Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: M/9VVv67SIj4bjYqMn2SYM2xw5OCGW0PYgRfgt3CYrM=
Subject key identifier: C7:58:03:DB:88:D2:46:A7:B8:39:38:6E:64:A4:46:15:49:07:E1:49
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 0199228C8DEC73F4FDF8F0D3F05E405F157B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:00 +0000
Manifest this update: Sun 07 Sep 2025 05:01:00 +0000
Manifest next update: Mon 08 Sep 2025 05:01:00 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: gbsFECJSa49+XO+HCq7t3BCZLM9ds6OZGjonr0h7Lv0=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:8d:ec:73:f4:fd:f8:f0:d3:f0:5e:40:5f:15:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Sep 7 05:01:00 2025 GMT
Not After : Sep 8 05:01:00 2025 GMT
Subject: CN=c75803db88d246a7b839386e64a446154907e149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:77:97:b3:3c:a5:ea:40:df:18:05:c2:ab:ef:
ea:e9:c1:4a:36:2f:56:5f:2e:15:48:6a:a4:50:8a:
6c:e2:2b:84:2f:d2:1f:71:a6:33:3c:14:a2:74:d6:
73:d4:71:58:02:cb:20:0e:7e:a3:58:ba:cf:2d:c8:
01:11:44:15:0e:e9:52:1f:bb:83:78:60:a7:ff:43:
d9:9f:6b:94:1a:5e:f5:14:32:91:e7:f0:71:3e:8a:
d3:6f:67:1b:b5:93:a3:37:a9:df:2d:10:4a:da:21:
c9:f2:b8:b5:e1:ce:69:ac:5a:65:e5:bb:4f:ba:ae:
33:7c:d7:9f:fc:60:1c:fa:22:e0:00:4e:27:dd:ba:
94:78:ac:c2:78:00:ad:22:30:f1:a8:68:de:5a:c1:
79:97:17:fe:c4:c9:0e:ab:a2:56:4c:6d:0a:f0:eb:
c1:76:be:57:74:97:9c:7b:25:aa:09:b7:5f:01:42:
09:f3:85:b7:50:42:66:95:8b:1b:97:80:71:7f:93:
f2:1c:38:5f:40:fe:ed:3e:14:af:16:2d:63:40:02:
df:74:b5:be:10:a4:dc:71:28:31:6d:60:d0:ed:fd:
27:ba:e2:cc:31:29:4d:08:77:96:eb:82:90:83:1e:
4a:30:9a:5d:84:b9:79:3b:5b:26:b9:47:47:ad:4e:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:03:DB:88:D2:46:A7:B8:39:38:6E:64:A4:46:15:49:07:E1:49
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5b:dc:7f:e2:4d:d5:b0:76:71:a2:5c:6d:ac:2f:08:34:52:
cb:0f:19:cb:26:20:5c:b4:e3:c1:dd:db:c2:4c:ff:f7:d3:eb:
14:c5:e5:97:76:f4:31:9f:d4:4c:7f:14:d5:eb:47:74:91:d4:
9a:53:63:85:72:67:43:28:43:2c:01:ee:44:4c:7a:ba:89:4d:
c6:d8:5a:35:f1:89:60:01:81:cc:6d:0e:05:b5:ae:67:4d:24:
49:10:28:e2:04:ad:1c:29:dd:1e:c6:72:52:66:f6:e1:ef:98:
63:ec:5b:45:44:3e:49:c3:54:a7:fb:87:8a:1e:c5:c1:e9:51:
68:9d:44:4a:01:5d:60:71:f8:35:b7:ee:4b:6c:39:98:1b:10:
7d:e4:98:c6:b8:7a:ef:22:1d:94:1f:fc:e5:5b:ac:09:e4:5c:
10:02:ed:20:47:dd:26:b2:b4:0f:e9:45:4f:34:72:d7:19:b4:
bc:c6:d8:8c:0c:ae:d9:11:a6:62:84:90:76:e9:77:b9:49:08:
8f:b2:57:87:d1:a2:a3:08:db:fa:8a:99:ff:71:e4:a1:cc:c4:
2d:79:28:0c:1d:1e:ef:04:fe:02:12:f9:a6:b8:f1:08:a0:b4:
48:d8:52:63:02:9e:56:39:13:31:07:36:e0:60:8b:88:d4:1d:
c5:8b:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:22 2025 by rpki-client