Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: IDVQNthzikb4rT9Mp9OCvdUYNfjqW5J7Zh78c3654qE=
Subject key identifier: 6E:7A:E1:5B:97:17:52:31:81:23:37:B9:02:AA:3F:73:DE:3B:6F:B4
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 0199240D95413DD6206291CDA99118630CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 69
Signing time: Sun 07 Sep 2025 12:01:33 +0000
Manifest this update: Sun 07 Sep 2025 12:01:33 +0000
Manifest next update: Mon 08 Sep 2025 12:01:33 +0000
Files and hashes: 1: gQKk2z-Dzs3tKEuXLdAqCr54-7I.roa (hash: BNZlAShTvOe5X3GGCboQNUQf+60pqpGUzqwC+woTCuQ=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: GEiOJFkF+BJEQj593kHwT1nm2kHjf2cGnPb2rCfGRPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:95:41:3d:d6:20:62:91:cd:a9:91:18:63:0c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Sep 7 12:01:33 2025 GMT
Not After : Sep 8 12:01:33 2025 GMT
Subject: CN=6e7ae15b97175231812337b902aa3f73de3b6fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:15:86:90:a5:f5:b5:9d:77:c1:81:24:0c:
85:c3:56:a6:9d:8d:cc:11:47:e1:f9:ba:0d:f9:07:
b9:a7:6b:ca:23:17:25:25:eb:81:0e:0c:23:b9:6c:
25:5a:97:5b:07:78:7d:ec:9c:a4:5f:3f:75:bc:d2:
aa:d6:3f:a3:3a:ab:8d:e2:17:7b:41:58:72:14:c3:
4e:6f:71:3e:fa:a7:9f:72:0e:5c:c4:ec:49:9b:62:
4a:4c:57:fd:0f:13:1b:91:6b:bf:6d:8d:0e:c5:19:
25:ea:89:8a:e6:96:b8:a0:69:ae:84:cc:9a:fc:b4:
92:c3:80:f9:d2:66:88:2e:86:98:07:a7:bc:63:f6:
0c:17:71:9e:fa:b8:3c:5c:ad:56:37:c3:a6:a4:49:
84:79:d3:a7:95:3e:1b:72:4a:c5:98:ec:a6:9c:ce:
68:28:e8:71:de:56:93:1e:10:f4:d4:05:bc:b4:12:
a6:f5:79:1d:20:52:d6:1c:b3:85:87:c6:e3:69:e0:
ff:7d:75:43:44:12:94:a2:94:74:6a:be:21:bb:8a:
3e:1d:fc:10:52:e6:56:57:7d:76:81:d5:5d:d6:f0:
9c:d5:4f:04:e9:0f:8e:e4:a7:d7:58:61:3a:ba:8b:
73:ba:96:f4:89:62:86:35:61:8a:3b:2c:64:dc:f2:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7A:E1:5B:97:17:52:31:81:23:37:B9:02:AA:3F:73:DE:3B:6F:B4
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:dc:d2:32:77:46:57:85:13:61:bc:fe:0f:4a:b1:bb:06:52:
10:3c:d8:23:63:8e:31:73:03:8d:16:f6:e2:a5:b8:51:5e:69:
9e:78:f0:55:62:2e:e4:5c:be:fd:67:d7:dc:24:76:40:51:df:
38:21:20:e2:a5:88:ed:10:07:a5:4e:63:95:90:5a:ba:ba:d8:
a7:14:13:f1:14:19:09:fa:33:f5:0b:03:8f:2d:4f:aa:1b:dd:
3f:c3:9b:c0:d5:c6:c8:77:b7:a9:a2:cb:03:ee:17:8c:e0:6a:
d0:6a:1a:c8:db:37:ca:59:04:7a:1d:f6:6e:dc:76:7d:7a:e2:
aa:11:13:d3:25:f9:e5:c4:fc:f5:6c:2b:ca:a9:69:29:99:14:
ac:dc:a3:e8:27:fb:8f:75:e0:9f:34:09:5b:ba:36:bd:ee:95:
27:ce:c9:b3:34:4e:fc:aa:dc:9f:29:08:29:24:1e:85:35:68:
72:fe:1d:68:b5:95:4e:47:19:b2:e5:88:75:e6:e6:be:1e:08:
78:3e:76:24:c3:9e:4f:ff:46:4a:50:06:69:9a:74:88:9b:56:
e3:69:7a:90:59:e4:3c:de:3b:8f:9b:ff:57:c6:2d:80:c0:3f:
64:9d:93:94:a2:23:f4:7b:e2:e5:4d:5f:6d:f6:ac:58:27:50:
1e:d7:f2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:39 2025 by rpki-client