Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier: kqMoekI1698lGyOjd6flnaROIaMy6UEOGDna0r/TP0A=
Subject key identifier: E2:34:2C:E9:EE:EA:FC:DF:7A:C8:57:AB:9D:86:86:66:0F:AC:9B:08
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 01984965E9AF6D810D95A7822502B1C82446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number: 0FFC
Signing time: Sun 27 Jul 2025 01:01:12 +0000
Manifest this update: Sun 27 Jul 2025 01:01:12 +0000
Manifest next update: Mon 28 Jul 2025 01:01:12 +0000
Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=)
2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: E51upw1Virh3gRgjeiLxoCr+wi+d1dat9amTDgW2amc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e9:af:6d:81:0d:95:a7:82:25:02:b1:c8:24:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Jul 27 01:01:12 2025 GMT
Not After : Jul 28 01:01:12 2025 GMT
Subject: CN=e2342ce9eeeafcdf7ac857ab9d8686660fac9b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:8a:8c:b7:d7:38:d5:aa:75:83:46:2d:76:
16:09:39:7e:24:e5:94:8e:a8:7b:6e:d7:f4:6d:3b:
2f:63:54:c3:a4:30:05:dc:07:58:fb:81:1b:ea:ab:
15:44:4a:a0:45:4c:3f:83:dc:19:03:a8:ef:2a:1c:
24:b6:9e:b1:be:ab:7a:35:5e:83:1e:36:1e:ba:9c:
2e:69:da:d6:8e:db:05:a7:41:04:a4:af:6b:38:0b:
2b:85:a2:eb:37:f2:eb:87:a2:c4:ce:67:8f:75:95:
b0:d2:e2:e6:41:c8:a2:3d:d7:d3:e8:2a:87:d2:dd:
ca:30:b7:26:04:f8:41:e3:bb:40:64:4c:fc:9a:ea:
77:b3:8d:da:30:75:31:c0:89:22:cb:bd:4a:1b:02:
6f:dd:d8:b1:b4:4d:e3:b4:05:20:c7:22:c8:e4:cc:
6f:85:5e:1e:9b:8c:8c:8c:5a:30:f5:fd:ad:67:f3:
6d:82:40:d6:c6:78:c4:0f:7f:bd:8d:d5:59:a6:39:
d3:d0:94:8c:7e:44:c5:7b:c9:2c:68:40:3d:19:f0:
58:51:17:2a:6b:34:c3:73:80:b5:f8:db:cb:93:33:
1f:c0:c8:1e:0b:ef:33:83:2f:95:45:9c:fe:fb:09:
32:f3:ba:55:d6:6f:ac:15:24:94:38:60:cf:61:29:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:34:2C:E9:EE:EA:FC:DF:7A:C8:57:AB:9D:86:86:66:0F:AC:9B:08
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d3:ec:09:83:2a:74:39:c9:92:93:f9:7f:13:64:02:7c:da:
72:01:a5:47:27:ee:8c:38:cb:2c:4a:af:ac:6b:f3:b5:d9:57:
38:89:a8:bb:46:70:d7:0d:b0:f4:0f:e1:37:d1:82:2b:ac:5c:
41:6f:df:2e:03:c4:fa:40:61:ba:13:50:f8:85:4e:d8:d9:0c:
1e:4f:18:29:fc:60:27:90:2b:37:cc:df:9d:9b:52:dc:78:c1:
42:13:31:ab:7b:64:8e:6a:0d:92:3a:f4:a4:6f:81:ca:1f:86:
5d:96:dc:f4:41:66:11:30:d9:cb:f6:9c:81:d5:5b:0b:0b:6e:
04:9d:1f:ea:24:80:ed:5a:5d:fd:be:5a:29:1e:3a:7a:9b:0b:
b5:94:ac:d2:8e:0a:44:7b:62:de:a1:3e:37:4e:c0:38:9c:70:
6f:4f:65:8e:db:95:3a:ac:0e:e1:ca:c6:7f:19:80:37:7d:fe:
31:32:95:2a:dd:ef:33:b3:f9:7a:ef:7d:32:40:74:e8:d6:30:
dc:32:08:d2:05:30:90:27:c4:9b:61:6c:09:3a:cc:d7:88:c8:
a9:4e:63:9e:de:e8:ec:03:6f:1a:92:5a:9a:97:7c:7f:6a:7c:
b3:98:70:54:97:41:87:04:e1:45:4d:50:87:b7:a9:a8:3a:6c:
73:6a:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:38:00 2025 by rpki-client