Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json)
Hash identifier: Aq95/aB6rQscRvpQVQf0XtKdQ6/qtkr0AyxEqkboE8E=
Subject key identifier: FF:A1:84:DB:7B:B6:C2:02:6E:4A:AB:9B:9C:DA:4B:34:CC:DA:57:A9
Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Certificate serial: 019923D5ED6480576F417C18702B3BCE7270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
Manifest number: EF
Signing time: Sun 07 Sep 2025 11:00:46 +0000
Manifest this update: Sun 07 Sep 2025 11:00:46 +0000
Manifest next update: Mon 08 Sep 2025 11:00:46 +0000
Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: xbpF7jiC6C+by9P+GOvKl5Yg7bcj3Acu+6LHd16Qu1A=)
2: oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa (hash: C+won2ayhOZhVuYFZ85jDDGUEWPlmXvRmRnHCUNjIgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:ed:64:80:57:6f:41:7c:18:70:2b:3b:ce:72:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e
Validity
Not Before: Sep 7 11:00:46 2025 GMT
Not After : Sep 8 11:00:46 2025 GMT
Subject: CN=ffa184db7bb6c2026e4aab9b9cda4b34ccda57a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f8:d4:bc:d3:a9:ec:bf:17:a9:25:09:e6:f6:
6b:44:31:4e:77:c5:83:4c:1e:c9:bc:ec:da:54:f3:
89:e4:d9:8b:23:06:7b:0c:89:c5:01:65:5f:d8:3b:
9c:79:83:de:d4:e0:f5:88:fb:b8:a2:70:77:04:09:
bb:52:6b:29:46:d4:c0:e9:e3:f8:57:2d:b8:6f:cb:
f4:3c:dc:2d:f5:2f:4b:f2:02:06:f8:87:3d:df:c7:
23:90:a8:e8:79:ee:6f:d6:69:cf:7a:7e:a0:b6:bc:
1e:6a:1f:4e:65:50:40:2f:28:88:db:69:0e:4b:b3:
e3:2f:0b:88:23:bc:6d:a7:31:0e:d5:4c:65:f4:19:
0f:fa:21:d7:80:8a:69:10:14:1c:62:7b:4d:f8:08:
60:05:c9:89:69:3b:d1:a1:07:6b:a2:67:74:d3:a5:
d2:e1:47:73:86:18:d5:20:b9:30:61:46:19:e0:07:
21:8f:b8:0f:5e:62:8b:ba:c0:72:6b:f7:86:69:f3:
8a:89:f2:93:38:aa:b8:ee:f9:90:be:9f:7f:56:4e:
ee:ae:32:c1:86:3e:d0:5a:53:4c:46:c4:e6:a6:ac:
ad:ae:52:2a:ce:ef:93:bb:e5:65:a1:7a:49:40:cf:
a3:33:0e:8b:6a:2a:80:29:87:3a:a4:8b:23:2e:2c:
0d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A1:84:DB:7B:B6:C2:02:6E:4A:AB:9B:9C:DA:4B:34:CC:DA:57:A9
X509v3 Authority Key Identifier:
keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b2:7f:2e:7b:7d:cf:4f:0f:91:48:2d:eb:7d:8f:4a:4e:a0:
8a:37:69:90:f4:04:c4:05:a3:7f:dc:d8:31:c9:c5:06:f6:8b:
96:ba:14:5b:f1:64:08:41:cd:2e:52:f0:d3:f5:2b:2e:23:d4:
89:7b:bf:2b:b1:c4:9b:b3:72:6f:18:55:d2:44:b8:c0:ca:01:
4b:a0:84:73:46:90:40:c6:97:7e:da:8a:be:6c:59:f4:aa:74:
08:1d:4f:8d:10:ce:b9:2b:37:99:55:7d:e0:ce:30:3e:77:df:
12:fb:e7:a7:a4:b8:4c:c5:bf:63:81:68:a2:3b:8f:d0:64:90:
a7:09:22:5b:cd:a3:0a:7f:f4:fc:57:2a:0b:e6:01:d1:8f:d8:
bb:92:ae:01:9b:91:92:94:45:a1:e0:1b:15:32:1f:2e:0f:ba:
f8:9e:5b:05:9a:3b:ae:8a:f7:1a:e6:e2:b7:66:0d:bb:0a:53:
90:5a:99:1c:ec:99:c8:4b:ea:b9:f7:8d:96:47:45:ea:47:e4:
d3:b1:07:27:49:e5:9b:e1:91:98:89:8c:d2:f5:05:be:9b:93:
db:05:dc:b0:d1:48:14:08:ca:3e:d0:fa:8f:dd:48:bc:dd:f2:
de:a6:eb:4e:9a:5d:a3:8d:e0:53:ab:76:6f:45:f9:90:4c:9b:
51:6c:7d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:58 2025 by rpki-client