Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: hcpO79bmiAv20X+7zHJU4KW6KdFv+RkWGgIRbhMnW0w=
Subject key identifier: F2:E6:67:E8:12:1A:FD:7A:70:55:AF:CB:A3:5C:F2:50:E6:05:80:4C
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 0199228CA684CBCE9E4EB4F5F4D4B20287E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:06 +0000
Manifest this update: Sun 07 Sep 2025 05:01:06 +0000
Manifest next update: Mon 08 Sep 2025 05:01:06 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: C3bXJhQoYl0NZNt+tNkg50EvY9UOWzqGM7kzhzzoO6o=)
2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a6:84:cb:ce:9e:4e:b4:f5:f4:d4:b2:02:87:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Sep 7 05:01:06 2025 GMT
Not After : Sep 8 05:01:06 2025 GMT
Subject: CN=f2e667e8121afd7a7055afcba35cf250e605804c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:56:76:c1:37:0e:24:06:52:1a:cc:a3:2c:
b7:99:74:28:1c:46:83:69:7c:0d:b1:4c:15:c0:54:
33:2d:d0:3e:32:34:19:e2:50:6c:11:23:59:8d:92:
02:f2:dd:2f:52:b4:f3:be:25:9c:bf:6d:0a:98:14:
63:06:b7:a5:6c:8f:e4:a4:f1:ef:a4:98:4e:43:6f:
d7:22:1f:dd:63:22:44:f1:33:c5:9d:12:53:a5:2c:
1f:98:02:15:28:17:6b:30:fc:ee:bf:13:9d:b5:b9:
b6:94:fe:82:fd:31:c7:81:75:bc:7c:64:24:61:b2:
ff:cd:65:fd:b9:f8:b3:6d:f0:96:e5:f0:8c:50:bb:
25:4c:57:09:a6:9f:e3:68:38:d2:a1:6c:0f:2c:7d:
af:bb:c8:fd:e7:c5:ad:bb:c4:ad:4e:b4:2c:61:f8:
6c:50:88:e9:e2:f0:bc:30:8d:b8:a0:59:85:3d:46:
48:1f:cc:1f:64:b2:11:27:3c:28:ce:bf:7b:e6:d1:
35:8a:ac:5b:df:6c:a4:ba:41:42:49:24:20:15:4f:
d6:14:ef:73:10:eb:12:06:db:b2:c9:3c:7b:32:3c:
35:6d:c5:35:cd:cf:c7:b9:d9:8a:69:6b:0e:5e:34:
a2:52:ab:cd:5f:71:c4:aa:c7:2c:fd:db:e9:b6:0b:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:67:E8:12:1A:FD:7A:70:55:AF:CB:A3:5C:F2:50:E6:05:80:4C
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:43:da:8d:8a:1d:3b:25:33:dd:95:38:b9:0b:e8:85:7b:5f:
38:10:66:00:82:48:be:b6:2d:e8:7d:27:c7:67:8a:76:33:7c:
b3:0b:66:7c:2f:80:96:31:9b:43:3e:b3:4e:2e:2b:c3:54:47:
f0:8f:67:ef:17:ed:b9:38:3a:9b:52:22:b5:c4:8d:bd:18:1f:
e5:94:ea:11:d7:af:93:b6:b4:ed:59:01:24:47:86:40:67:04:
3d:3c:2d:1b:84:09:3a:92:9b:4e:bf:c7:68:74:a1:30:58:66:
30:ec:71:de:b0:3f:85:8b:7d:9b:94:d0:87:59:ab:06:8c:5f:
ff:84:95:db:37:57:d6:40:b6:00:85:f6:91:fa:3b:a5:7b:1d:
3e:35:c5:c5:ea:bc:d3:95:e3:b8:06:83:32:17:50:70:62:60:
1a:e0:5f:57:4a:3d:ea:a7:ee:b1:23:75:7c:6b:85:31:64:b1:
5f:d4:3e:10:27:15:4d:bd:c7:21:00:92:1b:d7:ed:45:07:59:
32:c3:8d:3c:dd:33:82:27:ab:31:f7:da:6a:5c:06:7d:29:2c:
94:a6:6a:b4:1a:0a:e0:e2:6a:71:98:2e:62:c6:72:ae:d0:dc:
3a:c9:4f:63:ba:d5:05:39:37:68:63:74:62:fa:d6:c7:bf:a7:
0e:ab:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:54 2025 by rpki-client