Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: 7FlSD/Ndl6we+Ha+hGyjNbIzmqceE4M7vJv1jU1zgHo=
Subject key identifier: 75:B9:E5:90:E0:C2:DB:F0:60:4D:75:47:48:E6:0D:C1:D1:B8:00:C9
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 0199361307A0C0BF85C069981A704E23C563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 167E
Signing time: Thu 11 Sep 2025 00:00:40 +0000
Manifest this update: Thu 11 Sep 2025 00:00:40 +0000
Manifest next update: Fri 12 Sep 2025 00:00:40 +0000
Files and hashes: 1: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: KM4z2WJrsDxvYmeKF/Dap3Osd009Ap744xXjqHpdDtc=)
2: vK5h-o0ZiTjYgr7TtTUx7l9N3_U.roa (hash: GzoVl428O56Z6DSR6RbFH+KhA2k4PkQR1ShOytMGxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:13:07:a0:c0:bf:85:c0:69:98:1a:70:4e:23:c5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Sep 11 00:00:40 2025 GMT
Not After : Sep 12 00:00:40 2025 GMT
Subject: CN=75b9e590e0c2dbf0604d754748e60dc1d1b800c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fb:3b:65:04:b1:d7:93:8c:33:53:4d:6a:40:
f6:22:b1:61:4f:bf:f7:06:cc:61:5d:bd:d9:e0:38:
a1:f8:2e:63:63:50:92:79:74:ad:6f:63:44:6e:76:
93:68:46:c0:5b:08:7d:a0:8d:db:10:1e:87:e3:ae:
fd:fd:a5:6a:37:12:a4:0d:55:ad:17:0d:98:03:e9:
c5:37:6d:12:cb:81:a2:a7:d2:bf:f3:f5:ef:59:1a:
a5:b0:bc:dd:20:65:c5:7b:65:99:0e:1d:ab:3b:95:
16:31:91:e3:ca:86:89:c6:ce:c1:c6:4b:4d:2f:62:
b3:c5:a0:e8:2b:98:42:e0:56:92:1f:74:97:18:9e:
28:99:01:50:9c:8b:15:bc:5b:82:66:4a:19:be:b4:
86:20:db:57:36:ad:09:ed:c9:25:eb:4d:64:67:6f:
cd:39:36:bb:f8:59:b3:77:3e:81:52:72:ee:ff:b0:
71:0e:c2:7c:a3:c2:9e:81:1b:2f:e3:af:26:c0:b6:
83:35:ee:21:83:19:2b:bd:8e:33:6e:aa:1d:68:30:
a7:36:ee:73:30:43:3b:27:ec:36:60:4b:33:d1:e1:
0f:d9:94:e0:54:c0:ae:8e:4a:66:bb:e2:c0:cc:29:
7a:b8:9d:3c:95:b3:2c:7a:c9:c3:ae:9a:b4:fa:23:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:E5:90:E0:C2:DB:F0:60:4D:75:47:48:E6:0D:C1:D1:B8:00:C9
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:43:3a:69:09:cb:38:c3:df:fc:34:6f:ae:e5:9c:5e:1c:65:
7c:ad:ea:7a:4a:e5:38:c8:af:3d:73:c5:27:53:71:4e:99:21:
3c:80:e9:d2:bc:38:f6:1d:9d:81:29:88:2c:c8:72:19:fe:da:
65:72:38:89:d0:22:68:37:97:ce:22:08:41:25:33:9c:e5:77:
cd:dc:43:2d:3c:46:3c:1b:c0:54:33:48:7d:8e:4f:8a:24:7b:
32:57:52:f2:87:f9:02:03:6f:60:d0:28:5b:e8:12:c6:1b:d3:
80:ad:06:b2:e4:9b:44:b1:94:41:dd:cb:f3:cf:aa:6c:e6:45:
ae:70:79:28:95:ed:9e:c3:41:f8:1a:bb:75:18:b9:0c:b6:db:
ed:01:3d:98:f6:09:33:b5:9b:33:d4:d1:8c:bf:fa:b1:c3:a0:
a0:37:1c:04:da:43:5d:c5:e6:41:df:97:4e:ae:bd:13:80:ac:
60:34:32:68:81:68:7d:49:6a:c5:a5:5c:a3:1e:f0:3d:63:a0:
23:3f:7a:a0:ef:53:44:38:ce:a2:5a:e6:d2:44:ed:c3:dc:b4:
67:b7:ae:d9:42:8b:bc:06:f2:48:a0:ad:d5:0e:48:48:2d:5e:
f0:3e:1b:f8:5e:49:c5:1d:56:71:bd:44:06:87:4e:dc:f9:64:
c4:e7:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:12:33 2025 by rpki-client