Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: ged91MaxJzpgNx40uz989GETJTAt5UJDSZyWn3NFVXc=
Subject key identifier: C1:FE:BE:30:75:53:91:5F:B5:F3:A7:0C:2E:F1:71:A2:CE:68:19:77
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 0199228D0ABC60FF9B7B372C3538DD76E485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 1053
Signing time: Sun 07 Sep 2025 05:01:32 +0000
Manifest this update: Sun 07 Sep 2025 05:01:32 +0000
Manifest next update: Mon 08 Sep 2025 05:01:32 +0000
Files and hashes: 1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: jC2QqazY2eMYurPlqWoCPTP9YnbyjbQ3W9Q3AdP3lEs=)
2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0a:bc:60:ff:9b:7b:37:2c:35:38:dd:76:e4:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Sep 7 05:01:32 2025 GMT
Not After : Sep 8 05:01:32 2025 GMT
Subject: CN=c1febe307553915fb5f3a70c2ef171a2ce681977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:54:d9:69:fb:6d:e8:9b:6d:c7:2a:0e:10:
58:ef:72:a3:e2:b0:33:ef:2e:16:9c:1d:fa:ea:c1:
5b:d6:dc:58:a0:ab:34:a6:c2:54:a1:4f:ff:b3:3f:
d3:ff:06:de:30:b3:7c:f5:72:bb:71:fa:c6:be:b5:
a5:1e:8a:b2:32:7e:8f:49:61:3e:49:fb:69:b8:45:
ec:30:f2:85:14:db:75:c4:d3:06:e9:89:6a:e4:69:
15:72:e4:03:65:2c:62:3b:3a:9a:b3:30:23:19:77:
b4:ab:3c:44:76:5f:f7:fc:83:1d:a1:75:82:36:1a:
d7:09:71:82:47:19:d5:8b:99:a2:65:35:4c:5d:47:
43:1d:f3:61:df:b4:50:12:c2:25:2d:22:d7:fe:9b:
e4:0f:ab:f6:34:12:9a:5e:e5:db:7c:63:b7:11:70:
3d:36:fc:66:25:8e:af:37:0c:cd:2a:c7:23:11:ae:
53:79:67:8d:17:f3:b9:4c:35:5f:ce:ee:2f:77:ab:
8e:18:bd:00:82:20:72:c6:d4:e6:95:8b:71:1b:14:
fd:a9:95:90:20:05:17:32:f5:52:3c:cc:7e:c5:4e:
0e:6f:0e:66:3c:b0:34:e9:38:01:85:52:59:6c:7d:
d8:38:8f:aa:08:ef:c7:b0:c8:20:50:5c:72:6e:98:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:BE:30:75:53:91:5F:B5:F3:A7:0C:2E:F1:71:A2:CE:68:19:77
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bc:4f:a3:4b:83:80:af:9a:f6:c1:af:92:ea:c6:5d:7a:1d:
9e:f8:cc:4d:bb:73:ad:9f:de:38:a0:89:1f:59:7e:74:c6:23:
e2:b1:fe:1b:82:1c:78:a1:53:a6:b4:8d:91:29:3d:89:58:08:
9a:f9:a3:c2:9c:d1:ab:42:21:34:04:b7:ab:d5:13:3a:8c:49:
68:84:53:bb:7f:83:34:2b:7b:1e:aa:cb:43:51:32:ed:d3:64:
e8:6c:74:de:a4:a8:f2:15:73:c3:6d:39:e2:fd:f7:b9:e0:13:
bc:4f:6a:81:2d:79:56:97:0c:b2:b5:29:8a:cd:36:cc:87:40:
a6:02:fa:71:90:fa:fb:73:41:ad:92:aa:ee:97:93:92:2d:e1:
09:3b:97:87:92:e0:d5:88:cb:04:62:e6:f4:c0:86:d6:d6:51:
48:71:95:4c:dc:1b:6d:53:eb:f6:23:9f:e2:f6:0a:6e:20:18:
0a:91:a6:c0:12:61:59:c1:c9:e2:49:73:01:cc:59:01:d7:98:
06:32:bb:9f:b5:7b:08:a4:ee:35:28:9d:75:07:8a:51:9e:5c:
72:7b:d1:6a:33:69:41:0d:ad:5a:ba:06:b0:90:96:f4:29:3c:
f1:df:c1:73:8a:2c:a0:f3:e5:36:75:05:93:94:4d:53:76:a4:
98:52:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:27 2025 by rpki-client