Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: bbYhjjveZ4wPnoa4ssJT0cKT/NHgc452tzgxisgT27E=
Subject key identifier: 6C:D2:6A:AE:C5:D7:DE:FE:79:BD:79:1B:FB:87:7F:21:80:15:CF:22
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 01993A5D68934C70C613FCF34B206DD2DAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 024C
Signing time: Thu 11 Sep 2025 20:00:24 +0000
Manifest this update: Thu 11 Sep 2025 20:00:24 +0000
Manifest next update: Fri 12 Sep 2025 20:00:24 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: RxPfpTdIkuVA9QiDVSmMFrZBlba/M4+1hIV2E3x9n10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:5d:68:93:4c:70:c6:13:fc:f3:4b:20:6d:d2:da:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Sep 11 20:00:24 2025 GMT
Not After : Sep 12 20:00:24 2025 GMT
Subject: CN=6cd26aaec5d7defe79bd791bfb877f218015cf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:7a:a6:22:7a:39:01:d9:80:49:96:88:fc:
61:6f:31:30:94:56:bc:c9:bd:f2:6b:fe:79:79:57:
61:1f:d8:cf:54:b1:fa:8e:4b:de:ba:82:9e:41:17:
12:bc:7d:57:37:10:47:36:bc:ff:a1:32:5a:fd:13:
23:f6:a3:7b:d0:15:ae:d2:1b:57:3a:ca:e7:6f:74:
01:dc:f2:33:21:52:7b:bf:26:ff:93:49:b7:4c:41:
ff:a4:7b:9b:e3:73:15:06:79:60:f6:d0:00:cf:4a:
b3:af:6f:f7:f3:8c:e6:f0:19:35:fb:09:66:9a:3b:
5e:19:0c:a0:1d:40:a4:6f:d5:c7:9e:e9:d0:bc:a7:
51:0a:4c:31:c0:e9:a7:a3:2d:43:d7:b6:01:2c:3b:
2d:6b:4b:fc:fa:62:77:46:45:41:dd:8c:f4:b7:95:
cb:6a:9a:b3:0c:a5:24:ad:0d:99:21:22:d0:49:06:
e3:63:ef:8d:d8:e2:c8:2c:be:c7:a1:9a:9b:a7:c7:
ed:bb:fa:f2:f6:43:87:25:d1:b4:65:6f:52:fe:9b:
25:01:80:56:78:01:d2:fe:d5:a0:f1:67:08:78:44:
fa:ae:ed:e2:35:65:89:a4:6a:d2:54:66:b9:73:82:
4a:ef:07:2c:ac:8f:3d:4e:4d:bd:90:f7:8a:f9:86:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D2:6A:AE:C5:D7:DE:FE:79:BD:79:1B:FB:87:7F:21:80:15:CF:22
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a3:08:82:64:51:de:98:88:5b:12:93:20:53:a6:e7:a5:bd:
d4:a8:8e:d3:a7:95:49:f8:b8:29:df:05:22:12:48:8d:ea:e8:
cb:2f:bc:34:32:5e:d3:34:ba:9f:70:a8:95:3e:2d:d9:cd:e0:
d4:4b:f6:99:01:d9:8a:7e:a7:f8:f5:09:9f:19:5a:0a:ae:82:
9f:7a:81:23:4c:07:7d:c4:1f:12:71:37:b2:14:8c:8b:8c:1a:
73:46:00:a5:8f:39:79:cc:f3:e9:c1:c4:e5:34:0c:0e:10:f9:
75:e5:23:61:07:7a:fd:12:5e:4e:c7:01:2c:c8:fd:c7:b0:14:
49:f2:57:3a:8a:1e:dc:fc:eb:dc:b4:15:6d:52:f7:05:63:66:
95:22:29:95:95:5d:a1:8c:76:da:cc:70:c0:cf:4d:06:64:85:
4c:4a:2f:1d:ba:8b:99:a2:ec:61:c6:c7:71:6a:66:9f:ef:85:
1d:3b:16:c6:99:96:c5:31:97:f9:36:04:77:20:80:1c:78:3d:
bd:40:21:09:bc:5e:86:17:06:ff:3a:d6:46:ca:df:b8:6e:99:
fd:0c:b8:a4:3b:31:44:83:7c:1b:fc:cb:c4:ed:56:d2:1c:22:
60:46:36:88:28:0d:ad:46:ce:34:8f:dc:b3:88:c1:ca:1b:b2:
ef:e4:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:11:09 2025 by rpki-client