Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: CqUQnCfomIip2MaD6G2KdpoK/Oj894c46Xqbg1mJLKg=
Subject key identifier: A7:B6:9C:66:FB:E8:6B:13:16:3C:08:83:1A:83:C3:0B:C1:C9:47:DD
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01991C8A8D004FEB320D3A360FA3DA5BABC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 1687
Signing time: Sat 06 Sep 2025 01:01:05 +0000
Manifest this update: Sat 06 Sep 2025 01:01:05 +0000
Manifest next update: Sun 07 Sep 2025 01:01:05 +0000
Files and hashes: 1: 42NnB3jW5n3RbWWrHMDd_7NubAY.roa (hash: bZyySLXxgMQfpoBtEuXSmgHgMgLKQxBjV3IqMenXg0E=)
2: EuMIVvtjfwcw4H_1qN_NTTYxtB0.roa (hash: GstL7gwAEgcyBOR5WEEQ3UJ45LkAklqubcGaSv86PEM=)
3: U3GEel-_AheBYgIYIVYL9mt_5dg.roa (hash: qjeuuOD21NigMG6GkIxT7OwP2vU0izG4cg6tV2NDSPY=)
4: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: meU5dq6pSaecPJAADM4SiYhReUvEv3a3R5lvaPhbbTY=)
5: ZvRJrTWQfMOoVK-yV_Cqwkgeu5A.roa (hash: hHz6N7J+wTDqY/Lm+M/7LMn5tnMNWvw100eCFcrE1zM=)
6: hMxFbe2_woNux6m3JkElwux-E5g.roa (hash: nrSIsPwWOsAGq4mrEG8bp4vhnLrScT5iVl2b8ClElOk=)
7: olCZzHEOZSOjj4yqtahX2zJkhMQ.roa (hash: aXtBhSkmw714xAy5wT1PAT7ELEpsc4omuqROu4g4WE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:8a:8d:00:4f:eb:32:0d:3a:36:0f:a3:da:5b:ab:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 6 01:01:05 2025 GMT
Not After : Sep 7 01:01:05 2025 GMT
Subject: CN=a7b69c66fbe86b13163c08831a83c30bc1c947dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:ea:ba:77:6b:3b:d0:c0:6f:0f:65:21:fd:
3b:29:6b:5d:b3:09:93:8a:fe:b0:e2:a3:59:6d:eb:
98:d3:19:3d:ff:d9:5d:a2:0a:b5:0b:13:cb:ff:a3:
f8:a8:1d:71:57:34:e9:f6:ea:7a:59:77:e0:3d:68:
3d:42:34:e2:09:2e:bc:52:f5:5f:e8:3b:4b:28:e0:
d9:4a:61:53:26:d9:7e:9c:62:d2:ef:de:9c:27:aa:
4d:5d:05:5e:1b:eb:9b:97:cc:7b:3f:f4:de:fd:37:
95:95:e7:72:e1:7d:00:e0:44:b3:bf:fb:fc:5c:b9:
44:f8:d7:3f:51:2e:27:97:5a:97:11:7e:ef:f4:12:
ed:67:27:33:0d:07:f6:f5:9d:20:c9:3e:dd:c7:ef:
a8:df:16:b5:23:08:a3:ff:85:9e:07:a5:7a:70:e0:
40:a3:64:85:e5:cf:fb:73:b8:23:2c:96:18:82:0f:
de:82:ed:cc:ca:7f:55:44:74:48:95:77:5c:97:7f:
95:cd:08:7b:42:72:da:03:f8:0c:8e:b2:d0:05:3f:
94:14:d3:a1:cd:cc:5e:48:62:b7:0c:5a:37:7f:14:
29:56:ad:91:67:4a:7d:2a:22:63:87:db:ff:a2:64:
38:f2:c5:29:bf:f5:08:41:58:15:35:ac:bb:57:55:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:9C:66:FB:E8:6B:13:16:3C:08:83:1A:83:C3:0B:C1:C9:47:DD
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a7:e8:ca:5e:e6:ee:59:b8:ed:1a:c6:f8:1e:d9:c8:57:bf:
58:a9:81:4d:08:fa:fc:72:4b:88:1f:ff:4d:35:be:61:3b:3e:
81:0f:ac:19:c4:c4:f9:15:8e:61:40:b7:c2:d0:25:3c:c0:55:
13:0d:23:61:ef:9a:b8:ff:2c:21:ea:ef:87:71:c3:c0:dc:0a:
86:6f:40:da:27:46:6b:11:6c:15:e4:5c:4b:01:c7:b9:6e:58:
74:93:7b:54:3c:1c:9c:42:ca:4e:b0:d2:cf:b9:4e:55:5c:75:
73:aa:30:04:f9:15:48:65:0b:72:4b:37:ba:11:dc:c4:97:39:
d3:30:e1:7a:78:6a:4d:30:41:fe:8a:8a:38:59:33:9e:8e:34:
06:6e:48:f0:f0:d5:ef:11:85:74:03:9a:73:f1:2f:48:19:89:
41:54:90:f0:64:bb:c5:a8:a7:42:9c:c4:eb:b0:40:c0:d4:9c:
e2:da:1c:d1:8b:f2:8b:86:71:ca:4a:2c:b9:12:ba:33:45:5c:
b4:6b:8a:87:e1:e4:ad:41:91:15:fb:c7:f6:4e:68:c0:6b:58:
c9:11:73:20:a9:65:68:c2:c6:95:84:38:bc:d5:53:16:2a:5c:
40:65:eb:6a:01:31:cb:43:bd:24:88:47:32:23:ce:ab:9a:e1:
46:d0:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 04:50:49 2025 by rpki-client