Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
File: XchzCYds7EBPAHv22gQ0wL3GLYs.mft (raw, json)
Hash identifier: vhVEgQitjloWvOAXtFBnJnxLSwzfYjGKb2RF9wxHkE4=
Subject key identifier: D3:FC:86:AD:A3:BB:83:05:CB:83:AB:E2:B0:AA:1A:54:FE:1F:88:5B
Authority key identifier: 5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
Certificate issuer: /CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Certificate serial: 019933142F7DF77B2026931F08FC63682287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
Manifest number: 1677
Signing time: Wed 10 Sep 2025 10:03:04 +0000
Manifest this update: Wed 10 Sep 2025 10:03:04 +0000
Manifest next update: Thu 11 Sep 2025 10:03:04 +0000
Files and hashes: 1: XchzCYds7EBPAHv22gQ0wL3GLYs.crl (hash: Ln1bOMCerCP7ZNeNxJnc/znIFIb7nKVI4FbCZdwxSjQ=)
2: jcQt-MOzJfjybIamiUioFB-oBn4.roa (hash: vxzopxc1UXJfcspNz3GsRCac77+K0gwBOQSeqjgarpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:14:2f:7d:f7:7b:20:26:93:1f:08:fc:63:68:22:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc87309876cec404f007bf6da0434c0bdc62d8b
Validity
Not Before: Sep 10 10:03:04 2025 GMT
Not After : Sep 11 10:03:04 2025 GMT
Subject: CN=d3fc86ada3bb8305cb83abe2b0aa1a54fe1f885b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:c6:6e:ab:08:c1:37:47:e7:5e:8e:0f:3a:
42:08:d2:5d:0e:94:54:b4:fa:6d:9a:24:a1:5c:93:
cb:67:34:65:71:f3:d0:4e:37:52:2b:f9:1a:0d:dc:
20:2a:60:79:85:4c:32:42:1b:f2:2e:94:63:db:a5:
74:f1:fb:be:e6:1b:83:30:30:cb:5a:72:e3:fb:2a:
9c:24:72:dc:8e:38:24:2f:98:5d:e8:b0:62:fb:5d:
5f:07:b9:12:b2:01:7a:cc:39:82:c6:5e:14:b5:26:
62:24:9e:a5:cd:2f:6d:bf:a9:2a:ce:65:0a:58:48:
1b:58:26:3c:01:7d:7e:68:ab:12:2c:10:d6:ba:ec:
98:1e:e7:46:a0:31:4f:43:6b:9a:88:1e:8e:c8:2a:
f4:c6:39:ba:8b:b9:67:1b:eb:51:c9:e3:43:83:58:
16:da:1a:4b:1f:19:9c:20:f1:01:a2:25:37:64:12:
51:3b:bd:bf:db:dc:4d:6c:fa:78:82:06:1d:79:89:
d7:d0:a9:da:a9:ce:dd:17:60:66:04:d8:e3:30:06:
d1:9b:af:43:cc:fc:d5:29:3e:21:39:98:87:23:57:
72:28:1d:21:23:0b:9a:16:fc:5f:37:c8:59:fb:fe:
b7:b6:ea:0e:14:88:75:ba:61:41:f5:53:6c:fb:46:
81:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FC:86:AD:A3:BB:83:05:CB:83:AB:E2:B0:AA:1A:54:FE:1F:88:5B
X509v3 Authority Key Identifier:
keyid:5D:C8:73:09:87:6C:EC:40:4F:00:7B:F6:DA:04:34:C0:BD:C6:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XchzCYds7EBPAHv22gQ0wL3GLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/44dd9f-4891-45ae-9030-8da8317de3f6/1/XchzCYds7EBPAHv22gQ0wL3GLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:14:06:5d:dc:f0:d0:4e:3e:05:6b:5c:ed:d7:18:f1:a0:9f:
06:85:b8:d1:81:9a:4c:4e:33:8b:33:89:b8:01:d9:fb:17:f2:
e3:c7:42:cd:b4:09:51:9c:60:6f:49:5c:de:49:0a:9e:6b:de:
42:86:8a:c8:55:f6:da:6f:5c:af:74:be:aa:41:53:da:1d:c1:
62:41:16:ce:12:71:3f:0b:99:bd:bd:ec:5a:18:6f:45:1f:b2:
1a:26:c3:54:cd:82:f6:a9:73:43:ed:2f:5d:8a:97:16:6c:5b:
04:ac:75:83:96:63:97:02:cb:ae:d5:28:69:a1:ff:19:bf:f1:
96:97:40:78:c2:11:01:56:ff:64:9b:81:c6:44:b8:57:67:ed:
e4:3e:5e:9d:f7:4d:48:29:98:e8:5e:bd:ac:6c:07:b8:0d:72:
bc:95:c6:99:c5:32:c0:dd:63:44:f7:fb:b6:9c:25:3a:66:18:
08:2a:7e:97:f4:2c:23:a9:1f:47:4e:77:e7:30:aa:87:05:a7:
6b:df:5e:5b:20:92:22:5b:f6:ed:22:29:10:a4:ee:13:70:53:
1f:10:c4:99:19:eb:3b:a9:72:ff:b1:05:2b:cd:f3:4c:33:92:
2d:af:d4:6e:55:ad:2c:6d:60:e4:e2:c3:dc:eb:81:47:28:c7:
c7:e9:1d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:15:51 2025 by rpki-client