Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: VLepMWWskQ5O/UQDmrkS6tq8lIB7npqJVNXB4REwvbM=
Subject key identifier: 2C:70:68:48:9A:D7:89:B8:4A:2A:2A:DB:CB:00:32:9C:D8:91:F8:25
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019921B12CCD4F4E8E2D18C15D67C219DC90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0DD6
Signing time: Sun 07 Sep 2025 01:01:23 +0000
Manifest this update: Sun 07 Sep 2025 01:01:23 +0000
Manifest next update: Mon 08 Sep 2025 01:01:23 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: jQr+5qis6mrQ6o/sV8emhgXLzPlhWiTruUm6q9lQMLI=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:2c:cd:4f:4e:8e:2d:18:c1:5d:67:c2:19:dc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Sep 7 01:01:23 2025 GMT
Not After : Sep 8 01:01:23 2025 GMT
Subject: CN=2c7068489ad789b84a2a2adbcb00329cd891f825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:72:a9:d2:22:48:2e:7c:0b:26:9c:9f:57:
0a:be:82:10:e8:f9:8e:d6:d5:9c:1b:0f:6b:73:36:
60:a4:0a:9a:d3:10:b5:bb:7e:9d:9e:db:36:14:d9:
00:ee:66:23:51:a7:2b:ac:e4:80:3b:2c:d6:7a:0f:
c3:23:24:b4:ba:cb:f1:6a:85:5b:67:ef:82:81:9d:
5d:8f:0b:97:d6:77:7e:ce:48:c8:cb:b2:19:88:78:
99:87:c7:7e:a8:48:77:5a:d5:24:54:bd:18:2d:ff:
1b:7f:9c:8c:c2:0a:b2:95:60:26:69:88:af:aa:dd:
0d:69:dd:43:b1:d1:3a:d9:c9:f4:8a:18:22:7e:41:
ef:bc:d1:b4:f5:48:ee:eb:29:eb:73:be:2e:d1:b7:
96:49:bf:ef:f2:34:39:c6:65:c6:95:a8:d0:c2:fd:
a3:61:ae:0c:f0:c1:35:e0:98:77:ce:d4:c6:72:8e:
86:e3:0f:6f:e1:25:60:ba:7b:fe:e0:ed:98:f7:5e:
33:35:ac:b9:28:97:e8:0e:2e:7a:48:fe:e6:dc:6b:
1d:de:fa:0c:cf:cc:71:37:8d:5c:79:82:28:83:a5:
2f:9f:ac:bb:68:92:c1:dc:c3:3d:f3:a4:04:99:0c:
94:4d:e0:6c:79:ff:f9:3d:c5:64:a4:4d:fc:ab:fb:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:70:68:48:9A:D7:89:B8:4A:2A:2A:DB:CB:00:32:9C:D8:91:F8:25
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2f:7c:96:6d:b5:85:2d:02:9b:82:3a:f8:20:50:60:72:7c:
6d:b5:d7:4a:cb:8b:6a:09:04:03:47:ea:62:33:72:2c:19:87:
50:03:f6:7d:66:de:81:f3:c9:bf:89:4e:dc:f1:f4:c9:c5:61:
e2:5f:bf:94:70:43:38:f2:52:10:7c:73:a4:5b:ef:3b:05:3d:
1f:7e:1d:23:c0:c2:b4:3c:df:c1:e8:d4:d3:07:a9:05:21:a8:
66:36:85:3b:a2:35:90:e7:55:08:a2:9e:38:ca:a6:03:71:4e:
b7:b7:ce:7c:a8:ff:74:89:b9:53:34:af:22:96:bf:84:92:4c:
11:55:f4:59:3d:94:1b:ee:94:89:74:9c:b5:f6:b9:2c:9e:12:
3c:36:95:2a:d3:fd:6e:3b:0b:93:e3:70:75:2b:84:17:7e:76:
7a:a7:ee:60:44:1a:de:d6:88:50:5a:be:f1:4c:d6:06:b2:f5:
96:80:92:13:2e:79:67:62:11:78:5d:6e:6a:4e:c2:bb:0d:11:
c3:fb:55:34:2c:63:ef:d1:e4:61:b1:25:6e:e5:78:01:29:48:
60:1a:39:58:22:5f:98:d7:32:56:d6:dc:f6:59:87:72:5a:a4:
9e:81:0e:98:9e:68:f4:08:47:2d:2d:ca:dc:4f:22:15:9d:8d:
f4:3c:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:34 2025 by rpki-client