Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: e5dY1+PnLn3gJ/XSPtO9pOlyYu7Q2Q+WRXVHp6d6Hxw=
Subject key identifier: 42:38:39:DB:84:3D:3D:5D:F3:94:CC:C2:27:CE:8F:D0:C8:80:E0:D6
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019849D2DD979BF8D4BAD78684B69BBB7057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0D9B
Signing time: Sun 27 Jul 2025 03:00:12 +0000
Manifest this update: Sun 27 Jul 2025 03:00:12 +0000
Manifest next update: Mon 28 Jul 2025 03:00:12 +0000
Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: Km+qp2zE6iYitmOFMv03pn88UJpAw/gfQVIuQJHmoFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:dd:97:9b:f8:d4:ba:d7:86:84:b6:9b:bb:70:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Jul 27 03:00:12 2025 GMT
Not After : Jul 28 03:00:12 2025 GMT
Subject: CN=423839db843d3d5df394ccc227ce8fd0c880e0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:04:0f:14:2a:c2:8b:a1:39:47:53:c1:14:61:
d2:f7:e7:78:9f:1f:8f:15:f2:76:e5:70:b7:11:29:
31:7c:da:5e:7c:8a:93:15:e9:ca:51:77:52:cf:1b:
48:d9:97:50:48:6f:50:91:92:27:2d:66:a1:dc:41:
61:17:84:26:6a:72:1a:d9:93:6f:0a:58:f4:40:d3:
2a:f8:ea:97:fe:69:23:22:c0:99:7a:3b:4a:de:6b:
57:e5:c8:1d:e5:1b:36:69:dc:6a:ef:74:38:4c:b5:
08:fd:7f:4c:87:30:11:c3:26:a7:8d:ae:ae:00:71:
03:be:85:b8:aa:54:a8:e5:6f:49:ac:81:5e:f0:20:
65:80:cb:f3:af:fd:45:fc:5e:2b:3d:84:79:f2:b2:
dd:2a:f4:17:19:e6:c5:99:7d:3d:78:79:ef:e2:9b:
57:a1:43:59:87:e9:f0:06:25:f7:61:bd:a1:1f:57:
1f:40:b4:8d:c0:e8:95:c4:45:34:bf:e2:6a:94:a1:
6c:91:a2:6b:32:a3:a7:e5:07:5f:d6:b7:79:53:91:
81:16:e5:66:0f:d5:c4:19:28:82:26:00:a4:ab:0a:
0f:71:70:e2:60:58:6c:a0:4b:3d:3c:9e:b4:2a:55:
63:b4:18:f8:4a:a7:6f:db:5d:d7:54:d0:20:17:16:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:38:39:DB:84:3D:3D:5D:F3:94:CC:C2:27:CE:8F:D0:C8:80:E0:D6
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:19:92:c7:29:52:9b:3b:4a:24:90:53:e2:86:e9:7d:1f:3d:
2b:17:72:35:c2:c8:77:04:2b:50:9f:2a:73:d2:37:e7:bd:05:
18:36:3a:51:8e:b2:ed:4c:99:51:59:47:f9:e2:75:7f:67:14:
c0:b3:54:8d:e0:47:fe:a0:7a:ab:bf:7f:30:70:a8:0b:9c:db:
8d:1f:97:5b:0d:1d:8b:6f:12:60:83:ef:94:9b:62:30:35:54:
0c:be:28:ee:2f:0e:7d:df:e8:ba:f9:c4:0e:b9:e1:b1:a9:eb:
fe:17:5e:89:9d:52:61:ba:e2:9f:e5:cf:b7:e9:62:e9:06:6d:
fc:6e:92:63:53:2b:f7:cb:30:a1:02:20:ee:39:a6:5b:98:20:
ea:e8:04:ed:01:5b:62:d9:8f:a9:78:28:c9:be:7a:5b:bd:0c:
04:24:e2:75:18:cb:e0:68:27:ca:6f:0f:aa:a5:2b:d6:db:c6:
6c:ad:db:6b:fb:56:96:ac:c2:44:7d:ae:2b:df:5a:6e:95:e8:
67:ea:07:ce:78:0a:54:76:02:d1:55:2c:85:1d:78:49:0d:3a:
fa:af:0f:ac:b8:23:39:67:cb:0b:e3:61:4d:b5:b4:6c:a1:41:
a8:11:9f:48:41:b3:9e:85:2a:b4:63:a3:e9:40:4d:97:51:be:
1b:ce:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:28 2025 by rpki-client