Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
File: xjfMzVzaAYlbGJzKlfKWtcswx8g.mft (raw, json)
Hash identifier: qLm2NIe0x2gUHlirg2Rpjr+hga3cudr/zvhFPToo4WQ=
Subject key identifier: 36:97:8A:1D:64:BB:72:93:80:1B:C4:D6:96:98:19:18:23:71:58:0B
Authority key identifier: C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
Certificate issuer: /CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Certificate serial: 019921B0F5EB6B02AC7E1015174AE75AA13B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
Manifest number: 108E
Signing time: Sun 07 Sep 2025 01:01:09 +0000
Manifest this update: Sun 07 Sep 2025 01:01:09 +0000
Manifest next update: Mon 08 Sep 2025 01:01:09 +0000
Files and hashes: 1: setwbHKxCPa52Elr9rNK2rsq568.roa (hash: 02SvDqNnAJ5dRMEAMQRIAHSYXYUFEMZjO5nV2nUJjV0=)
2: xjfMzVzaAYlbGJzKlfKWtcswx8g.crl (hash: aTM78E4tC2u17CXOK5w5DOinOiq0R7eMPIBZlVrIS5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:f5:eb:6b:02:ac:7e:10:15:17:4a:e7:5a:a1:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c637cccd5cda01895b189cca95f296b5cb30c7c8
Validity
Not Before: Sep 7 01:01:09 2025 GMT
Not After : Sep 8 01:01:09 2025 GMT
Subject: CN=36978a1d64bb7293801bc4d6969819182371580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:1a:f8:10:41:e1:eb:a9:bf:e0:fd:39:34:
21:10:dc:68:3a:53:1c:ed:8a:72:ec:a8:4f:b5:40:
2c:00:00:7e:75:69:33:6d:86:25:6c:46:40:55:f0:
3b:32:e5:87:92:5f:c9:9b:a2:ab:7f:ed:c2:83:c2:
1a:0b:b2:fb:6c:ba:30:86:66:81:29:5a:f0:ff:58:
55:f1:5e:ea:62:18:8d:dc:6c:5b:6a:10:42:59:ac:
64:02:58:46:b1:d9:2c:90:e2:ce:12:64:a5:46:4d:
cd:6a:91:a2:aa:fd:f1:4e:3d:85:48:47:89:aa:13:
da:1a:8c:f9:20:6b:af:c0:34:ca:5e:e0:7d:2c:4c:
b3:35:56:76:5c:69:8d:79:a8:dc:d6:c8:82:67:51:
07:58:53:74:e1:98:7e:4b:64:fb:ec:d4:b4:0e:88:
66:49:1f:69:90:19:80:1e:96:7e:06:ad:b7:6b:16:
4c:86:90:5c:2c:34:72:69:1a:ae:81:cb:67:12:f2:
43:40:e3:dc:c9:ed:a2:2c:b7:ba:47:40:a3:d8:66:
cd:87:15:9c:89:ec:90:25:65:6f:eb:5d:4f:81:fd:
5f:15:6f:56:c3:b2:53:a5:e7:86:22:be:65:ff:8d:
98:3c:92:13:f5:e3:13:61:aa:f1:49:5a:85:f9:fc:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:97:8A:1D:64:BB:72:93:80:1B:C4:D6:96:98:19:18:23:71:58:0B
X509v3 Authority Key Identifier:
keyid:C6:37:CC:CD:5C:DA:01:89:5B:18:9C:CA:95:F2:96:B5:CB:30:C7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjfMzVzaAYlbGJzKlfKWtcswx8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1e051e-3cf8-4763-b3cf-a746a8120e9b/1/xjfMzVzaAYlbGJzKlfKWtcswx8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:28:01:af:f9:74:9a:9a:0e:89:cb:a8:3b:e3:e2:fa:22:f5:
69:da:33:1a:68:d9:93:e0:e1:e2:c9:49:b4:88:02:6e:81:d3:
4a:8e:54:4c:fb:e1:4a:1b:85:34:04:6d:42:1b:6e:a2:8c:5b:
16:a1:10:61:ce:ca:dd:6f:65:64:3e:41:4d:55:cd:fa:fa:2c:
a5:06:53:a8:75:31:00:fa:d3:fe:a2:4c:d3:f5:d8:5b:d8:96:
ef:1e:a0:f7:41:40:f2:20:28:8d:40:4a:b7:3e:6d:c6:e5:b1:
c3:a6:b3:66:06:82:fa:7f:40:60:26:cc:67:be:d2:4d:08:04:
db:d9:01:1d:60:91:0e:07:59:18:fd:58:c6:17:df:31:e4:51:
83:17:e7:0d:72:6e:a6:d5:4e:a6:89:be:a4:06:4a:29:8c:ac:
a8:9c:cd:73:1b:89:ef:b0:d2:95:f4:13:e2:ed:9b:50:1b:5e:
d4:4e:c1:0f:77:71:b9:57:18:32:f7:53:57:9e:4d:30:87:5b:
02:81:36:d3:50:51:7e:5a:4b:f8:f2:4b:95:15:d5:9d:4f:0b:
7b:17:20:df:8f:00:b7:bc:b8:cd:13:95:29:45:3c:b5:21:09:
92:95:20:36:46:7f:47:2f:f1:d3:63:80:b5:fe:9d:50:b0:74:
a0:92:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:19 2025 by rpki-client