Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
File: xdzY0KKrrowlOR8jBRzD8PJHk6o.mft (raw, json)
Hash identifier: /N8gsmTupwzk261+Bbz9ekgYQU50bKE0Nikefce7Y+M=
Subject key identifier: DE:42:5C:02:E9:8E:D6:6B:FA:C3:EC:80:1D:BF:19:32:10:7C:27:E6
Authority key identifier: C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
Certificate issuer: /CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Certificate serial: 0199353743F32ADD01D992A015945A2D5EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
Manifest number: 0361
Signing time: Wed 10 Sep 2025 20:00:38 +0000
Manifest this update: Wed 10 Sep 2025 20:00:38 +0000
Manifest next update: Thu 11 Sep 2025 20:00:38 +0000
Files and hashes: 1: NBJiMu1brPzEal7P3N6cPAqoIL0.roa (hash: tL077Ces2LMV0DaeWX0Tayl4bRSqsUGH1e79Mg1asv0=)
2: xdzY0KKrrowlOR8jBRzD8PJHk6o.crl (hash: 6JoXz9YUMIk89enSw4WkSV7C8re6rNmjYDkhFGrZjeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:43:f3:2a:dd:01:d9:92:a0:15:94:5a:2d:5e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5dcd8d0a2abae8c25391f23051cc3f0f24793aa
Validity
Not Before: Sep 10 20:00:38 2025 GMT
Not After : Sep 11 20:00:38 2025 GMT
Subject: CN=de425c02e98ed66bfac3ec801dbf1932107c27e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:99:0d:11:c2:4f:f8:fc:19:ec:20:a2:df:
7a:5d:e0:31:75:f2:4e:d5:8c:30:fa:f8:fc:e0:f4:
ab:bc:ea:ac:cf:0b:d9:91:86:a2:4f:30:c4:6c:8c:
f2:f0:37:ff:a4:6d:4e:8b:f7:1f:09:6c:d7:fc:cc:
6d:e9:55:b2:08:49:0d:cd:a8:f2:14:7a:f4:c4:1e:
1b:bc:be:77:96:f0:6e:95:b6:f1:5f:de:fa:7b:fe:
1c:b7:cf:cc:e4:53:b0:f4:fc:f7:a3:a8:85:7f:8d:
74:bd:c9:8c:88:c9:58:c7:a5:32:ef:66:c1:f9:48:
86:0f:cf:35:4b:91:59:8d:5b:4a:80:58:f7:b6:d0:
82:c9:47:bd:85:2d:44:cd:e0:4e:5a:b0:3d:2b:73:
a8:99:88:04:b9:76:81:3d:03:0b:c1:c0:ac:e9:4f:
e7:2f:42:51:73:ee:5e:5e:09:fe:2c:ac:ee:71:b6:
4e:01:b4:7a:8e:1b:6f:24:87:41:f7:0d:6f:5d:17:
b2:c3:53:98:0c:25:22:c9:45:7e:7d:6a:71:7a:8e:
de:85:c3:1a:a6:82:80:ee:e3:61:cd:63:ff:9b:00:
50:ae:18:77:e9:8a:29:35:ec:31:0c:cf:7d:36:d1:
21:b1:e7:c3:53:c0:7e:63:b9:fc:7f:ac:90:3b:ea:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:5C:02:E9:8E:D6:6B:FA:C3:EC:80:1D:BF:19:32:10:7C:27:E6
X509v3 Authority Key Identifier:
keyid:C5:DC:D8:D0:A2:AB:AE:8C:25:39:1F:23:05:1C:C3:F0:F2:47:93:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdzY0KKrrowlOR8jBRzD8PJHk6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f30c4d-b422-4581-bf04-c79d46a9239b/1/xdzY0KKrrowlOR8jBRzD8PJHk6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f1:f7:7c:8c:df:bf:aa:f6:2a:42:dd:d7:02:67:e9:f1:85:
42:ba:66:72:f1:7e:2a:7d:cd:5a:04:51:4c:9e:92:c9:23:9f:
04:43:42:b2:aa:4a:3e:f9:22:5d:b9:72:0e:cd:ba:27:46:ba:
66:74:c9:95:ea:d6:8b:66:79:52:11:cb:4c:c7:06:87:bc:05:
5a:49:1f:8f:52:d9:60:1f:13:e8:4b:68:f2:c4:7a:10:89:13:
de:c7:e0:29:4a:c8:cd:e8:68:92:bc:f1:ec:4d:63:89:be:cf:
53:d4:ad:59:d8:8f:d8:2c:ba:39:be:0f:f5:aa:27:c1:2e:3e:
60:90:66:06:3c:25:24:2e:e7:f7:0a:1b:cb:24:2f:ca:ec:b1:
f2:c0:1f:22:49:9c:dc:a5:9e:2b:86:3e:c4:4f:72:5c:b3:1d:
93:2e:73:c5:40:c2:52:0e:1e:6e:0c:a4:87:23:79:44:2e:71:
20:a8:3d:01:46:0f:f4:fb:b6:c4:8a:d6:ce:8c:a9:db:f7:56:
d3:11:28:e4:a8:89:8a:0e:0e:8d:23:87:c9:59:ea:b5:c6:e6:
ba:11:e0:d4:f1:23:e5:0d:a6:59:0d:50:40:d9:42:92:24:22:
5b:65:da:73:5b:bc:8b:fc:4a:fe:ca:b7:3f:db:c8:c5:7d:7d:
b5:0d:63:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:01:27 2025 by rpki-client