Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
File: xU3YgoUsxFhrH-40wFAdXbfWDws.mft (raw, json)
Hash identifier: TmAsdwBC9eN06BmcYCta6aNNCp4prn7DEn9UlVdrjtg=
Subject key identifier: 47:28:0B:79:4E:2E:CF:33:01:E9:F4:18:B7:38:D6:C5:97:5F:26:9A
Authority key identifier: C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
Certificate issuer: /CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Certificate serial: 019922FA5D0A9B8389B0C35FA2EB775B0520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
Manifest number: 0836
Signing time: Sun 07 Sep 2025 07:00:57 +0000
Manifest this update: Sun 07 Sep 2025 07:00:57 +0000
Manifest next update: Mon 08 Sep 2025 07:00:57 +0000
Files and hashes: 1: XArLVttX_wCBnKO2u8bWM8Vk3NU.roa (hash: BE5h5QGSzKEJoBRH8Cvw/x+Z7DD6UePHMldATT7VyV4=)
2: xU3YgoUsxFhrH-40wFAdXbfWDws.crl (hash: gXViQvnbw3a4t7tKllIhzc50uFSWck8l3NcHeXNI3Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:5d:0a:9b:83:89:b0:c3:5f:a2:eb:77:5b:05:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54dd882852cc4586b1fee34c0501d5db7d60f0b
Validity
Not Before: Sep 7 07:00:57 2025 GMT
Not After : Sep 8 07:00:57 2025 GMT
Subject: CN=47280b794e2ecf3301e9f418b738d6c5975f269a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:57:91:a6:dc:b7:83:bd:d0:fa:17:24:dc:
6f:04:4e:cf:f3:a5:5e:33:df:b0:7e:43:5d:0f:71:
af:6c:02:e3:a7:af:56:d8:30:d2:71:b2:f5:7e:53:
2d:22:b2:12:d7:bd:91:49:c2:66:c8:76:93:b9:64:
5c:c8:3a:d0:97:85:20:1a:3e:66:32:7d:12:e4:0d:
d7:85:08:e1:9f:b1:d7:c3:cc:48:9f:09:ba:64:c0:
88:6d:4f:58:90:38:7e:cb:95:b7:52:57:c8:98:51:
c5:3f:d5:65:c8:00:0c:ac:75:7a:a2:c5:bf:91:5d:
90:b0:d6:67:bb:19:cb:3e:32:f4:9a:fe:53:5c:5c:
1c:98:14:1f:c0:80:08:aa:dc:18:af:4c:f9:7a:62:
42:c8:37:bd:4f:81:79:97:3a:41:dc:ce:77:61:ee:
bc:14:a9:c4:a4:71:29:7a:88:a4:cf:e9:58:14:e6:
05:e1:c4:2c:b4:ce:d8:9a:ba:fd:d6:bd:a2:7e:55:
8e:33:ff:37:73:3f:30:15:65:25:81:e4:92:e6:0e:
9e:62:ae:61:71:3f:60:93:01:12:eb:bd:f2:03:84:
9b:19:83:5b:d4:2b:14:a8:b0:c8:9c:3a:cd:91:7f:
da:4c:4f:09:c4:93:da:5d:16:bd:df:03:e7:af:38:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:0B:79:4E:2E:CF:33:01:E9:F4:18:B7:38:D6:C5:97:5F:26:9A
X509v3 Authority Key Identifier:
keyid:C5:4D:D8:82:85:2C:C4:58:6B:1F:EE:34:C0:50:1D:5D:B7:D6:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU3YgoUsxFhrH-40wFAdXbfWDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/64879b-6c68-4597-9fab-6fbe293171fe/1/xU3YgoUsxFhrH-40wFAdXbfWDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:05:de:31:55:dc:ea:28:5c:40:16:7e:9c:6e:da:ec:b7:bb:
3c:85:d6:5a:38:2e:70:c1:06:fc:2c:91:36:54:bc:4a:4e:e6:
47:55:09:a4:04:91:3c:58:ec:4a:3f:38:b7:95:06:f0:00:e2:
55:bf:ff:58:fc:f4:6c:74:ae:15:4e:60:1c:ee:ad:e5:72:8b:
76:ff:a2:6d:63:29:d6:1a:57:36:ab:a1:19:94:05:8c:4f:f7:
74:95:9a:e0:e6:21:2c:44:86:85:86:71:6d:99:bf:15:3e:8b:
b6:a2:f5:5e:f2:b4:d6:61:dd:f8:79:ce:88:75:3d:0d:ed:e1:
51:17:80:9d:4f:da:c3:05:08:11:c6:e3:da:12:28:38:e0:69:
0a:62:92:32:9d:f0:a8:40:2d:00:d6:c9:f7:43:ab:d0:2d:3d:
f6:03:03:81:fe:8f:dd:3c:83:5d:ed:70:fb:66:4b:85:00:a9:
e6:0d:1a:a5:3f:18:93:4d:59:de:2e:b2:0a:70:4c:80:67:e2:
35:e2:16:99:be:eb:8d:4f:22:fd:c5:7c:24:fd:f4:03:db:64:
bc:58:b8:9e:10:fe:d4:2b:60:02:f8:8a:20:24:6e:00:b5:cd:
0e:6c:72:a1:16:01:03:d2:30:ef:d7:6c:74:ab:59:1f:5a:78:
3d:d0:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:13 2025 by rpki-client