Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json)
Hash identifier: jKdy0u3XXWkLW8fcN8tZ+4oKApH2Fml/vWwBqmLEgl8=
Subject key identifier: 56:FA:C5:BB:B5:68:E7:FC:7A:46:9B:FE:02:F2:C1:E4:A7:B9:7A:91
Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Certificate serial: 019921E76AE3F4D3BBB5CAFFE88C7B85F043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
Manifest number: 0B01
Signing time: Sun 07 Sep 2025 02:00:38 +0000
Manifest this update: Sun 07 Sep 2025 02:00:38 +0000
Manifest next update: Mon 08 Sep 2025 02:00:38 +0000
Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: KnrXNQBA6JqJQ5uc6X256uCsvvNO5bbcd6SJOGqH0SY=)
2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:6a:e3:f4:d3:bb:b5:ca:ff:e8:8c:7b:85:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc
Validity
Not Before: Sep 7 02:00:38 2025 GMT
Not After : Sep 8 02:00:38 2025 GMT
Subject: CN=56fac5bbb568e7fc7a469bfe02f2c1e4a7b97a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:d2:50:83:d6:0a:5b:f8:45:f6:5b:de:45:
c3:1a:cc:8b:08:ce:05:c6:52:28:9a:e5:f5:98:bb:
d1:14:ba:4b:61:47:7b:0c:ac:0c:e1:f6:93:6e:9d:
01:6b:20:a5:88:b1:87:24:a8:06:f2:22:a4:28:2a:
c8:30:e4:6d:40:d4:92:63:78:bc:ff:16:44:6e:a7:
e9:8e:80:77:6d:05:0a:29:a9:a2:e8:0d:0b:15:be:
21:52:1d:9b:13:4a:10:85:8e:72:7b:79:0b:3e:c5:
b6:44:ab:95:13:e4:b0:52:de:bf:3c:f9:5f:d1:96:
20:84:b5:d5:d6:8f:5e:81:6f:79:0d:aa:cb:2d:13:
36:10:e2:c4:41:dd:6e:1f:11:28:13:66:56:23:f6:
19:65:8b:ba:b5:5e:46:8c:74:9a:b2:4e:10:ab:8e:
ea:5f:cd:04:8c:f0:f0:01:bd:39:b6:22:c5:5a:c9:
79:5d:63:3b:62:90:05:51:1f:0e:ba:78:91:6d:6b:
29:b6:ed:bb:ea:7e:0a:25:d3:f3:7b:a8:a8:50:b3:
50:f1:01:4d:7f:46:f2:29:35:20:75:eb:34:26:55:
0c:e7:54:20:ef:79:86:39:f7:63:8a:42:cb:bb:f3:
30:ce:f2:3f:3c:b2:b6:09:a9:ce:9c:18:3c:61:17:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:C5:BB:B5:68:E7:FC:7A:46:9B:FE:02:F2:C1:E4:A7:B9:7A:91
X509v3 Authority Key Identifier:
keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:94:84:5d:76:34:d0:7a:76:07:ad:54:58:c6:95:80:37:34:
e5:ef:d2:ab:e2:86:6c:a9:97:6b:65:f8:87:f4:18:a3:cc:f3:
98:8c:15:a5:95:67:73:7f:67:9f:a7:d3:d4:0b:52:b7:b3:20:
ca:65:b5:da:9b:df:10:a1:93:eb:b5:9d:35:c1:43:92:4a:e3:
10:30:bc:f9:ab:aa:e1:09:16:54:c0:30:7e:61:d0:2a:ad:84:
0f:90:4d:bf:a4:70:0a:73:3f:34:e5:36:41:34:e7:ad:a9:bd:
ab:c9:8f:82:94:8e:95:db:f1:c1:eb:39:8a:e8:3e:e6:28:7f:
2c:14:22:36:3f:5a:07:f2:6b:d5:3e:e7:df:e1:09:9e:53:b1:
fe:ea:b7:03:27:ff:10:ed:27:c7:b9:77:2a:62:4a:7b:ec:91:
52:60:ca:9e:39:51:3c:9b:e8:ac:b3:fd:77:66:b4:71:c6:b5:
6c:33:ec:0a:35:07:55:5e:24:41:31:4f:50:b2:0c:8e:c6:40:
39:69:62:79:dd:23:47:65:59:76:e4:89:44:28:8e:6a:40:f5:
18:55:0c:2b:ee:1c:5c:00:38:9b:10:08:50:fe:8c:63:a1:70:
ee:bb:6a:fa:d7:4e:bb:35:45:69:4b:9a:81:de:0e:9f:22:a5:
47:8d:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:29 2025 by rpki-client