Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json)
Hash identifier: s422zWDo5lty9BHu9LIqWCppvKvdsPKd9Ou56Us7X3Y=
Subject key identifier: A5:6B:B2:55:3E:D4:EB:80:3D:C4:4F:16:46:97:E9:1E:85:79:07:40
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 0199221ECD2DBACCA17DF3D68F41C0CF3DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:07 +0000
Manifest this update: Sun 07 Sep 2025 03:01:07 +0000
Manifest next update: Mon 08 Sep 2025 03:01:07 +0000
Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: QXC61jpfKRMjBzO/IVIMeHZ/uPRirVQoN1Fv0KFlPEM=)
2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:cd:2d:ba:cc:a1:7d:f3:d6:8f:41:c0:cf:3d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Sep 7 03:01:07 2025 GMT
Not After : Sep 8 03:01:07 2025 GMT
Subject: CN=a56bb2553ed4eb803dc44f164697e91e85790740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:e5:8a:c0:a0:d7:98:4a:52:ad:ce:d1:c9:
9c:e9:30:ff:b5:af:ca:15:d6:f1:f7:c1:29:5c:45:
96:93:7d:8b:91:1b:0f:0e:56:75:e1:26:64:98:fe:
2e:1a:b6:b9:ae:3d:11:97:24:b9:7e:fd:5e:aa:0a:
37:7b:fa:22:84:83:07:48:a4:a7:51:73:34:8b:e1:
5e:e9:c7:fa:43:8a:4a:7b:0f:5e:9c:89:4f:e7:c0:
be:97:90:1e:d7:7f:49:7a:f5:bc:fb:6a:92:16:a6:
e5:c2:5b:98:69:60:5b:52:c1:df:1d:4e:dc:ae:e8:
1e:32:ee:fc:73:cd:71:eb:88:cf:9a:01:56:4f:c3:
3b:04:1e:b4:81:27:e5:48:e2:f9:45:12:92:34:d5:
7d:fd:79:e4:13:6d:70:14:0c:48:6d:0c:ed:73:48:
3f:b3:1f:91:a0:c2:b1:ac:3c:2a:3c:b1:6d:b6:1c:
71:6c:37:ef:99:68:2a:12:14:0c:95:fd:b8:45:c0:
d9:7d:6c:b2:4d:55:de:5b:15:d1:a2:05:cc:7a:10:
7f:06:b5:55:0b:ec:91:5a:35:22:4f:0e:eb:c6:dd:
39:cb:9c:73:4a:80:47:f0:92:07:2a:ad:4b:8f:96:
82:18:d5:f1:c8:a3:3e:15:1b:e2:59:e8:59:2c:79:
5b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6B:B2:55:3E:D4:EB:80:3D:C4:4F:16:46:97:E9:1E:85:79:07:40
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:31:f6:ce:89:12:c2:dc:71:51:21:eb:6e:f8:73:af:2d:
bf:70:be:c2:bb:49:30:96:01:4d:99:ac:d1:a8:6b:f5:c5:48:
b1:79:a6:8f:be:64:43:be:77:45:7b:ed:e0:4e:8e:97:02:12:
8e:1f:59:8a:71:ac:31:ac:28:14:33:a8:00:9a:c2:cc:6c:2b:
91:e6:c9:50:79:ff:c3:c7:93:02:b4:ba:2c:8f:39:5e:05:48:
55:1c:b7:0c:7e:c1:f9:68:fc:c6:d5:59:15:7f:3b:3f:75:78:
ba:84:e2:7e:01:d9:72:fe:b4:fe:47:4b:b6:7b:d2:60:c0:27:
8f:59:20:42:0e:4a:2b:b0:65:d3:ee:f8:b6:5a:d2:4f:7c:b2:
0c:0b:26:78:e7:fd:93:ad:95:8b:83:f6:e8:4f:43:bd:f8:3c:
ff:b5:6d:74:59:4a:db:99:f8:f5:bd:76:db:59:66:bf:bc:56:
e2:b3:00:13:51:c8:bc:15:ea:ef:80:d1:90:97:29:8b:96:59:
fd:b0:3d:d2:3a:6a:73:f2:b8:26:50:db:43:e1:a0:eb:25:cc:
58:6f:1b:b7:45:e3:28:bf:e6:63:32:0e:19:e1:0b:c0:46:35:
a1:1e:38:d1:bf:b6:0b:53:21:c5:07:20:e9:e0:2f:d4:a3:4b:
cf:0e:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:15 2025 by rpki-client