B2:04:29:C3:24:82:82:EF:08:F2:5E:70:ED:34:D5:09:4E:B3
Authority key identifier: C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
Certificate issuer: /CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Certificate serial: 01984AAEDF4A5FDE029D8DB41B2085AB0830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: DFGrBpxL5h3_HtZEYfNq8WA0iY4.roa (hash: NDj3b147WLZti/8ZN7y09t2HIoBPYHUrUpvzWm06KUM=)
2: xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl (hash: dZwbvlN98hly8z1BaxEkPu5q43+ZRugM/9YteBBj6Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:df:4a:5f:de:02:9d:8d:b4:1b:20:85:ab:08:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c5acc7f7ec2b45b43d2547c96464c008933d52
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=9db8b20429c3248282ef08f25e70ed34d5094eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:1d:25:5b:06:c7:09:db:9d:35:9c:25:38:
67:67:b8:8e:b0:38:a6:3a:40:b2:cd:2f:94:4a:82:
c1:fe:bd:a0:f4:52:bd:a3:f2:7a:c1:40:8f:ec:54:
51:8a:10:ce:d7:4f:a9:74:f6:b4:ae:09:ca:65:72:
44:77:0a:11:3d:f4:c5:07:e4:a1:b1:9d:81:f7:17:
d1:8a:98:4a:3b:c2:74:31:30:53:d3:4f:6a:15:ec:
23:15:fc:0b:8a:c2:f8:7e:ec:6e:b8:c4:ff:62:dc:
90:13:dc:8a:f9:df:6f:f5:26:28:72:37:f1:00:40:
33:85:5a:aa:f1:7b:60:b8:d5:39:65:97:9c:7b:0b:
f4:c9:1b:88:9a:07:1e:36:e0:3b:6b:bf:80:34:11:
10:6a:2f:ba:55:8c:4e:bc:4f:ee:cb:79:30:fb:b7:
0a:c9:8e:2d:e5:b4:ee:ea:87:b0:ea:66:95:7d:cb:
4a:55:6f:b4:05:c5:cd:be:2f:9c:c8:c5:af:50:91:
d6:b0:62:d2:fa:30:6c:31:ba:cc:33:48:d9:bb:59:
b6:15:05:09:63:13:8b:57:28:46:5c:ba:1a:5f:c1:
4a:f9:03:d2:02:e4:47:22:e3:4d:96:b1:be:a5:11:
b7:7f:9c:62:96:0a:43:7f:a4:f4:ea:68:e6:49:d7:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:B2:04:29:C3:24:82:82:EF:08:F2:5E:70:ED:34:D5:09:4E:B3
X509v3 Authority Key Identifier:
keyid:C5:C5:AC:C7:F7:EC:2B:45:B4:3D:25:47:C9:64:64:C0:08:93:3D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcWsx_fsK0W0PSVHyWRkwAiTPVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/9f536d-0dd6-43ea-a914-9c088c345ae6/1/xcWsx_fsK0W0PSVHyWRkwAiTPVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:10:f5:69:6c:2c:2c:86:1a:54:e4:82:e6:49:52:ee:4e:
88:40:44:d7:ae:0e:2e:8f:90:b6:e5:40:fa:d7:a1:6c:bd:83:
1a:1c:e4:b2:d9:79:15:36:91:d0:ba:51:ab:84:c0:4b:f1:db:
88:4b:00:f9:de:82:54:70:24:ec:fd:fc:0d:a7:fd:e2:25:e9:
fb:d8:2d:ae:7f:2b:74:75:c6:76:7e:98:bc:02:4f:86:20:0c:
05:06:54:b5:3d:a0:0b:e3:79:c3:6c:ae:13:06:cf:71:03:f3:
52:8a:d7:9b:e2:36:20:a1:e7:66:2a:96:d1:8c:39:b4:ca:1b:
7b:df:9b:af:3a:b7:a7:ff:50:88:dd:8d:9e:bc:a6:cf:5d:30:
c3:84:55:40:1e:0a:c2:aa:5d:d6:4b:b1:c9:01:9d:75:86:50:
af:53:e6:b2:f7:17:b9:d8:7e:60:71:3c:73:33:8c:81:03:a4:
a4:ca:06:27:d2:d7:59:7c:01:f2:e4:c3:1d:be:ca:3e:c2:66:
69:49:1f:24:8a:2f:f9:6e:cd:51:59:43:a5:ed:e1:79:fd:b7:
38:d1:e8:37:18:28:1c:09:61:c9:45:26:e4:8e:fa:11:db:44:
44:3b:66:b9:b7:9f:33:b2:e2:ba:b8:49:66:3f:d1:11:74:77:
18:b5:a5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:39 2025 by rpki-client