Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: f87Kck7Q+TxLVJGuEVF4UI3/Zjtr5SP3LW0ClPfB/Kw=
Subject key identifier: AF:A7:85:58:54:C3:EA:2A:C7:61:C3:AD:BA:5B:8C:3F:A6:58:18:02
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019936EF53B83ED399E658962940C567CF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0D5D
Signing time: Thu 11 Sep 2025 04:01:18 +0000
Manifest this update: Thu 11 Sep 2025 04:01:18 +0000
Manifest next update: Fri 12 Sep 2025 04:01:18 +0000
Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: D/Vk0MjfnEN2jK9DvExaimxOoYDOJpHG/VtT9YIeYS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:53:b8:3e:d3:99:e6:58:96:29:40:c5:67:cf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Sep 11 04:01:18 2025 GMT
Not After : Sep 12 04:01:18 2025 GMT
Subject: CN=afa7855854c3ea2ac761c3adba5b8c3fa6581802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:54:12:59:fc:55:a3:1d:3b:93:68:55:9b:60:
56:63:bb:73:2c:e7:42:22:30:34:36:f6:0c:80:3b:
a6:b6:59:f0:f6:65:4d:8e:8e:52:de:de:27:dc:1a:
2b:13:74:05:17:03:32:c9:ba:5d:c5:61:e7:46:64:
79:77:ea:72:a3:7e:7b:e1:c8:68:46:eb:40:7a:dc:
37:39:b2:81:ef:bb:58:49:e9:2f:fa:b2:b9:cf:b5:
a0:04:43:40:92:0b:b3:eb:06:ce:d1:6c:81:89:e8:
69:29:e9:73:fc:17:52:f2:49:cd:c6:c2:be:ae:11:
30:91:5d:05:d5:4a:e0:1f:cf:66:9c:b9:d2:01:9c:
2c:d5:74:09:a8:61:a6:d9:5c:cd:19:5e:a2:79:af:
66:87:c8:76:54:99:bb:be:19:ed:91:ba:5f:b5:c6:
e6:fc:ba:6f:6a:b8:7e:07:7d:da:09:03:9c:00:e9:
28:04:06:d7:73:c0:56:86:31:a7:32:16:27:10:ad:
07:93:ba:e2:92:fa:a3:f5:db:e3:8c:54:12:7c:15:
db:3d:6e:2b:8e:99:a1:de:21:47:3d:38:b8:96:14:
86:44:8f:7b:d1:4e:ab:9c:17:51:76:f3:94:91:34:
87:b8:44:87:76:ab:00:f6:45:ac:69:c0:dc:5d:52:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:85:58:54:C3:EA:2A:C7:61:C3:AD:BA:5B:8C:3F:A6:58:18:02
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4a:53:07:a4:c0:cc:a0:2e:1e:d8:53:95:4a:fb:c6:a3:bc:
2c:4b:97:66:8c:fb:b7:59:46:ba:75:71:b8:ce:f0:ff:d0:e7:
77:dc:81:00:1b:f0:21:c9:33:56:8f:cc:09:b2:e7:14:d9:83:
89:6f:32:a9:c7:64:1f:5b:c3:4a:01:7e:2b:78:84:2e:fc:1f:
da:08:bc:c4:59:10:75:b8:75:6b:09:60:ec:51:a2:e0:40:ca:
8e:89:3d:52:cc:fd:ff:6c:78:b8:cf:7b:78:13:cd:88:57:e9:
38:d6:99:43:5e:6e:49:5f:bd:45:de:1f:36:6a:a9:b7:ad:c1:
95:4a:aa:76:be:ac:77:25:9e:49:c9:09:77:11:ad:7b:f4:92:
73:5f:e9:79:42:6a:88:b4:28:47:1d:42:c6:87:0d:22:55:26:
57:25:3b:10:09:75:1e:c2:9d:19:52:b4:4f:f0:fa:6b:0d:09:
60:47:3d:56:13:35:cc:f5:e0:7c:8b:2e:24:f5:64:9a:21:95:
7f:ef:e8:aa:c1:ba:e8:46:cb:3f:1b:7f:52:5b:67:1b:60:21:
ca:c2:7d:60:d5:23:26:74:a5:6c:70:ef:43:c9:9c:70:90:78:
ae:6a:76:86:68:e1:39:3f:9f:13:f2:22:a6:d5:05:bf:4b:e5:
95:51:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:39:25 2025 by rpki-client