Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: W6nOVHy8NRFj1Lk2skFJ7Nl3jXuKrnZ+3LDx1cddCwQ=
Subject key identifier: 8D:DF:67:A0:3F:F4:00:9E:45:F6:5C:40:8A:A3:42:FD:7C:63:E6:E2
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 0198C610997CB63D2D4BF6ABFBF8A75B2825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1642
Signing time: Wed 20 Aug 2025 06:00:33 +0000
Manifest this update: Wed 20 Aug 2025 06:00:33 +0000
Manifest next update: Thu 21 Aug 2025 06:00:33 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: 4duElqaSvpR9HPSBA1EFqyClrB2hsAHz1HMJOQlwpFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:99:7c:b6:3d:2d:4b:f6:ab:fb:f8:a7:5b:28:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Aug 20 06:00:33 2025 GMT
Not After : Aug 21 06:00:33 2025 GMT
Subject: CN=8ddf67a03ff4009e45f65c408aa342fd7c63e6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:bf:38:1a:cd:4e:da:44:bb:b7:0d:96:c0:
3e:96:d1:bc:12:38:cc:0a:16:e2:68:07:04:a2:8f:
41:14:e3:77:60:4d:a5:4e:97:7e:95:16:ed:8d:4a:
76:de:58:14:b2:e2:b3:a3:31:c2:da:62:8f:73:0a:
68:48:a1:93:e3:7d:76:de:a9:29:4b:d6:81:14:63:
fa:89:56:75:fb:1b:f2:c1:2f:26:32:fe:e1:ff:25:
d5:55:f7:32:90:97:2a:a9:88:ec:4f:7d:18:34:b3:
2d:b6:74:03:83:d2:9a:27:60:cb:62:83:35:87:01:
db:69:0a:26:c1:4f:d1:b1:fd:00:af:7e:14:1c:9f:
c5:be:61:9b:b9:90:59:88:29:fe:91:38:18:1f:3e:
73:62:b7:e7:7e:ab:15:f8:c1:cd:b3:16:d1:96:63:
24:3f:ad:ca:7e:45:a5:2e:90:93:76:f5:66:f7:7b:
56:e7:79:c1:cd:30:e6:8f:82:37:74:0c:45:6e:34:
d8:5f:9b:4c:7a:5c:2c:47:94:34:df:6d:2e:fe:6b:
79:23:49:2f:37:99:83:19:e4:a0:15:71:9e:01:97:
45:8e:ba:20:74:d9:18:9d:15:bc:a9:d4:fa:15:99:
6d:82:45:20:8c:ff:81:32:03:f9:c1:11:6d:69:32:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DF:67:A0:3F:F4:00:9E:45:F6:5C:40:8A:A3:42:FD:7C:63:E6:E2
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:08:1b:c7:34:60:ea:a6:db:17:86:90:1b:24:46:12:e4:1b:
2e:ac:5f:81:98:05:bc:fb:d9:5b:cb:19:3e:5a:c5:de:45:b6:
3f:5e:d0:22:de:c7:c2:75:8e:de:4b:7b:4d:10:1a:01:5d:c6:
17:37:8c:a3:95:25:3a:94:2c:c9:d5:ba:f9:5f:41:8f:ef:ec:
e5:1a:13:62:5d:a5:41:1e:2c:75:45:45:ba:fe:34:94:3f:f0:
1b:e8:a0:5a:e7:12:01:30:1e:da:dd:ac:4e:ba:31:11:bd:0d:
24:18:76:8e:a8:06:ac:b1:e2:2b:01:9b:77:2f:a8:6d:b9:28:
43:96:08:e2:ca:82:ab:48:54:33:ad:b9:3d:66:bf:54:09:34:
1d:ea:01:d6:e5:5f:80:93:28:75:86:f2:fb:a4:af:09:04:25:
1e:e0:3f:38:47:73:62:dd:42:a2:23:04:d8:21:af:c9:18:f7:
aa:ba:12:7b:e7:2e:4b:22:92:bb:03:5f:3b:3c:14:e2:91:a9:
e5:d2:b1:db:9f:5b:04:7a:cd:f1:b3:39:90:dc:a5:e3:d0:9f:
2b:de:91:35:72:04:3e:f8:79:c4:d6:05:9c:55:ed:2c:d2:d7:
84:13:7d:d7:a0:d3:7b:48:98:d9:80:4f:fc:ce:36:93:52:bf:
86:99:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:16:04 2025 by rpki-client