Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier: ThJY/574+5LSvdLNVKwf/wunUqyWvSOqJzFwLE67PyI=
Subject key identifier: 45:D1:C9:CB:98:F5:79:68:D3:77:1E:2C:0D:4E:13:8A:51:13:47:43
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial: 019923D5EFEFF6DF4C4E6949E136FBB4B2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number: 13D5
Signing time: Sun 07 Sep 2025 11:00:47 +0000
Manifest this update: Sun 07 Sep 2025 11:00:47 +0000
Manifest next update: Mon 08 Sep 2025 11:00:47 +0000
Files and hashes: 1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: hSRwFrudMYtqDQ7GdINQ7AhjsJrWohiMZIMzhRkm4fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ef:ef:f6:df:4c:4e:69:49:e1:36:fb:b4:b2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
Validity
Not Before: Sep 7 11:00:47 2025 GMT
Not After : Sep 8 11:00:47 2025 GMT
Subject: CN=45d1c9cb98f57968d3771e2c0d4e138a51134743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:02:e9:30:12:8d:e5:b1:7c:78:74:cb:66:
e4:0a:7b:3e:7c:d9:ed:c5:a3:66:17:88:b7:8d:cb:
ab:99:b9:48:c0:8a:2e:d4:d2:6a:2e:f9:a9:5b:74:
24:9c:68:41:da:b1:89:9c:2b:63:39:10:fa:9f:ff:
3f:36:94:df:57:1b:b4:49:4f:8d:c3:3f:3a:1d:3d:
4a:d8:30:01:67:e1:66:db:6e:47:3a:11:e9:1b:97:
74:54:4b:31:7c:83:d3:85:cb:fb:e3:b4:4c:95:9b:
0e:40:6a:64:13:41:80:3d:e8:a4:8b:68:2c:43:28:
14:58:a6:77:45:6c:d3:df:b0:7a:77:ac:e3:3a:40:
5b:c6:9a:da:48:1b:40:20:de:f6:0d:ed:fc:58:82:
e3:d0:bd:0b:c0:9f:ae:05:dc:3e:43:96:e6:d4:3d:
8a:e0:86:88:fa:2d:a1:c0:7d:17:ed:a0:a1:7b:21:
0c:79:53:45:e5:05:0d:2c:6d:0e:8c:f5:e1:35:1d:
f1:0a:4b:66:85:d8:95:e1:8d:01:4d:c0:a5:80:d8:
99:ba:9b:bc:f9:9f:09:bf:0c:d2:f2:22:3c:4e:70:
ba:a4:3a:29:47:eb:7b:72:d7:bf:96:f9:c1:ad:d9:
35:46:25:8d:62:6d:13:1f:94:e8:d6:4b:a0:36:c3:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D1:C9:CB:98:F5:79:68:D3:77:1E:2C:0D:4E:13:8A:51:13:47:43
X509v3 Authority Key Identifier:
keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6f:99:3b:74:a2:eb:cf:91:e5:f9:11:d3:85:34:3f:e3:d1:
02:45:52:2f:e8:b4:0e:80:7a:c1:43:de:60:6f:94:39:62:f5:
b2:b7:b2:e7:0d:fa:f8:36:ed:e6:a1:29:78:61:2b:8e:77:8f:
30:38:c0:d2:01:a5:81:b3:0e:59:3d:98:70:02:4d:b3:38:99:
30:bc:4a:d7:99:6d:c9:bd:6a:de:f7:5f:6a:d6:d9:1d:80:07:
f1:9f:3b:91:f2:11:5e:02:40:aa:59:14:c9:b3:ad:a3:e1:9c:
3a:ad:49:9e:23:d7:62:00:22:56:9e:94:ad:bc:c0:8a:f4:12:
0d:cb:5e:11:2d:74:2d:c6:d3:93:18:75:57:fe:57:e0:a9:c4:
3c:a7:dd:92:e4:24:78:cb:41:b1:0d:c5:e0:63:48:cf:20:af:
fd:1c:9b:52:52:67:d5:9b:69:ac:66:52:1e:17:d8:fd:37:f3:
96:fd:c7:39:79:ce:7a:9d:a6:6a:03:cf:79:31:b3:be:f7:9d:
18:78:15:29:80:8e:b8:77:25:86:1d:f2:70:7a:34:28:db:20:
46:a8:9e:9d:87:6e:e8:a0:19:48:5f:df:7a:8e:a0:aa:9e:6c:
72:dc:c7:01:ea:56:28:57:df:1b:9b:38:37:eb:01:87:64:26:
9d:17:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 15:00:31 2025 by rpki-client