Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: cwm/2ojKH/n2pySTWkg69MXyLcnItDkOGT4/QjciovM=
Subject key identifier: 71:B6:FA:B4:A8:B3:37:6D:3C:9E:86:4A:C8:93:1E:FB:38:21:CB:2A
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019A11963213DDB5699FC024B0510F366B9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0709
Signing time: Thu 23 Oct 2025 15:00:47 +0000
Manifest this update: Thu 23 Oct 2025 15:00:47 +0000
Manifest next update: Fri 24 Oct 2025 15:00:47 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: 4slcQ+ZkPxxo0fn/HSudpTDHDyomVGm9X3y7mrlBbdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:96:32:13:dd:b5:69:9f:c0:24:b0:51:0f:36:6b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Oct 23 15:00:47 2025 GMT
Not After : Oct 24 15:00:47 2025 GMT
Subject: CN=71b6fab4a8b3376d3c9e864ac8931efb3821cb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:a7:ad:73:27:13:07:2d:f6:e9:0b:c1:dd:
62:83:f7:10:b1:bf:a5:56:8f:f9:7a:69:68:f0:4e:
8b:19:8c:24:22:ff:b6:81:8b:ed:c7:a3:d9:b7:19:
9a:5c:eb:c0:29:5e:25:d1:a2:bb:90:9c:d2:7c:1d:
e0:9f:9f:70:af:be:30:5d:7d:b5:d8:4a:cf:07:4f:
d5:7f:c6:82:3d:23:17:3e:ca:90:6a:71:23:26:36:
73:cd:a6:72:9b:88:9d:de:e0:f6:47:c4:fb:e5:3b:
1c:3a:00:54:c6:33:55:dd:95:35:be:35:3f:aa:16:
05:3f:ec:98:52:d5:68:0e:b2:75:6f:ab:0b:60:0d:
64:f2:9c:f9:30:85:9a:2c:92:78:3a:e2:61:cb:ed:
06:ee:42:5a:4e:d0:ba:34:19:1b:7e:1d:56:fa:9b:
0f:3b:1d:57:0c:cc:41:bb:1c:f5:2b:ae:81:aa:c3:
ff:60:fa:7b:0d:c6:4c:f6:96:4f:21:49:1d:a2:a0:
ff:1f:33:76:ca:17:a8:3e:f6:b8:db:db:e0:d8:32:
48:65:dc:9b:34:99:c0:d6:92:5d:b9:f4:1a:5c:1f:
4c:75:ed:f2:d8:ae:8b:5b:05:87:44:85:b2:a6:a8:
22:6c:e1:7f:bf:49:9b:31:44:60:9c:07:b0:32:de:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B6:FA:B4:A8:B3:37:6D:3C:9E:86:4A:C8:93:1E:FB:38:21:CB:2A
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:c8:e5:2d:4a:f7:e4:ff:d8:f9:5a:94:d3:70:16:05:b5:
ad:f2:53:16:e9:9d:fe:6e:3c:2c:f0:a0:f7:8d:0f:2b:d3:e1:
8b:9f:1a:fd:d1:90:fb:98:25:82:10:e7:6b:7e:92:73:22:43:
73:ec:2f:0b:36:34:ef:cd:f4:8a:2d:f1:ed:cc:05:78:4d:cd:
d0:b1:4d:51:e2:a5:5b:49:67:32:2f:be:44:8a:60:c9:2b:78:
f5:5f:0a:f6:c7:02:31:a4:87:55:26:44:4d:46:e4:96:0a:d6:
9a:c2:47:65:e6:93:05:89:cf:da:5c:4c:62:d4:c8:5f:9e:89:
79:e6:74:e8:2a:ce:5f:12:7c:33:03:e9:c9:01:e0:df:99:84:
29:67:4a:ac:bd:c9:c1:cc:c6:fc:c4:cd:84:15:c9:99:91:ba:
f4:68:4e:4c:43:f2:24:c0:be:20:37:2f:2b:a6:ac:29:0f:a8:
bf:e3:35:c9:8c:74:82:63:06:e9:33:b9:b3:bc:b2:98:9f:4e:
ef:c0:ca:67:60:88:ea:15:ea:ad:42:cd:f9:e3:10:98:4e:da:
ca:f4:14:e8:d2:2a:e0:39:1d:c9:e3:2a:55:3d:e3:cb:c8:08:
0f:cc:42:c3:a4:80:28:75:4b:17:58:30:4b:64:a1:39:20:a2:
3d:17:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 20:59:54 2025 by rpki-client