Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: vYBMKCWul3Pcw907leGs+W79BYvWc77oHAbY9t9R8ag=
Subject key identifier: E9:48:FF:A6:B4:34:0E:F0:E2:3F:F6:A8:74:76:60:DE:75:3C:26:0C
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 019853E956713926E0AFEF9AB3D4B915F006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0A3E
Signing time: Tue 29 Jul 2025 02:00:57 +0000
Manifest this update: Tue 29 Jul 2025 02:00:57 +0000
Manifest next update: Wed 30 Jul 2025 02:00:57 +0000
Files and hashes: 1: IzmeYXYlO_xmlW74WeQyL7gffpE.roa (hash: Z5XX/V/bAHCE8fRhzNUzhUtEMOMQ14B1YoCinHSL1lM=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: XyKWeWVAO/+jLU/fkip6a2kvsyPT64zaWVuVeZxusbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:56:71:39:26:e0:af:ef:9a:b3:d4:b9:15:f0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Jul 29 02:00:57 2025 GMT
Not After : Jul 30 02:00:57 2025 GMT
Subject: CN=e948ffa6b4340ef0e23ff6a8747660de753c260c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:e7:06:29:79:f6:29:3a:e9:2e:ee:06:37:
39:ad:64:4a:ff:85:a7:d8:f0:22:03:67:34:42:00:
96:6b:3a:6f:9f:2f:08:81:7a:00:4b:d0:1a:d2:19:
e0:30:00:7c:73:b8:26:75:d5:9f:f2:b9:d8:22:74:
eb:d6:23:03:fc:42:f1:da:41:d8:6f:cf:ff:92:4e:
2c:bf:73:b1:19:9f:b3:c2:ad:a4:57:e1:73:37:14:
db:35:b3:47:6b:e4:1e:42:8c:47:0b:95:8d:b1:27:
8c:ef:d7:56:ab:e9:cf:48:4d:f2:80:80:1a:91:f9:
c3:ce:87:bd:f0:b2:f2:9d:5d:05:c0:56:33:1b:0c:
7b:bc:c0:9b:74:e8:23:34:c1:3e:fc:93:8e:be:8c:
cf:a4:c5:39:27:46:5d:4b:16:52:f2:7b:61:cb:55:
38:7b:91:d6:ae:00:e4:4e:0e:50:75:d4:29:59:63:
99:c4:45:b3:7a:dc:6b:66:db:9e:d7:3a:9d:d1:dd:
6b:0b:60:d6:76:64:33:d6:01:b6:44:68:16:db:5b:
1a:3a:f1:5f:90:11:11:1e:8c:2f:64:4b:17:f7:84:
e5:22:05:b3:d0:11:14:d1:59:1e:aa:ed:d5:75:5b:
9b:b5:e3:b6:62:c5:c7:1e:5c:52:e5:76:54:a9:47:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:FF:A6:B4:34:0E:F0:E2:3F:F6:A8:74:76:60:DE:75:3C:26:0C
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:a9:42:27:be:5b:a8:08:7d:dc:8c:0d:9e:31:0d:76:49:
97:3e:ed:de:50:e6:b2:40:19:53:d6:42:b6:6a:70:c5:9f:f7:
c3:65:9e:1c:31:b6:19:e8:74:64:6e:29:38:13:51:e7:30:d2:
8a:9b:3b:4c:a6:3a:65:7c:c9:3e:1c:99:f3:2c:44:05:4a:ae:
cf:56:f2:3b:52:4b:42:94:9d:07:da:59:cd:81:82:84:d5:09:
8e:65:87:e7:26:e1:3e:54:09:2b:7e:96:4c:5a:67:26:d3:35:
ce:59:f7:c4:91:95:ec:4b:96:0b:f1:68:3e:29:46:ce:18:61:
4f:53:ce:e4:86:55:41:53:cc:2c:4a:68:17:18:37:db:42:b4:
dd:ca:f3:79:67:1d:90:43:e6:3e:e2:f7:a5:f6:32:e6:65:22:
08:f6:ef:ea:92:7b:f3:2c:7f:a8:ba:ad:3d:5e:f3:5b:99:7c:
41:3f:0b:8a:83:36:4c:92:4f:86:b9:34:68:5a:30:68:f8:5a:
97:03:e8:fa:11:15:45:d5:ba:8b:a3:32:6f:23:86:ee:dd:d3:
11:02:a4:d0:b6:97:64:44:13:73:47:88:f8:0a:bf:8e:22:a8:
c7:78:60:c1:f1:07:ec:70:6e:de:85:c5:cd:95:f9:a7:4f:25:
38:a1:60:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:00:38 2025 by rpki-client