Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: LQfWynoKBypPXaWA0AbxoF/KS/PDFxHAvsjTS1JGtS8=
Subject key identifier: 56:7A:04:4E:C7:B1:88:C5:EB:03:D1:8E:E6:E6:31:33:ED:B5:63:D8
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019933B6B4FECDF2E0E53BC5039185731A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0B63
Signing time: Wed 10 Sep 2025 13:00:35 +0000
Manifest this update: Wed 10 Sep 2025 13:00:35 +0000
Manifest next update: Thu 11 Sep 2025 13:00:35 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: SXZO/lF/M73/EGlkYxcJfq1l75dkIKWrqBZUFj6MPEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:b4:fe:cd:f2:e0:e5:3b:c5:03:91:85:73:1a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Sep 10 13:00:35 2025 GMT
Not After : Sep 11 13:00:35 2025 GMT
Subject: CN=567a044ec7b188c5eb03d18ee6e63133edb563d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:2a:6c:81:98:ca:f4:8e:84:4a:01:8a:81:
29:9c:6a:08:30:1c:ba:08:d0:cb:0a:56:54:02:b2:
4b:ef:e7:23:1f:80:b1:8b:cd:c1:b6:0b:7c:df:78:
86:ac:91:19:37:30:fb:f7:99:c2:5b:cb:de:ad:61:
f5:44:e0:27:31:5a:e9:d5:cb:70:2e:c1:4b:4d:d8:
6c:00:6a:0e:1e:d8:22:0b:d3:da:61:63:72:6d:6a:
d0:1b:05:c3:75:1c:81:97:6d:8e:fa:e7:86:f4:00:
d2:5d:9e:f9:d8:18:69:e7:50:59:20:24:24:e8:a0:
f3:20:64:5a:bd:e8:a7:b3:95:b2:e5:a0:9a:dc:14:
70:3a:36:aa:44:8a:2f:7f:55:87:c3:ca:64:2f:bb:
fd:ea:bd:f5:d6:b1:50:ff:f2:bc:5e:33:22:e0:75:
74:84:37:a7:75:b7:17:14:55:4c:6f:b2:6a:f9:e4:
7c:da:22:1f:c1:6d:6a:67:5f:31:a3:e0:c0:eb:84:
2a:c8:15:30:78:11:03:c9:d3:3a:46:4e:5d:95:7c:
ec:51:b8:ff:70:87:02:61:c5:80:6d:e9:8a:10:ac:
25:f5:b0:ea:67:30:af:c5:33:12:e1:5d:36:db:d7:
ff:10:95:23:c1:03:c6:68:55:de:2a:44:b7:26:e0:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7A:04:4E:C7:B1:88:C5:EB:03:D1:8E:E6:E6:31:33:ED:B5:63:D8
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:82:4a:19:00:71:61:b8:19:eb:2b:25:17:14:d2:83:05:
a5:4e:f4:ab:91:84:88:11:d0:38:90:82:93:da:db:f4:ef:df:
79:41:a6:8c:fb:26:67:c8:2c:2b:6c:8f:a8:4b:2d:3d:76:58:
56:b7:d9:e4:f1:06:8d:af:57:d1:09:dc:87:4c:7e:e5:54:34:
ac:18:09:a6:cd:bd:6d:5c:ec:09:b7:25:ac:9e:1d:53:0d:13:
fd:3c:ac:1f:33:5b:01:18:bf:75:9f:68:17:10:d7:9c:c4:53:
65:ad:f2:32:63:2d:9f:f3:e4:ab:1a:6a:41:bd:b4:bb:35:d1:
69:26:32:2b:a7:4b:9d:73:f1:2a:c9:05:7c:96:bd:70:41:fb:
2b:23:ed:a9:d8:51:8b:e9:b5:30:8e:c3:46:95:19:c8:ca:2f:
d0:8f:0e:eb:08:9b:82:80:13:72:50:38:41:d5:7d:f1:ab:fc:
79:20:af:0a:48:a3:d7:96:6f:2a:b4:f5:25:b8:31:d0:11:99:
10:9b:68:bb:80:72:1b:f2:1c:42:9a:f0:15:0c:4d:1b:42:88:
81:e3:e2:b6:99:d4:53:b4:76:90:6c:07:66:c8:17:33:8d:80:
2b:e2:55:bb:5b:4c:bc:91:7e:f8:a5:40:42:a5:42:15:e3:10:
12:6a:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:49:58 2025 by rpki-client