Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File: Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier: o2QPI2fhrUcJwa1YnMe86WBqM6ZpgQmGyfDXff/u1DQ=
Subject key identifier: ED:9F:36:11:D0:87:12:73:B4:5F:4D:C0:3A:91:66:C1:CA:39:80:BA
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial: 01992B599F2FEBCC99B0336AD7F9DBF189D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number: 0A9B
Signing time: Mon 08 Sep 2025 22:01:57 +0000
Manifest this update: Mon 08 Sep 2025 22:01:57 +0000
Manifest next update: Tue 09 Sep 2025 22:01:57 +0000
Files and hashes: 1: 4pwc0R1N2wMoXFJi3dSz9WOuKVM.roa (hash: IJPThFCoovsDphAV9yYwYdOOLLfVfOTJNjoylRDGNto=)
2: 5jE6Po0pndWiTEVH8D2IK64ZUbk.roa (hash: AweWvvY25TbKznJZNCvKnQ81/+7uDdU0mBWyS6j9o10=)
3: J4QErx_pJH-c8lf03n-XO2SYntE.roa (hash: YNpZR71EzVm4Z5/sNWkYvfRxsrgVociqcX6A/snrahU=)
4: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: MUZCWarpLR7Q1R38RyQ1oNO//gjqYd/PCRHAYyvyQDc=)
5: fqKRgpwLNxLGu24wFU2ZKPuIG3E.roa (hash: msKhe5WbpdCBmxaaDvFaKiq8+7dXUv8A81fnjlivFjk=)
6: lLM5HeJOnpwk1eUg_MABaeyC7ic.roa (hash: 2fAj3iZu+ooRgXizmwt8ISA7AUUErzM12s6a0aZG6/o=)
7: oUmcMUtuhcKckFSDBz0rnVgX6VA.roa (hash: Vo1x7fFdPLf+gNr5ngsvEsgyymKQ4J3ELs7j3lA2QcI=)
8: rIWLbuRWn6FYu5bbpY5MMG45yrY.roa (hash: krN6offcByVQ0C0gcvcYLKJ889DH4uFaIMSTwQ2u2Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:59:9f:2f:eb:cc:99:b0:33:6a:d7:f9:db:f1:89:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Validity
Not Before: Sep 8 22:01:57 2025 GMT
Not After : Sep 9 22:01:57 2025 GMT
Subject: CN=ed9f3611d0871273b45f4dc03a9166c1ca3980ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:06:a9:c5:c0:7d:fe:2a:4c:bf:84:46:1a:
7f:9d:d8:db:e4:39:0d:4b:2b:f2:df:f4:e9:ac:f9:
39:5a:93:bd:99:b2:3d:be:da:cc:fd:84:22:e6:d9:
5b:22:be:85:c2:2b:31:ee:40:c9:bd:5b:a8:3b:06:
90:f0:57:28:68:0f:22:33:12:1a:19:f3:4f:ad:9d:
8a:cb:93:64:33:10:e5:d4:70:d8:3e:40:bb:72:1f:
f5:88:4c:7b:14:01:7e:f8:36:e0:7d:ef:12:fc:4b:
5d:bd:91:b5:ac:2a:55:da:f7:85:91:c1:d7:a6:89:
72:23:f6:4a:5c:1e:6a:66:3e:a8:dd:70:d0:8d:31:
f1:a4:1c:26:2d:d4:e4:8c:82:28:79:f5:3a:7c:54:
15:e0:bd:7b:17:63:8f:e3:15:56:d9:64:79:ca:c3:
b3:f5:e6:c0:a1:02:c6:d4:a0:d4:0b:c5:ff:e9:d5:
d9:3e:9b:1f:21:d3:2e:fc:e2:b6:24:ec:be:ab:04:
16:bd:93:82:c8:a3:98:47:b1:28:b4:02:c7:d1:62:
5b:b6:95:fc:eb:aa:84:32:f5:db:cf:c3:db:45:eb:
7d:94:6d:a7:4c:03:f8:fc:da:5a:4c:da:8b:eb:3c:
64:45:8f:ba:8b:e6:55:05:ea:a1:07:a2:b9:46:ef:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9F:36:11:D0:87:12:73:B4:5F:4D:C0:3A:91:66:C1:CA:39:80:BA
X509v3 Authority Key Identifier:
keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:91:ed:24:ee:93:d0:8c:3a:49:ec:7a:ef:6f:be:44:0f:16:
ea:18:92:12:bf:60:4e:bb:73:03:bb:4e:38:05:63:77:f9:c6:
80:c1:24:a5:b7:e3:46:8b:68:e3:4b:89:62:a9:ee:7e:1a:5f:
6e:62:dc:b9:e8:ab:8e:fb:74:54:e8:91:e6:d5:9b:8f:7f:24:
f0:e3:a5:5d:0c:90:ea:de:2b:77:3b:9b:b1:27:96:3d:30:35:
0f:6b:62:db:90:5e:af:e7:e1:c1:81:96:c4:b0:d4:99:c0:83:
84:d8:10:27:7d:66:ef:88:06:13:98:1e:1a:06:ef:5f:a6:56:
fe:92:eb:35:52:37:fc:c0:eb:d8:68:0b:41:cf:8a:1a:ed:82:
6d:6d:5c:1d:ba:c2:10:ff:be:00:c0:bc:64:4d:11:99:81:27:
bd:b2:ea:c0:ef:cc:06:5f:97:33:87:ec:4b:36:53:ca:ed:50:
0b:63:c3:13:ce:91:1b:fa:d5:e7:75:87:77:27:2d:59:c7:f5:
59:0e:f7:ef:04:74:5e:ba:6b:20:ce:4a:7b:92:93:dc:c9:bb:
92:c0:7a:a0:6b:65:33:bd:8e:9a:83:5a:75:4d:8a:d4:3e:37:
ca:74:80:e7:d7:cc:d5:38:d5:57:9d:d2:37:ad:73:5f:8d:a7:
2a:61:8f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:48:44 2025 by rpki-client