Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: vncBEUmraH7vRPuIWIeeVwVQo003VYwRUk3cAUFtqH0=
Subject key identifier: C9:28:19:60:F1:3D:EE:79:03:BA:6A:08:E1:73:18:FC:C9:30:AD:38
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019921E75F14066271420772420107183A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0661
Signing time: Sun 07 Sep 2025 02:00:35 +0000
Manifest this update: Sun 07 Sep 2025 02:00:35 +0000
Manifest next update: Mon 08 Sep 2025 02:00:35 +0000
Files and hashes: 1: AYZF24EgOrNz6WZhkXpTDIKj7Uw.roa (hash: XuYEiMGlP57vEAu/M5jaVByOWmDwAZB50X25JNOPTpo=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: 2p/cHCh5vzzBAkWn6l265/IG/m+oLsCo80eMk59mbxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:5f:14:06:62:71:42:07:72:42:01:07:18:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Sep 7 02:00:35 2025 GMT
Not After : Sep 8 02:00:35 2025 GMT
Subject: CN=c9281960f13dee7903ba6a08e17318fcc930ad38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:9b:b7:9b:1e:b5:4e:bb:5f:30:b7:f4:aa:
7a:2b:71:a0:14:a0:66:62:6c:6e:06:82:a4:9d:46:
b7:59:db:f7:18:b7:69:57:80:bf:71:93:a8:a3:d6:
79:e8:7f:2f:df:b2:65:b1:11:e9:90:98:32:fe:59:
97:c3:fe:88:09:6e:07:a4:45:16:1c:bd:00:e7:9d:
98:1f:08:27:0f:d0:50:09:bf:ef:d4:37:49:f7:e4:
d9:03:da:cb:78:f1:77:17:b8:0f:52:f9:b0:a8:03:
9d:19:1d:08:e7:b7:d5:1a:f2:a2:bb:74:08:84:4c:
55:ed:f3:13:71:67:b6:4b:cb:57:99:96:2c:cc:0a:
d1:c3:b0:3a:bb:36:8b:b4:f6:52:4d:fe:be:61:b0:
4b:7e:59:f5:77:7b:4c:e4:0c:08:dc:b8:2a:52:27:
89:9c:8f:be:9b:c3:95:f9:47:bf:59:24:08:bb:cb:
1b:7f:1a:d0:85:1c:b7:79:c0:19:d1:8c:2a:22:fc:
f0:d0:b6:5d:6e:54:26:91:03:87:ac:15:5b:80:29:
45:28:c4:5f:25:ec:b2:99:90:ec:11:90:45:7b:7f:
e3:d2:26:85:67:d5:f2:55:ad:6a:2d:49:c9:ee:62:
44:80:c8:31:4c:51:81:f9:56:69:2a:db:11:c0:54:
71:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:28:19:60:F1:3D:EE:79:03:BA:6A:08:E1:73:18:FC:C9:30:AD:38
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:97:0b:13:ce:6a:7e:cd:a4:23:d4:01:f2:c8:e9:c3:6b:f6:
e6:30:91:84:96:3e:21:83:a3:4e:c9:d2:ed:53:dd:f1:fd:ae:
bb:93:f6:2f:bf:d6:51:1c:f8:6d:3e:cb:af:f0:bb:d0:31:96:
3f:77:18:62:fd:54:fc:8c:c8:20:33:16:c1:5c:51:ee:9d:46:
51:68:90:42:e1:89:12:6d:53:b4:a1:d0:7c:97:53:8b:df:85:
29:fc:a5:d7:23:fb:98:35:f1:ed:e1:76:e9:d3:26:65:1b:6f:
d7:09:b4:23:6c:74:17:87:95:6e:ce:51:50:23:c7:fc:f1:fa:
95:dc:b9:8c:8f:11:25:40:a4:ae:78:56:c1:82:b8:ba:3a:cc:
ca:e5:04:d5:e8:6f:5f:f9:00:2a:46:9a:ae:27:95:8f:fa:e3:
54:36:66:7e:bd:98:5e:03:b6:d2:36:16:c1:a6:5b:c3:4a:1c:
7c:28:8d:43:db:03:00:bf:1c:39:18:20:b5:72:0e:d8:36:92:
ad:92:01:d1:96:af:cf:59:13:b6:f7:b8:09:33:bd:71:3d:29:
fb:a7:02:1e:79:be:40:7f:6b:e2:74:57:d2:c8:c3:8c:9d:f7:
91:09:ad:a1:fd:16:da:c0:97:ee:78:fe:2d:91:bd:3d:e8:d8:
5e:83:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:44 2025 by rpki-client