Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: QQASuhAr+vtUBBc68Taw0lU6eJ1tFELli6AQXTngcE0=
Subject key identifier: 04:B4:86:85:67:95:EC:A5:9C:E5:1D:29:81:E2:76:85:AD:55:8E:3F
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 0199112B4966E529F10B21C546C3D8FB17A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 09D5
Signing time: Wed 03 Sep 2025 20:01:13 +0000
Manifest this update: Wed 03 Sep 2025 20:01:13 +0000
Manifest next update: Thu 04 Sep 2025 20:01:13 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: BesWh3alQ2THtmhXoGvkyZZqlAm6e3Wi2l97zpRHmk4=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 18:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:11:2b:49:66:e5:29:f1:0b:21:c5:46:c3:d8:fb:17:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Sep 3 20:01:13 2025 GMT
Not After : Sep 4 20:01:13 2025 GMT
Subject: CN=04b486856795eca59ce51d2981e27685ad558e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:34:fc:0f:4e:73:3e:00:c6:6d:ec:4e:5d:
73:4a:2e:00:bb:8f:eb:da:25:ba:4b:bc:12:92:82:
bf:9b:78:59:d5:ca:63:d9:ec:da:6f:0d:3c:e2:9b:
e0:43:af:ad:ce:cc:66:16:c8:ad:4e:86:5c:21:30:
23:67:0e:cd:6f:1b:fc:63:8f:0c:38:7e:96:99:71:
91:8f:d8:4e:d1:6b:c8:35:1e:8e:d2:c3:b6:23:83:
c8:50:b3:44:7a:e5:4d:39:82:a7:13:99:34:b6:7a:
c7:58:42:f6:f1:bc:6c:6c:b8:d9:fe:43:08:71:57:
bf:c4:10:9c:f3:f9:6d:95:08:0c:18:de:42:23:01:
44:7d:95:5a:1d:bc:b9:84:08:7a:8a:8d:c9:83:17:
c0:35:51:62:9d:09:6e:40:e8:e2:bf:63:e2:ac:8b:
42:a2:05:0c:6c:b4:82:50:5b:bb:b8:2e:b2:e8:f4:
c8:d4:b6:87:2e:80:7a:ab:0d:99:7f:d6:e4:05:25:
fd:10:95:b2:90:8e:0e:72:3f:aa:ef:18:bb:8c:19:
30:56:af:75:d1:72:4d:d0:06:01:28:fb:fb:c9:7b:
99:d0:c5:8f:90:fd:d2:0a:d3:ba:2c:d8:50:b4:1c:
ef:40:f0:73:8f:15:aa:d5:6b:f7:76:c4:15:d3:06:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:86:85:67:95:EC:A5:9C:E5:1D:29:81:E2:76:85:AD:55:8E:3F
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:dc:59:3a:0e:35:dd:bf:97:30:69:ea:ce:2b:ae:06:da:12:
51:16:b9:96:17:97:87:a9:b5:0f:84:29:c5:24:f2:b8:17:e3:
45:07:79:c0:34:cb:10:95:c5:4c:bb:c7:61:47:a2:96:f9:0e:
86:93:0c:38:68:60:34:1e:13:4d:fa:41:9d:b9:03:8d:20:f7:
2a:78:d5:b8:5b:71:cb:6c:5f:25:05:d6:33:f1:5a:a5:df:34:
f2:5e:a4:54:65:b9:cb:f7:f2:06:2a:d7:18:20:5d:3a:ef:26:
02:a4:25:ed:b0:2c:d8:94:bf:d8:c0:c8:5a:36:2f:28:bb:24:
df:48:a0:48:21:e6:96:be:e2:1a:7c:a7:c8:ef:db:98:dc:10:
29:68:0d:6f:41:18:7e:e8:ec:a4:cb:19:6c:4c:98:11:34:40:
93:11:60:80:2c:ef:51:b4:1f:77:91:01:e5:74:6b:4b:89:1e:
c7:0c:f9:25:f3:11:9a:19:15:af:52:2b:b0:7e:95:78:d4:d0:
5c:46:f8:08:e2:64:26:1d:7d:15:0f:d4:6b:ec:17:92:5c:3c:
cc:d7:25:14:cf:38:94:0c:17:5d:14:54:39:61:5a:0f:ab:81:
c4:91:24:53:5b:dd:9b:15:fe:8c:8a:bf:c9:3b:49:6a:d3:a4:
1d:46:70:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 02:05:16 2025 by rpki-client