Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: DGvTze+bfQeUm++l+C+A58VSfuVq6mNGv9GUh5UBwrY=
Subject key identifier: E4:5A:70:59:DD:94:2F:68:F2:C4:70:30:B4:CC:91:C3:52:AB:5C:0C
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 019935017FCAA4F163352F893161FB5757BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 09EE
Signing time: Wed 10 Sep 2025 19:01:54 +0000
Manifest this update: Wed 10 Sep 2025 19:01:54 +0000
Manifest next update: Thu 11 Sep 2025 19:01:54 +0000
Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=)
2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=)
3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: 29GBZQmS1ikNiG1wTAKdAsR7UN7/fXSlkvcPtKKPUlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:7f:ca:a4:f1:63:35:2f:89:31:61:fb:57:57:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Sep 10 19:01:54 2025 GMT
Not After : Sep 11 19:01:54 2025 GMT
Subject: CN=e45a7059dd942f68f2c47030b4cc91c352ab5c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:18:eb:b5:4e:32:78:e6:b3:44:92:0a:76:
c0:aa:da:34:ae:cd:e6:01:85:48:82:17:b5:2a:4d:
c7:23:ed:90:f2:1e:d8:76:46:d3:98:f6:1a:ec:0b:
29:2b:c9:d6:8f:cd:0a:67:c5:2a:8b:a0:ae:62:8b:
23:67:d2:22:8e:60:b7:03:fb:65:b4:06:92:51:ea:
a0:f6:36:c2:f2:70:48:4a:e3:b2:5c:22:59:e3:39:
d5:76:63:4c:bd:16:05:1f:bc:80:8d:80:91:f3:6f:
de:b1:9e:36:c3:37:9d:01:2d:52:54:6c:89:91:55:
e6:9a:f1:02:f0:94:b6:1e:45:85:a5:ca:df:14:a4:
db:76:1a:5e:b3:23:8b:ad:d3:7c:5d:ef:01:bc:18:
c0:55:90:df:77:7c:2d:6c:0c:1a:ea:6b:fe:a3:4a:
4e:db:99:90:5d:66:a4:0f:4e:33:20:f1:6c:45:27:
73:5a:1a:50:a3:5c:9e:6f:7b:c2:7c:cd:a4:5b:3c:
cf:ad:7c:69:06:cc:9e:67:22:c3:b6:68:a0:95:bb:
60:20:c9:58:23:78:4f:66:f0:80:b3:07:97:06:24:
ca:0a:e0:e6:ff:e8:89:cd:a0:35:f4:69:11:2c:84:
01:34:32:06:8e:69:41:94:c4:57:cd:06:35:6a:2a:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:70:59:DD:94:2F:68:F2:C4:70:30:B4:CC:91:C3:52:AB:5C:0C
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:ac:d0:3b:d7:90:0c:87:c5:2b:24:bd:ab:37:a3:de:af:
de:8b:b5:b2:df:e9:37:9e:80:21:f3:63:98:ec:54:cf:6e:d9:
d9:69:ad:a1:54:f5:7b:e3:17:30:97:72:3c:13:23:15:fd:8b:
3b:9a:d4:bd:9b:79:3d:17:7b:54:12:90:b1:aa:a5:40:03:74:
91:5d:a2:a2:56:74:68:7b:0b:96:48:a8:7a:6f:65:97:16:7d:
b6:68:d3:c8:4a:72:82:fe:5e:b2:94:8a:7e:70:00:c5:8b:86:
fb:cd:bb:43:92:9d:d6:d8:cf:22:0d:cd:20:0a:92:13:43:af:
b8:90:4e:25:3a:a4:ee:ae:02:af:b5:31:47:b2:ac:55:8d:33:
2f:58:9e:cc:d7:20:c5:8b:32:8a:f1:fa:a7:57:22:f1:1f:e2:
ca:6e:b7:18:b6:31:c4:77:79:b7:a9:98:89:bc:70:cc:83:82:
35:37:25:09:5d:94:85:ef:e7:25:be:bb:de:21:1a:c1:02:6e:
7b:f7:8e:37:76:e9:0b:c9:d5:6b:f0:62:e9:f0:92:55:bc:f7:
26:63:c0:e7:da:35:c6:19:c4:8b:ad:df:09:41:be:75:a0:9f:
3e:57:3c:c0:2c:3d:16:3e:95:1a:f1:3c:d7:56:4e:18:e9:33:
7e:5f:d2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:36:30 2025 by rpki-client