Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: pOtxqKdS1Jv5KfZJCQJ8fAhRqjXVnORC8boe9fZI5PM=
Subject key identifier: 1E:80:02:95:50:11:92:AF:ED:63:DF:1B:7E:21:78:46:72:99:67:5A
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0199221E424948D695CC5969FCBCAAA2A1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0993
Signing time: Sun 07 Sep 2025 03:00:32 +0000
Manifest this update: Sun 07 Sep 2025 03:00:32 +0000
Manifest next update: Mon 08 Sep 2025 03:00:32 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: P64b6XNhhuoWCYA3R9vyWtenp2UFVVePg2vRTMulMww=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:42:49:48:d6:95:cc:59:69:fc:bc:aa:a2:a1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Sep 7 03:00:32 2025 GMT
Not After : Sep 8 03:00:32 2025 GMT
Subject: CN=1e800295501192afed63df1b7e2178467299675a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:c9:7f:99:0a:1a:d7:b5:a0:f9:d8:0d:c3:
e5:97:ec:cb:2f:2b:ba:4b:fa:e1:8d:fb:7f:b9:4d:
c0:db:13:68:58:d2:ce:d3:aa:20:19:cb:56:c0:97:
91:09:cb:9a:2d:ff:db:5f:d8:87:92:ce:ff:24:8c:
b4:aa:d8:0f:47:39:91:46:37:65:cf:dd:10:f1:e1:
5e:26:08:7d:8d:43:27:76:9f:f8:3b:d8:fa:81:fe:
a5:15:a2:68:d7:16:b2:af:66:f0:e8:cb:0e:12:63:
73:a2:64:96:26:07:d5:92:10:68:42:01:5d:75:c3:
60:65:3c:36:9a:a1:93:cf:a4:1f:4e:78:a6:57:65:
5d:7d:67:c9:32:76:6b:26:6e:56:4b:77:46:a3:d5:
99:db:5e:38:89:ec:ff:41:0f:ee:5f:d2:ca:16:52:
f8:c3:20:f0:f2:35:c5:88:d3:2b:99:50:a0:ff:0c:
85:90:1a:42:a4:9f:3e:c1:e1:e3:19:a0:8a:ba:a4:
76:4f:fd:ab:ce:6e:b2:c0:55:b3:82:7c:d9:c6:47:
f9:ae:a6:15:7a:60:77:57:f4:ba:71:3c:c3:db:b3:
b8:5c:fc:04:a3:b9:86:e8:c3:cc:b3:c0:5c:12:e5:
b0:2a:01:1c:8b:10:0a:91:b5:e1:79:d1:52:7b:26:
f3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:02:95:50:11:92:AF:ED:63:DF:1B:7E:21:78:46:72:99:67:5A
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f5:68:ca:9b:78:b6:2a:06:cd:19:31:8a:02:67:5c:0f:0e:
12:cf:21:9e:d6:9a:e2:13:74:b0:9a:6d:1f:44:94:36:e1:cb:
9c:ef:f0:d6:58:49:40:2f:99:37:1e:73:36:59:a6:86:b4:1c:
59:ef:88:25:ef:15:d9:bd:4f:bf:e8:ba:17:c7:00:89:ea:74:
2d:bd:5b:b5:e3:7f:38:04:8e:14:3c:09:3b:4b:87:f2:b3:6e:
b8:4d:98:2d:24:69:73:44:de:93:36:43:82:ee:32:22:f2:1b:
69:88:13:69:cd:ae:11:d9:7e:93:76:7a:67:03:98:19:d4:fd:
c1:ed:2e:8a:f8:11:10:45:37:37:b7:39:d8:86:f3:a3:25:6f:
82:45:1a:72:33:e4:17:8d:49:2e:53:27:e3:0c:f6:35:5e:0c:
50:1f:2d:c5:07:0d:69:d0:a8:7f:c0:78:37:49:43:03:a4:ae:
33:c6:be:0b:d0:53:64:b8:22:67:0c:b1:df:41:fc:19:1e:31:
6e:69:34:27:a4:7d:33:a7:2f:ab:05:c7:82:dd:a9:ec:e9:41:
29:5a:8f:0f:06:72:49:0a:8e:27:be:20:c6:8d:49:44:0e:fd:
26:71:b7:54:33:bd:c4:cf:14:66:7f:c7:54:4d:e2:a3:49:df:
cb:59:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:43 2025 by rpki-client