Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: H4YLp3VBPI9s1Jq1yAup9NqLjkgZawJOYLdJ5Jw9XY0=
Subject key identifier: D2:1A:3F:E4:A0:FD:E2:AC:89:09:2C:88:7F:3A:62:67:B5:16:A0:43
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 019923A0455B935465D540FF824EA6A8434A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:02:09 +0000
Manifest this update: Sun 07 Sep 2025 10:02:09 +0000
Manifest next update: Mon 08 Sep 2025 10:02:09 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: PnSddwVlBoNaBGlv/5YDoavsmVUaWVRvpBcSSN0wMC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:45:5b:93:54:65:d5:40:ff:82:4e:a6:a8:43:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Sep 7 10:02:09 2025 GMT
Not After : Sep 8 10:02:09 2025 GMT
Subject: CN=d21a3fe4a0fde2ac89092c887f3a6267b516a043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:6a:9c:b4:ee:63:ec:09:d2:49:79:84:85:
d3:34:49:0a:61:4a:9f:c1:0d:ff:cf:b6:f8:83:8d:
30:de:2c:b0:0d:f6:97:58:79:72:8a:a5:b8:a6:79:
e7:d4:ed:ec:e3:5b:4a:25:f4:8e:78:4f:73:28:0f:
11:06:c4:95:dd:12:a9:5c:3b:0e:1c:58:71:79:4d:
16:a9:28:15:a8:3c:20:e3:21:8b:46:ef:7b:da:e2:
a9:fd:6d:32:10:68:68:cf:4b:0d:8e:d4:ef:a6:18:
a5:6e:ee:87:5e:5e:3f:28:ca:56:d0:8c:91:c4:49:
62:14:8e:f8:f1:67:e6:cb:05:60:88:f9:50:2c:ad:
fe:5b:32:a7:2a:d0:ba:0e:2c:f3:9b:9a:da:d0:f5:
1a:4b:73:e0:87:8d:bd:94:d6:5b:f4:49:29:b7:c8:
03:84:23:81:c9:bc:e8:55:2c:98:12:22:9a:43:8a:
99:b3:28:80:4a:0b:e9:9c:21:ca:06:68:ba:c3:ac:
38:52:8e:a9:4e:e8:f4:fc:a1:e2:c4:53:f9:c4:a5:
ff:94:e7:52:64:2f:84:79:46:0c:98:52:f5:58:76:
ed:84:e9:42:d1:f3:18:bc:12:aa:13:b8:65:bf:3f:
8b:3e:fb:a3:42:35:1a:6c:4e:79:2c:df:c9:eb:9e:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:3F:E4:A0:FD:E2:AC:89:09:2C:88:7F:3A:62:67:B5:16:A0:43
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7b:bf:cf:ef:83:19:d3:61:9f:04:a9:00:16:c8:2a:ac:31:
9a:8f:cd:52:57:72:ca:93:25:7d:4e:d4:63:03:db:c3:f7:94:
10:79:92:8d:34:7f:a4:6d:53:4e:34:5d:58:01:76:fa:21:98:
1a:5c:b0:29:2b:e6:66:4e:ff:62:d4:bd:c5:98:28:c1:d9:3b:
bd:a1:e3:27:bb:dc:ef:c3:14:08:bf:2d:46:6f:80:67:b6:b0:
c9:cc:11:c7:49:f7:0c:a6:41:b5:90:16:54:88:cd:76:5e:b2:
94:f0:14:67:76:18:48:c4:cc:31:e4:f2:f9:0c:7c:ce:59:fe:
27:72:e8:db:49:49:c1:31:a5:b8:07:83:26:d6:d0:90:14:f9:
62:46:8e:1a:b7:bc:da:80:e1:b0:2f:0e:79:41:2c:4f:f8:46:
81:eb:c0:9b:8a:9f:4c:5a:f6:4b:ab:f5:f7:c1:1d:48:a1:e4:
3c:ac:92:b1:68:cb:d2:f0:0c:07:c8:8d:6f:cd:63:66:fe:07:
26:f9:ea:fc:bd:f1:81:3a:76:28:97:e0:dd:2a:da:46:30:25:
4c:c9:ab:56:17:78:39:39:54:42:3d:42:23:3c:9a:37:e4:e7:
55:6b:67:45:7d:c0:c6:24:17:8d:d4:de:97:93:d4:8e:c0:ab:
ef:a8:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:11 2025 by rpki-client