Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: 0AcgRnNgquym6NJvekdnFdWQKzgDWO0Tw/yWr6VmiKg=
Subject key identifier: FA:F7:6D:4A:C6:93:0C:4D:16:89:41:44:BB:E5:A5:7C:10:BC:98:61
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019933B7296A5F9F2420946BA8E412933E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 138B
Signing time: Wed 10 Sep 2025 13:01:05 +0000
Manifest this update: Wed 10 Sep 2025 13:01:05 +0000
Manifest next update: Thu 11 Sep 2025 13:01:05 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: dgRzzBDUsQkZC4XTKZT44Snv9D/g/8JnorIyOa4Kh3A=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:29:6a:5f:9f:24:20:94:6b:a8:e4:12:93:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Sep 10 13:01:05 2025 GMT
Not After : Sep 11 13:01:05 2025 GMT
Subject: CN=faf76d4ac6930c4d16894144bbe5a57c10bc9861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:99:e8:fd:60:90:9b:0d:e4:f0:31:1e:06:f4:
09:2d:e3:54:18:e8:3d:3d:a5:26:05:41:a4:02:96:
fa:b0:19:af:3c:f3:73:71:66:f3:6f:80:e3:5a:62:
5d:ec:c4:d4:13:32:e8:8f:b2:31:89:26:7a:fa:b3:
9e:42:6c:07:1e:0e:1b:5e:fa:10:00:5e:a9:dd:c6:
0c:90:33:d1:4c:e5:24:1b:96:e2:9b:34:5b:ec:07:
0e:aa:64:69:4a:aa:fa:8d:26:03:b6:dc:ad:8e:a2:
e6:bc:ba:36:d3:ca:23:48:1f:6b:0f:cc:08:55:41:
45:c1:10:26:81:0f:23:54:c8:19:94:13:bf:0c:d7:
e5:80:64:41:5f:2b:e2:d6:bf:f1:f5:84:25:7a:50:
1a:78:45:ae:b8:08:42:4b:09:d3:11:be:7e:73:18:
52:cb:1f:18:36:64:f1:9b:72:5c:86:1f:7e:70:ea:
c7:51:38:74:5a:fe:31:49:9f:ba:bb:46:cd:7c:dd:
fd:fd:4a:9d:29:c0:c2:6f:3a:bf:79:29:54:13:42:
84:4a:fe:ba:89:e5:69:3e:d0:3d:0c:9a:76:65:67:
70:be:f9:60:63:73:93:2e:72:99:c2:9b:92:a6:0f:
1d:51:f7:9f:eb:16:16:7b:5a:8b:0e:76:6f:8c:84:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F7:6D:4A:C6:93:0C:4D:16:89:41:44:BB:E5:A5:7C:10:BC:98:61
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2f:59:1c:2a:13:f0:74:99:f1:99:da:4d:7e:bb:77:6d:4e:
ef:86:e4:f3:36:2f:f0:49:5f:0a:0e:7f:54:18:dc:4f:18:8f:
d5:15:15:bd:eb:18:5b:fc:e3:de:88:9b:69:7f:25:e7:79:b2:
c7:54:0f:43:41:a6:88:a2:98:15:c6:03:a8:5e:6f:29:17:09:
41:5b:cf:a0:8e:f9:c8:5e:32:ad:6f:91:d4:43:13:5d:89:b1:
2f:8a:c6:03:ea:47:e3:de:00:34:9b:f6:c1:8f:b3:b9:56:e7:
fb:2e:df:64:38:32:3d:c4:02:84:d7:e4:84:3c:3e:a3:61:3d:
65:bc:e9:ef:23:54:01:d3:b3:98:f1:7d:36:25:d5:24:28:b6:
68:ea:a9:e0:c2:51:5c:ef:30:e2:42:c4:25:ea:ea:98:1a:53:
94:5b:ce:bd:f0:a7:ff:4d:b0:ba:af:7e:12:0c:85:7b:37:8d:
75:9f:56:3e:2f:45:c0:5a:27:62:82:69:ee:a6:ef:bd:6c:fc:
5d:e6:f8:e4:87:57:bc:e9:e0:b9:7a:88:ba:47:44:a1:b7:4c:
23:ee:d3:35:82:58:20:f0:62:87:f8:be:1e:78:14:a1:6b:1c:
ee:12:83:45:93:c0:03:4a:a7:68:43:3d:43:c7:28:10:63:16:
d9:1c:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:54:54 2025 by rpki-client