Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier: AKnj+U69JqxKTS86p/rwZWeckHCIBlTqEQptSKe3XOg=
Subject key identifier: 71:96:92:5F:E0:01:72:80:22:10:D7:4A:CE:9A:FE:82:45:8B:5B:52
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0199301172ED36979B41130686D80EC15DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number: 1531
Signing time: Tue 09 Sep 2025 20:01:13 +0000
Manifest this update: Tue 09 Sep 2025 20:01:13 +0000
Manifest next update: Wed 10 Sep 2025 20:01:13 +0000
Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: fZlDJ06vEkFXMkiBld0V24WDMDTzkXfhX/+8Sv9R+gg=)
2: cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa (hash: 3JeVGhOmnf8UAWFgpjcbUPRndvwOtl5MmVpvoRBsyvw=)
3: evKhJ57xaSzVNl3Qur7cE-8m3B0.roa (hash: aCKoxKyHcj4KLd0GXx48dLEfPi6FKkTqW5i/PZZzxQY=)
4: g48iOiDRDJ_XgJvC4YquAwkHpcU.roa (hash: W/4pzvw1CPsXQg+e4ipuVBiSg+Ao5Jez6JAYyxmb4bg=)
5: qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa (hash: maKG5skNiEELx6cnhHvPmlu2+gxjGrUB3RJ4ysfb/0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:11:72:ed:36:97:9b:41:13:06:86:d8:0e:c1:5d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Sep 9 20:01:13 2025 GMT
Not After : Sep 10 20:01:13 2025 GMT
Subject: CN=7196925fe00172802210d74ace9afe82458b5b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:c8:73:02:c5:65:d5:5d:1c:80:f1:43:55:
81:01:69:94:a5:dc:31:9a:c3:42:d4:a3:09:d7:b3:
99:25:79:46:9b:e9:c1:0c:a8:2f:c3:db:0d:a6:87:
43:b6:ff:36:43:be:f4:a6:ff:da:47:06:7a:99:09:
5f:bb:f2:73:d5:c4:c7:9d:78:95:cf:eb:da:05:e4:
b0:ca:9e:92:2c:f0:ff:60:b9:6e:d5:66:76:0f:28:
c0:71:2e:f6:39:c6:6c:3f:ca:dd:78:aa:29:9a:2e:
b3:05:43:48:5f:27:5a:8a:ef:2f:d6:44:4a:fa:ba:
f5:61:5b:b6:2d:f6:79:d7:c5:1f:b9:d2:dc:c2:ec:
ea:43:3d:2e:17:52:bf:4f:b9:ab:18:26:62:43:89:
1a:6e:8b:2f:f3:78:15:1d:b7:91:e5:d3:e9:1a:8e:
3a:6e:17:53:bd:b6:72:40:45:b5:8e:cf:f3:7d:a4:
38:8c:75:80:a0:b7:38:65:63:31:0b:1c:1c:d3:ff:
af:97:fc:a8:0d:58:45:7e:e9:87:0b:d4:a7:a6:0d:
20:9e:dd:28:93:87:27:e5:6b:05:44:ad:05:10:82:
c1:7a:fb:45:b9:f9:b3:28:53:2d:7a:f7:4b:17:eb:
6f:5d:d9:71:19:18:de:7a:f2:2e:ed:f7:5a:db:79:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:96:92:5F:E0:01:72:80:22:10:D7:4A:CE:9A:FE:82:45:8B:5B:52
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f7:da:22:27:f4:90:65:3c:f8:d3:5f:69:71:67:9b:99:17:
84:58:d0:f5:7a:fc:51:fe:6c:47:50:df:72:be:01:be:0a:34:
ae:5e:31:e8:dc:93:7f:cb:4e:78:8f:81:c4:14:9f:94:3f:6f:
21:cb:63:a4:de:86:95:a7:9e:c9:bb:a0:88:dc:70:f8:05:85:
ce:e4:c5:c9:17:9a:5e:d3:f1:83:f7:e1:1a:29:54:7a:1e:f1:
9d:dc:d4:50:7f:12:62:77:3e:5d:fb:4b:75:b1:3b:5a:dc:26:
ed:3d:51:c1:5f:a1:18:a8:71:cf:cf:c4:40:6d:6a:2d:ae:2b:
4a:ba:5e:ec:54:65:4e:01:35:e6:2a:98:4d:87:92:47:e7:91:
b1:f4:a3:92:29:a9:db:af:82:af:95:57:22:07:63:07:23:4a:
03:16:60:b5:39:27:9a:07:7c:a2:3b:40:2a:57:fc:9e:57:88:
41:48:15:b8:37:32:a5:56:3e:08:3c:f5:3b:d2:17:6a:51:dd:
0d:23:8c:7a:97:aa:be:27:d6:91:23:36:b8:e6:87:91:ab:19:
5a:73:f6:f0:af:6b:fa:bb:0f:ab:b6:92:b1:68:fb:e5:85:b9:
c3:bd:23:95:60:66:5e:77:af:3b:86:09:61:ec:40:b5:39:91:
ab:d6:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:26:38 2025 by rpki-client