Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File: X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier: bop9X+X4WYZ+GgAmGU11mU1kr2jq8t9wGVo7a+JPYyU=
Subject key identifier: 6B:06:90:F0:D9:9E:4C:F2:4D:AF:71:11:22:90:6C:D4:0D:A2:83:C9
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019922FB0BF00ED932010EA0CA3F04268CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number: 0AC4
Signing time: Sun 07 Sep 2025 07:01:41 +0000
Manifest this update: Sun 07 Sep 2025 07:01:41 +0000
Manifest next update: Mon 08 Sep 2025 07:01:41 +0000
Files and hashes: 1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: w0w/CdQRlQHwtirzmhgz2AdgQNLF8ymqmuhtVpQwpMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fb:0b:f0:0e:d9:32:01:0e:a0:ca:3f:04:26:8c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Sep 7 07:01:41 2025 GMT
Not After : Sep 8 07:01:41 2025 GMT
Subject: CN=6b0690f0d99e4cf24daf711122906cd40da283c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:3b:87:0f:68:71:af:65:89:cb:00:48:6a:
bd:d3:68:1c:92:48:b0:fa:af:1e:b5:21:bf:16:35:
57:f1:ac:6d:c1:3a:19:7e:e1:a3:98:1a:7e:3a:3e:
82:7b:7f:08:3c:c6:98:8a:ed:b9:cc:b9:6e:41:79:
94:74:1c:94:95:15:f0:03:29:8f:6d:dc:ce:79:c3:
d4:45:2b:92:30:e5:df:00:0d:a7:5e:cb:0e:a8:6b:
67:b2:0c:66:06:9d:df:87:8f:36:45:f2:09:82:7a:
6d:75:9f:05:4f:15:fc:bd:bd:ce:d4:20:c5:90:35:
b6:60:75:c0:f9:19:34:07:d1:2d:01:8b:15:e8:9b:
0a:8b:b3:2f:33:eb:c5:41:25:75:2a:23:69:29:dd:
8e:af:41:58:fe:3c:2f:bc:53:c2:2d:ca:f6:a7:54:
75:c4:79:fe:d0:07:c7:ed:9a:b7:38:23:37:eb:f7:
7d:5b:83:15:12:df:93:db:6b:e3:70:f9:66:8f:07:
10:b5:c9:b6:6a:ea:1b:fe:b8:52:57:a7:e4:83:f2:
31:de:16:3e:49:88:5d:22:fe:7c:e7:e8:e7:dc:42:
68:c5:61:28:b4:7d:44:ce:9d:15:34:cb:b1:db:8b:
04:99:b2:be:dc:dd:80:b3:4e:82:e0:6b:9b:d6:06:
5b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:90:F0:D9:9E:4C:F2:4D:AF:71:11:22:90:6C:D4:0D:A2:83:C9
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7e:61:cd:4b:97:ab:6a:78:0e:dd:de:50:8a:7b:68:c8:7c:
53:5e:e1:d4:26:25:58:78:7a:42:92:0b:39:da:ea:3c:10:42:
83:f0:83:cb:1b:03:ee:52:89:4c:47:f6:24:53:01:ad:40:65:
5a:6a:02:76:7d:b3:2c:70:c4:6c:3f:1c:8a:7b:a7:5d:55:c9:
0f:da:47:af:38:69:5b:aa:c0:81:a4:eb:2a:9b:79:3d:ac:1f:
17:25:5b:4a:15:5a:f1:13:b4:56:a8:03:31:7e:f9:ed:88:21:
92:ad:96:25:4f:0f:31:5e:ac:d3:93:33:12:32:7b:c0:da:ee:
69:44:1e:d4:9e:0c:a0:95:43:60:fb:f7:06:1f:87:d1:39:06:
6f:bf:b6:ff:3d:76:a7:e0:e5:e4:ca:94:67:db:c5:5a:c6:8e:
3e:23:54:f8:26:14:de:11:41:a8:fd:3a:63:ae:bf:d3:ce:3e:
6e:a6:97:f5:fa:16:8c:90:f6:53:ac:06:38:2e:56:03:d5:e5:
7e:c9:10:ff:59:cd:f7:43:23:fa:aa:1c:b2:5b:4d:8c:c6:78:
54:ce:47:04:a1:d2:99:61:b3:c1:69:ef:69:fd:d9:9d:2c:28:
29:27:72:96:17:c1:21:c0:07:6d:60:5b:65:4c:c9:54:0b:9d:
23:a1:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:32 2025 by rpki-client