Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: 522bBBYE9yex4yUeIERpsBgjmeV6myv4qmRFWDx+0gg=
Subject key identifier: 1C:80:21:8C:D7:1C:0F:A6:5A:4E:50:F9:2D:23:8A:F7:2A:1B:ED:84
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 01985721496F5574AC5080F3CD9742A32985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 11AD
Signing time: Tue 29 Jul 2025 17:00:55 +0000
Manifest this update: Tue 29 Jul 2025 17:00:55 +0000
Manifest next update: Wed 30 Jul 2025 17:00:55 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: OsBastScIdbOhTVka1ZFwBf6yW4C0iobrleXxxT1XN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:49:6f:55:74:ac:50:80:f3:cd:97:42:a3:29:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jul 29 17:00:55 2025 GMT
Not After : Jul 30 17:00:55 2025 GMT
Subject: CN=1c80218cd71c0fa65a4e50f92d238af72a1bed84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:70:d3:19:2d:84:9b:bc:53:fe:75:80:d0:
48:76:47:7a:29:68:c6:11:19:9c:87:04:94:2d:80:
fa:b5:7e:1c:8d:4a:d3:6e:ac:27:7d:ee:02:25:aa:
3a:2f:0f:64:60:be:4c:c5:0b:41:27:3f:4f:93:e0:
37:c1:8e:3f:fd:8e:0b:33:4f:71:5c:da:e4:75:8d:
aa:41:e9:6c:41:3f:7d:df:2a:3d:d7:32:47:dd:90:
a6:31:e4:5c:f9:a7:32:6d:93:fe:3f:9b:8b:3a:53:
26:96:5b:73:ed:20:aa:65:39:ca:91:a3:94:a6:1a:
3e:6e:78:ea:ce:ce:68:d1:8d:fd:13:90:08:b3:64:
91:f4:79:d6:3f:b2:a1:91:34:c7:4f:88:95:e2:d7:
e4:28:da:1e:f6:db:0a:fc:18:26:6a:37:8a:82:61:
65:51:48:a8:f7:d0:29:00:d0:03:58:25:43:b7:ea:
61:3d:52:a7:a2:f4:37:20:d3:dc:8f:77:71:eb:01:
58:94:cd:3a:36:8b:00:bd:65:1e:50:80:76:85:57:
b5:79:29:e0:d5:0d:83:0b:12:5c:2f:18:44:fd:70:
b9:9a:87:c2:62:2f:8e:bc:dc:5a:43:3f:01:7a:ee:
c8:15:83:e4:fc:ed:a6:b9:b6:9e:a4:80:9c:2b:c8:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:21:8C:D7:1C:0F:A6:5A:4E:50:F9:2D:23:8A:F7:2A:1B:ED:84
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:ef:0c:4a:1e:ea:64:fa:60:16:a3:62:3e:c7:26:bc:f2:
3e:30:6c:4e:85:b7:ab:cf:61:5d:76:6f:06:32:ff:30:5d:2f:
0a:71:a6:29:4d:38:e5:8e:1b:f3:f9:84:d0:dc:ef:d1:5b:a9:
cc:ad:5c:2e:7f:32:e2:f2:df:60:d2:4b:88:8b:b7:de:85:95:
79:fb:b0:11:b8:be:0c:7e:b1:58:de:2d:7b:74:07:9a:b8:fb:
f8:c3:9c:d9:7e:47:16:47:47:31:70:2a:9a:8d:40:05:df:aa:
c0:4b:c8:42:06:ba:a9:0e:fa:b3:38:68:10:d5:6e:27:63:26:
b3:03:50:8a:33:b1:eb:fb:01:3c:aa:d2:aa:17:04:57:5a:23:
70:fc:be:da:06:2b:d5:22:85:16:62:84:8f:b5:26:80:a5:49:
90:4d:fb:25:93:e0:c3:ab:01:69:29:8a:95:db:03:e5:3a:fa:
9c:1a:73:a4:f7:66:10:46:8a:6b:11:57:a7:70:1b:85:08:10:
3d:4b:79:a0:a8:ce:5f:67:e7:e5:eb:61:d1:16:55:bb:33:c6:
61:c0:2e:68:9f:8a:64:a3:c7:97:8e:9e:9b:50:22:c9:85:08:
3d:b7:38:d7:ae:54:1b:cb:3f:67:c1:e8:82:bc:c1:27:5b:d7:
28:3b:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:58:42 2025 by rpki-client