Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: waKlHk9r/9VBzpUZNjKx8YO+AEdE6BZI4o7T+NKQNgo=
Subject key identifier: 11:D4:C2:BE:F9:30:7E:4E:9A:43:76:58:B8:67:ED:52:BE:45:E0:4F
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 019841AD1243C66732FAE57051C0B456460F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 01E2
Signing time: Fri 25 Jul 2025 13:01:58 +0000
Manifest this update: Fri 25 Jul 2025 13:01:58 +0000
Manifest next update: Sat 26 Jul 2025 13:01:58 +0000
Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: F2vKmTSf3Z1mCLv2PvNpMyQpkrzco0LOxBKwRWf7iDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ad:12:43:c6:67:32:fa:e5:70:51:c0:b4:56:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Jul 25 13:01:58 2025 GMT
Not After : Jul 26 13:01:58 2025 GMT
Subject: CN=11d4c2bef9307e4e9a437658b867ed52be45e04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:86:1f:f6:e8:91:4c:bd:01:41:42:07:e3:
66:d3:84:3e:f6:4c:32:d0:9d:d9:d1:e8:5c:50:68:
e2:9c:49:33:95:08:4a:e7:2c:d8:2b:4c:6e:88:61:
8d:91:66:59:ae:50:79:11:86:57:33:4b:0b:6c:8a:
72:b5:ea:a7:9e:cf:4e:86:d2:47:6e:c1:c4:60:73:
be:f3:c4:fa:e4:76:ef:90:02:74:2b:ec:c6:77:71:
8f:b5:f6:18:9a:cb:0f:e5:86:2c:01:89:8b:30:0a:
db:aa:57:3b:26:2f:88:93:1f:15:2e:5a:cd:1e:3e:
c3:11:13:54:ab:88:7f:ba:42:81:63:18:8f:86:91:
e7:51:5a:f8:61:e6:54:28:79:86:10:9f:58:c5:27:
1f:2c:fb:cc:16:e7:ce:37:ff:9c:49:7c:cb:b0:4c:
b0:cf:01:c2:09:e2:03:59:84:31:e6:fa:ed:55:32:
62:e9:8b:6b:8d:60:2d:34:3e:46:ed:8c:03:0c:16:
ee:7f:34:5e:68:57:ac:51:7e:51:62:6a:de:f4:da:
02:92:69:7a:26:a9:86:b8:d5:23:3a:a2:b5:1c:d8:
11:da:39:d8:4b:1c:80:c7:3e:ab:ce:98:24:42:0f:
a9:a7:91:6d:fa:77:d6:de:10:6c:2b:df:43:ea:d1:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:C2:BE:F9:30:7E:4E:9A:43:76:58:B8:67:ED:52:BE:45:E0:4F
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c1:b2:73:51:fc:fc:0b:0d:5d:33:c1:78:a7:15:13:d8:a1:
5c:14:c7:3f:87:f7:a6:df:31:10:5e:7c:70:cf:c2:30:a7:6b:
d4:94:4b:b3:f6:58:d8:19:5b:5b:09:98:f6:2a:29:15:3f:7a:
0b:ae:93:ab:fc:09:28:2c:25:f0:ce:39:22:f0:5c:86:c0:ff:
2c:f8:bc:f5:2b:b4:91:80:00:7e:61:b1:85:92:e3:50:37:d9:
ea:2b:c5:09:65:c7:d5:71:cb:7d:91:3d:68:3c:26:70:62:34:
ed:89:c6:43:68:3e:45:5c:f8:b6:94:08:27:da:f5:04:58:5b:
1a:05:85:6e:22:5b:19:88:75:2e:e9:b9:63:d0:9f:7b:9e:bc:
70:d0:1c:e0:d2:be:c8:b1:0f:2b:c4:3e:c5:23:2c:df:97:e2:
2d:83:43:b7:d0:fc:d2:ef:bb:2f:31:45:82:87:71:0f:45:fd:
04:53:47:cb:7e:99:b0:7a:7d:ea:cf:73:33:41:06:80:a1:70:
0e:76:a1:59:26:a5:04:dc:97:e4:b3:8d:91:65:dc:a0:de:96:
c8:c8:ae:22:52:73:0e:a2:1e:48:28:8c:9c:b4:a2:96:98:82:
a7:95:16:c0:68:28:f6:0f:8a:46:3a:17:39:8b:35:a3:f1:3b:
47:f9:63:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:49:50 2025 by rpki-client