Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier: 5WF9SzaGjiAhOOXhKobsyKZV57zAi+3LJOGy7vVRY7I=
Subject key identifier: 53:3B:68:37:61:00:1B:C2:EC:DC:E1:0C:72:6B:9F:E1:E4:85:AD:C0
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 019923A08BE97D5AA0C076CAE37F599AD6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number: 0C2D
Signing time: Sun 07 Sep 2025 10:02:28 +0000
Manifest this update: Sun 07 Sep 2025 10:02:28 +0000
Manifest next update: Mon 08 Sep 2025 10:02:28 +0000
Files and hashes: 1: XFE7vlLQBmzJZc1l5vHs4bwPMqc.roa (hash: qLSFKwb/lB7qwkyIoSUv9XJpnCetif9CbXA/zmT2Trc=)
2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: aP9xrTm36hja1BN9KNhonseJOXuqrH/J+Gpf4c4ctto=)
3: eg48StlWCUn7X3RwRMM9IyTvRbk.roa (hash: GtElILT2eBg2EORjHkOJ3T4qKsc3NbDsadrpgQ1LlKY=)
4: wg5YIR4Y9RixLNkQqF7w7wmBrEw.roa (hash: 1MuzEvANE56SuPGyGU0hUCAeP9aNoicfYJymGmBNFKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:8b:e9:7d:5a:a0:c0:76:ca:e3:7f:59:9a:d6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Sep 7 10:02:28 2025 GMT
Not After : Sep 8 10:02:28 2025 GMT
Subject: CN=533b683761001bc2ecdce10c726b9fe1e485adc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:8c:2a:dc:a9:01:00:dd:23:07:23:36:be:
a9:c8:83:ba:19:cd:e6:0b:fc:a8:10:f9:7b:df:b4:
4b:34:0d:09:6d:61:f8:4b:9c:ec:1c:3c:9c:05:ac:
00:46:e0:0e:10:21:1c:bd:cd:08:61:9a:51:91:89:
ce:25:fb:2a:75:02:8e:b1:cd:11:bb:ed:d5:c6:53:
c6:32:48:5a:a9:87:a8:8e:53:b0:2b:1d:cb:f5:3c:
69:dc:b3:3c:48:b8:0a:50:92:0b:2c:75:1d:2b:af:
96:cc:74:c8:fc:e2:e5:0d:ca:36:2d:fd:d0:8e:31:
e9:5d:94:f1:55:ba:d6:b2:88:d0:44:e1:59:1e:ca:
c5:2f:ab:73:06:fb:ef:43:b4:c7:c6:95:5c:ba:c8:
da:a5:c9:80:df:04:b2:a9:f8:98:90:6b:19:53:b0:
72:97:52:af:5d:22:83:8b:1b:a8:48:46:35:5b:ab:
01:8a:e6:96:ca:0b:5a:d0:bc:3a:a4:03:5e:f7:ce:
09:e6:13:e8:d2:85:b3:19:c2:c6:24:37:89:43:97:
2c:e5:0d:4b:7d:b9:ad:d5:74:ef:69:c3:d5:24:8c:
4e:d3:04:06:c3:e6:14:9c:6b:c3:3d:d5:68:98:3f:
6f:8d:50:46:3b:b4:d4:f4:ac:ce:db:c7:45:dc:8d:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3B:68:37:61:00:1B:C2:EC:DC:E1:0C:72:6B:9F:E1:E4:85:AD:C0
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:31:0e:52:ba:08:69:1e:cf:2a:cd:81:16:3c:92:23:50:
43:0e:cb:71:bc:64:f5:42:1f:6b:47:0f:d8:f2:36:05:e0:52:
18:88:e9:bf:cd:bb:8a:62:83:0b:eb:c5:a0:fa:e1:70:00:bb:
79:5f:fe:78:03:a9:14:71:2a:5d:e4:a5:e0:85:4c:c8:d3:dc:
2c:ed:7e:d0:3f:2f:8f:29:e1:0c:4f:0e:98:86:03:2e:53:70:
06:7f:49:17:fd:85:03:07:38:60:b3:26:5a:6d:27:50:23:0a:
e8:a0:ba:5e:45:e0:f6:72:f2:a7:8b:4b:a4:2f:26:6d:6e:79:
a2:52:4b:97:22:34:ad:52:2a:6d:a4:b3:86:65:c3:19:ab:bc:
fd:45:2c:58:9f:75:04:c6:4b:f7:5b:3b:77:9a:c2:74:0c:c7:
01:0b:25:69:4a:78:85:59:01:ab:45:09:96:c0:33:0c:fd:50:
70:de:08:7c:b7:91:bd:06:13:75:05:85:80:6d:fe:39:90:dc:
a4:0f:56:74:78:78:a2:94:a5:44:8c:fc:2a:ab:fc:ff:82:5e:
96:63:8e:44:16:21:fe:e6:74:39:bf:69:6e:d3:8c:db:9b:11:
54:89:4d:28:0f:5d:b9:7e:6c:76:e6:d5:ea:60:5f:6d:de:f0:
78:0b:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:18 2025 by rpki-client