Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier: FSlKVKZ0I7TGAYHOyx2MRwZTKN0huW2GQYXX2RLMmUg=
Subject key identifier: 89:9E:43:D0:CC:3D:30:B6:47:C9:1D:BD:1B:A3:6A:B3:39:FF:16:87
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer: /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial: 019923315ECDB4F077FCDB8E2F100B91C8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number: 0D59
Signing time: Sun 07 Sep 2025 08:01:01 +0000
Manifest this update: Sun 07 Sep 2025 08:01:01 +0000
Manifest next update: Mon 08 Sep 2025 08:01:01 +0000
Files and hashes: 1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: M50GpIfT+8+zcyVPRXliKG9SQttCzkn9Kw+IGS59Cbo=)
2: ABCdWHfeRuB4x9Cfjqm_Nsu7Efc.roa (hash: bp8ugvHYl4CGZn0o8RUyCE5vXn4l+aGFTzhE2reh5sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:5e:cd:b4:f0:77:fc:db:8e:2f:10:0b:91:c8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d977120937500eb46696428962e510e02c348e6c
Validity
Not Before: Sep 7 08:01:01 2025 GMT
Not After : Sep 8 08:01:01 2025 GMT
Subject: CN=899e43d0cc3d30b647c91dbd1ba36ab339ff1687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:e1:77:8f:91:54:52:1a:64:c0:a2:c7:85:
c3:53:c8:e7:7c:c9:b0:ab:3b:70:12:06:f9:a6:58:
34:19:dd:00:75:93:ed:ad:e1:59:4e:d7:72:d9:96:
7d:57:ed:86:94:9b:12:44:61:d5:5c:10:34:11:e5:
b2:9c:3c:0e:78:08:1c:aa:80:66:18:e0:cb:8e:9f:
5b:98:1a:87:de:22:1a:4e:88:2a:e1:93:95:dd:cf:
39:aa:04:2a:32:36:1c:da:18:36:4c:c1:0e:98:b4:
57:4b:30:d9:4d:8d:a4:8a:2b:ca:e1:4e:ba:dc:ce:
1a:3b:af:d9:e8:00:a6:51:36:79:99:1f:1c:da:f8:
9f:5e:79:ef:59:59:35:1b:b5:e6:bf:ea:9a:3a:3c:
26:26:64:9c:62:f6:50:e8:f8:fc:c6:ab:34:b3:2f:
e2:a7:2d:c0:87:76:bf:a7:00:2b:18:1a:0a:80:ae:
02:ce:9d:ff:94:07:07:43:7d:f7:a2:f8:29:b3:68:
5c:97:15:56:ae:d7:a2:56:03:61:59:36:c9:60:e4:
ee:9c:ce:b5:0a:2d:ce:e1:68:44:6d:fb:5f:fb:38:
1b:3f:ca:d4:6e:c5:8c:ee:a9:04:2a:0e:9f:6c:d2:
9c:38:4a:90:df:ab:b5:7a:bd:fc:c9:0e:3b:d4:87:
f1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9E:43:D0:CC:3D:30:B6:47:C9:1D:BD:1B:A3:6A:B3:39:FF:16:87
X509v3 Authority Key Identifier:
keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:df:e3:58:96:a1:f8:f2:25:62:4e:cf:fb:67:d5:91:5a:6a:
f1:8a:cf:44:e7:af:3d:2d:2e:0a:a8:21:33:16:d8:bd:24:4e:
b9:9b:16:49:a9:3d:cb:db:80:6f:75:67:8c:32:ee:fc:2c:d9:
52:b8:ac:72:d1:23:69:52:98:a3:12:a3:36:58:db:c6:d2:b9:
42:05:7c:9c:31:c2:cc:bb:7a:4c:eb:a0:9f:56:31:36:29:d5:
db:f2:f3:83:05:8a:78:5f:6f:b2:b0:c1:d6:7e:c8:91:65:45:
3b:c9:c4:85:38:6a:be:69:2f:6b:26:b5:cc:a4:b2:85:6d:34:
0d:98:f8:ce:43:f7:e5:83:5d:e0:7b:48:fa:17:8d:3a:92:6b:
32:96:27:5c:90:69:f7:4e:ec:a3:f7:90:1a:fa:93:ff:ad:dd:
85:5e:61:ef:69:2f:6f:4d:46:f3:ca:9e:95:8c:7f:fe:4a:03:
56:bd:61:5a:dc:3a:8b:7b:78:82:0c:f6:00:c6:9d:38:39:34:
9b:bb:71:4e:88:69:ea:da:3d:24:37:88:73:72:26:37:08:1f:
4b:64:cb:4d:a4:bb:de:ab:b3:63:6b:5b:68:0c:68:3f:b0:68:
3d:6f:ab:ef:e9:c9:d8:93:02:06:9b:02:7a:96:a6:27:a4:f2:
5d:08:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:28 2025 by rpki-client