Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier: YYMF1RmpB+/vzievaaVnBI63EijDTtDLwQqmQqcdBUk=
Subject key identifier: 52:DE:4D:59:CC:6A:7B:04:06:B1:40:43:8E:16:06:4A:D3:6E:60:BB
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 01993B3A2C146C3D4DE2B9E58832247F3FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number: 07ED
Signing time: Fri 12 Sep 2025 00:01:32 +0000
Manifest this update: Fri 12 Sep 2025 00:01:32 +0000
Manifest next update: Sat 13 Sep 2025 00:01:32 +0000
Files and hashes: 1: _QBZZm_j6pkBqG7ULTSKSuYA6m4.roa (hash: J+NZ6+xHvgyZBnOnyLbSKcqDP+9z+FmiBI8TDK00aCo=)
2: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=)
3: jpN0hvuTgqmocPyed3qkYPDHQdk.roa (hash: k+R6t5Hzmk9H5O7QG4Q3cEOcrN/jFXUPR3aXqZ2Jg1U=)
4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=)
5: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: VFSIos7QWQD3bBy0ScFG7mMnb0Xuf4Xsd9DLmXcx4Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 21:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3b:3a:2c:14:6c:3d:4d:e2:b9:e5:88:32:24:7f:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Sep 12 00:01:32 2025 GMT
Not After : Sep 13 00:01:32 2025 GMT
Subject: CN=52de4d59cc6a7b0406b140438e16064ad36e60bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:6a:79:ab:49:74:ca:66:31:c3:9e:a3:ab:
f5:8c:a0:ed:47:ba:a5:73:f6:ca:52:a4:73:0e:1f:
24:0f:a3:fc:c7:93:a8:0e:14:0b:b9:95:bc:fc:80:
73:7f:a9:dc:88:94:f2:67:e1:a7:79:94:9e:78:08:
e3:45:fa:31:59:ff:7f:24:d9:f7:27:e8:2e:57:43:
86:7f:ac:78:d2:de:43:5f:5b:7b:bc:66:da:54:06:
e9:cd:d1:83:61:6d:44:50:ee:e6:7f:90:2e:da:46:
fe:fe:92:a7:84:ca:b3:bf:0b:55:7d:a3:97:68:32:
a9:1d:6b:35:b1:79:6b:8a:3a:cb:75:d3:09:09:79:
57:f4:14:07:18:b6:ac:cd:41:d2:76:54:65:d6:0e:
9e:77:fd:3e:39:d4:c9:a9:7b:96:f2:20:71:52:db:
cb:30:9b:c8:62:17:64:2f:5a:15:74:5e:d8:d7:7f:
38:20:ad:d8:0e:5f:b7:88:d4:e7:ac:4f:5a:31:78:
76:26:62:ce:36:20:be:7f:f5:3e:c8:a7:48:02:c5:
8e:51:39:cf:eb:b2:23:0a:3c:53:33:25:5f:61:62:
5f:76:bd:af:0b:89:2e:81:06:ac:f7:61:e4:9c:7d:
c7:5f:91:4b:3f:12:63:13:c6:40:1b:07:d5:ab:f6:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DE:4D:59:CC:6A:7B:04:06:B1:40:43:8E:16:06:4A:D3:6E:60:BB
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:6a:d4:0f:4f:b1:65:0a:16:c6:67:d5:bc:5d:91:6e:a8:
b3:4c:8f:20:c8:b0:6b:44:11:d3:bf:54:5e:44:f1:ad:c5:73:
ed:85:5a:61:4a:35:6c:10:bb:5d:db:b9:94:66:8d:6e:49:fc:
e5:41:dc:3c:8e:61:1a:48:95:44:c4:55:4e:8a:de:40:d8:43:
4c:96:d6:2b:40:d3:ec:22:ca:23:00:b2:aa:df:b8:51:c3:d2:
e5:b0:a6:a4:2c:1d:08:39:56:3b:a0:de:5c:fe:cd:da:70:6d:
d9:02:7b:d1:a1:1b:61:b0:12:29:fa:7e:f0:9c:43:f8:14:54:
ae:df:ee:b7:a9:f5:da:53:98:49:be:f6:ac:14:9d:13:f4:00:
c3:ee:8c:6f:d8:3c:87:92:8e:2d:75:9c:8b:da:70:5c:2a:63:
26:e1:98:0b:79:c2:ed:d1:f7:29:06:8d:96:55:27:d5:38:51:
d7:29:7c:9f:b8:33:4a:8a:1e:8b:c9:d0:85:95:d8:a7:0b:de:
d2:54:74:48:4e:d1:e0:c5:f4:ef:35:36:d5:1f:0c:12:5a:00:
87:bf:ad:a5:2b:41:69:f3:ca:23:87:e9:c8:97:b0:7e:ce:18:
d8:f4:d1:60:04:20:be:4c:7e:3d:ac:98:62:d8:78:99:55:95:
3a:50:f8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 02:50:36 2025 by rpki-client