Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: R+80bhC7vp1aak8FrWSUMXgivz3zjej9sYrcJo80fyE=
Subject key identifier: A5:05:45:03:D1:9D:F5:C7:A4:F3:CB:C8:CB:3E:24:2C:C2:77:86:ED
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 01993348FA948954580F6C52CD104F96480F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 138C
Signing time: Wed 10 Sep 2025 11:00:44 +0000
Manifest this update: Wed 10 Sep 2025 11:00:44 +0000
Manifest next update: Thu 11 Sep 2025 11:00:44 +0000
Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: rr6EyTV/9j9N2QX8mTcHWxo/p84o9W0CtBbf70XLyZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:48:fa:94:89:54:58:0f:6c:52:cd:10:4f:96:48:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Sep 10 11:00:44 2025 GMT
Not After : Sep 11 11:00:44 2025 GMT
Subject: CN=a5054503d19df5c7a4f3cbc8cb3e242cc27786ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:38:0f:5c:fd:82:8c:73:d2:47:0a:f7:ca:
f2:3a:44:94:95:7a:cd:6e:83:a3:83:55:5c:dc:26:
86:4a:58:85:67:12:3f:e0:1f:8d:a4:29:f7:cc:2b:
3c:18:94:bc:e5:7b:d2:9b:5b:e8:b6:43:79:76:30:
74:8d:fd:7d:d2:ba:64:50:bd:8e:6c:52:3f:66:b6:
d0:a3:c5:f6:e6:7d:55:f9:5a:ce:66:63:8c:78:c9:
4e:8e:c3:99:44:70:45:c2:55:e9:df:76:3b:eb:2e:
95:83:fc:f5:22:24:4a:64:78:90:17:86:1d:6b:c2:
33:84:33:e5:8d:ea:9b:92:19:b3:08:4b:df:e1:fc:
18:10:f2:3c:28:a4:dd:43:81:90:77:a9:82:c0:03:
78:e6:01:0f:40:9e:e1:6e:c6:b6:34:aa:ee:c3:46:
ad:c6:0c:a9:20:66:66:85:5c:09:77:6a:71:5d:9d:
7f:99:84:2f:c3:1e:d0:95:c4:38:07:23:5c:f4:79:
4a:c6:55:6f:8f:9c:08:2e:22:a2:55:7e:0e:9c:6c:
72:22:24:97:6b:9b:cb:08:8a:8a:32:a5:a8:c8:c8:
d0:19:ae:42:56:16:ec:31:bc:e8:57:04:a7:8b:d8:
79:dc:71:18:d5:4e:d1:9d:a4:f6:9c:1c:c8:e7:02:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:05:45:03:D1:9D:F5:C7:A4:F3:CB:C8:CB:3E:24:2C:C2:77:86:ED
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:71:c8:6d:ff:82:15:f1:17:50:f4:7e:38:e2:d5:b9:f6:fe:
cc:b9:75:c7:e2:9f:49:d2:70:d0:7a:f9:74:1e:33:22:9c:e4:
b1:a8:a8:81:50:b8:a5:ed:d3:9d:60:e9:76:cf:86:89:9c:f8:
a3:9d:fd:2e:fd:53:1f:1a:42:7b:65:c2:44:3c:6f:4e:85:45:
0b:f9:91:55:c0:9d:4c:86:c2:90:da:56:1a:72:b3:1c:ff:ca:
6a:1e:b5:b0:2e:c5:b8:0e:e5:a8:70:3b:18:b7:e0:d2:cd:7a:
70:19:14:1b:78:e7:56:89:c1:81:d7:0c:78:ed:3c:e1:46:a1:
04:0d:a0:63:99:30:0d:cf:c8:cb:d0:81:c7:a2:90:db:a1:8b:
54:66:9c:f8:37:e6:22:a8:c2:1a:2f:46:85:02:e9:19:1d:09:
46:67:81:5f:1f:5e:81:f5:dd:18:48:91:24:38:d1:b2:06:6c:
34:a7:90:77:e6:49:63:ca:35:06:5c:f6:f9:a1:33:15:d1:a3:
98:67:f8:ea:cd:e7:a7:07:98:58:5c:2d:5f:e2:6b:8c:9c:7c:
20:e8:02:cc:e4:18:bf:c9:44:56:d5:f2:a8:4e:a1:26:6d:7e:
34:fc:e4:49:0f:68:68:b1:36:ce:10:73:32:5e:d3:b5:80:7b:
cc:b1:71:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:13:59 2025 by rpki-client