Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: za0G/leD2yFIU7+syhCGSoNYX1cjsIymM51a90uAAAI=
Subject key identifier: 10:F9:1E:64:11:3F:8D:7D:48:82:62:56:4F:50:3A:6E:72:5B:55:1D
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019922FA911B1B562C59081CF14786634701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1689
Signing time: Sun 07 Sep 2025 07:01:10 +0000
Manifest this update: Sun 07 Sep 2025 07:01:10 +0000
Manifest next update: Mon 08 Sep 2025 07:01:10 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: rwynDyO930V2uwmw4gE4dteZB4YCgWjkasCSQ1xlucc=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:91:1b:1b:56:2c:59:08:1c:f1:47:86:63:47:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Sep 7 07:01:10 2025 GMT
Not After : Sep 8 07:01:10 2025 GMT
Subject: CN=10f91e64113f8d7d488262564f503a6e725b551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:cb:2f:72:fb:73:26:92:52:1a:bf:7f:72:
95:9a:7b:da:82:52:b0:c6:34:18:ca:b9:93:48:8b:
ff:e4:36:8e:3f:33:94:78:09:32:9a:41:f3:8e:36:
5b:89:58:ab:fa:ba:64:cc:17:5e:09:5c:85:ac:83:
0c:76:42:2a:b5:25:ca:8e:59:92:b5:d6:22:60:7f:
e5:5b:f7:f2:94:44:e7:bc:8b:60:84:d9:52:6e:14:
83:35:65:11:52:b7:ed:e4:35:2d:9b:12:2c:4b:47:
f6:5e:c0:92:bd:f8:4b:3e:4e:4b:fe:53:b7:45:de:
ad:06:75:dd:a0:16:2b:dc:c6:da:7d:59:5f:4d:a5:
4a:a5:d6:0b:b6:fa:87:83:34:0a:4d:67:7f:f2:d5:
bb:bb:64:5b:62:d1:01:db:f0:80:d0:1b:7d:ed:7a:
56:da:95:54:f7:3e:ba:25:9d:08:62:91:ca:8d:54:
ff:83:c3:dc:05:a4:c6:16:b3:e0:69:52:1a:82:fc:
98:c2:0b:d9:f4:1f:01:a8:6a:3e:9b:0c:b0:1d:3c:
75:b9:57:58:20:7d:91:01:e7:c3:06:8f:65:64:c9:
bb:53:dc:1d:65:32:8a:86:6e:68:42:3d:eb:05:3f:
08:a3:d3:b8:4c:f8:1f:32:27:68:e6:e2:6b:6f:d6:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:1E:64:11:3F:8D:7D:48:82:62:56:4F:50:3A:6E:72:5B:55:1D
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1b:72:1b:be:d4:93:65:57:01:39:6b:02:4a:94:8a:ab:ea:
21:c1:cb:89:fd:6e:55:b1:25:05:94:39:d4:f0:9f:d3:06:ff:
a2:41:13:25:d1:da:b7:c1:de:53:11:39:60:e5:2e:62:b2:14:
d0:47:06:a7:3d:bb:fb:25:06:72:7c:ca:33:90:f0:b3:12:08:
cf:72:3e:b5:5d:ef:db:f9:c3:64:28:02:ef:20:3a:35:e5:34:
3b:82:78:fa:6c:f9:74:32:af:7a:cc:a0:ac:30:30:ae:95:e9:
4d:45:ca:87:69:85:25:11:bb:a0:64:91:9d:b3:a8:54:bf:56:
7c:f0:e5:40:aa:cc:00:38:55:ae:2c:6c:62:df:b5:f5:ff:ed:
eb:d1:71:26:b6:dd:e0:a3:bf:ef:75:cd:24:b7:17:cf:84:29:
65:79:e4:c1:d2:92:d9:c2:10:70:02:98:f8:7d:99:b1:d9:b7:
b3:11:ee:13:88:98:17:8f:66:e1:68:15:50:6f:29:2a:38:0b:
06:e2:a8:a4:a2:1a:10:45:43:2d:fc:98:e4:38:4d:f4:af:f9:
f1:72:7d:ba:79:5c:7f:cc:09:fc:ee:2e:4e:10:78:59:42:6a:
53:91:fd:54:00:15:8a:05:ee:70:8f:53:69:c3:5b:5d:71:06:
19:54:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:35 2025 by rpki-client