Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: +knR95s/pJVbVLCANViNgZ3SKRdx8ly8tI0C5MqEDG0=
Subject key identifier: 48:D5:AE:2C:7C:99:6E:F5:55:D4:D0:4F:90:1E:D1:C4:25:4B:12:AC
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 01992255761C786F2D80819525E18D45406A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 0E32
Signing time: Sun 07 Sep 2025 04:00:50 +0000
Manifest this update: Sun 07 Sep 2025 04:00:50 +0000
Manifest next update: Mon 08 Sep 2025 04:00:50 +0000
Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=)
2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=)
3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: 7g8Sfqm0q+R8bzzqa9vzIhzTraS982PF9lZZVMZ+vV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:76:1c:78:6f:2d:80:81:95:25:e1:8d:45:40:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Sep 7 04:00:50 2025 GMT
Not After : Sep 8 04:00:50 2025 GMT
Subject: CN=48d5ae2c7c996ef555d4d04f901ed1c4254b12ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:37:09:49:20:71:49:27:dc:06:26:ec:41:71:
5f:b2:8e:ce:73:68:72:94:ec:45:58:8e:e5:5d:2b:
a0:38:94:6e:b2:35:ca:d5:7a:9b:1a:bf:f2:4d:a4:
8e:dc:66:1e:d1:fb:7f:c6:55:32:4e:d9:a7:e8:a5:
b5:5b:f6:34:db:1a:68:a3:78:a7:1e:33:c7:60:30:
07:81:de:4f:ae:1a:bc:6c:68:d1:25:86:d7:ba:1e:
e2:92:ab:16:8e:ca:ea:cb:eb:2a:80:84:dd:29:07:
72:94:22:30:67:59:fe:0d:f3:05:3e:7d:74:55:9f:
1a:bb:b5:17:1c:fe:ce:2b:47:57:72:dc:29:86:9e:
c7:13:a7:e5:35:29:07:41:3f:f6:72:d6:ee:50:80:
d0:d2:31:f2:79:70:b8:32:ec:0c:e2:62:aa:f8:2f:
03:d5:1f:09:bd:20:6b:c8:85:38:25:cb:a4:a3:5b:
69:58:95:91:48:a9:e5:e9:a6:57:38:41:62:f9:50:
88:26:15:6b:eb:9a:8f:76:36:0e:e5:d0:ef:da:33:
8c:86:ad:cc:9b:27:20:0a:6a:a5:c5:df:90:af:0d:
60:68:43:3b:12:22:74:c2:db:5b:3c:e4:8a:50:09:
72:ff:55:ba:f0:73:be:bd:40:61:8b:e5:6e:aa:bd:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D5:AE:2C:7C:99:6E:F5:55:D4:D0:4F:90:1E:D1:C4:25:4B:12:AC
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:f0:16:0c:d4:05:38:0b:4b:9d:87:73:5f:27:6e:6d:13:
90:4e:58:0e:bd:a0:6c:95:39:96:3b:32:bd:56:a2:22:83:95:
91:a7:9c:7b:da:14:f6:48:3c:69:18:c6:7c:ff:40:e4:34:6f:
d5:85:95:64:fd:a0:6c:98:92:c2:3f:29:01:d6:59:8a:4f:dc:
48:da:a5:bc:ae:cb:25:3e:da:83:58:21:4b:d7:3b:57:80:f1:
9c:88:9c:cd:37:8f:b1:2f:2f:22:4c:4c:12:5b:71:28:8d:45:
3a:81:bd:f7:84:0c:63:30:ba:d3:65:83:f6:9d:47:92:8e:c7:
42:30:5b:ce:3e:5c:33:62:ad:9d:b2:7b:51:6d:8b:aa:fd:f0:
16:49:c0:10:d7:41:58:03:12:5a:db:ff:a0:16:52:6c:2d:4b:
0b:e5:8c:db:59:9f:fc:31:d9:ad:76:ba:69:60:67:f3:86:32:
4e:93:ae:4d:a9:56:6e:b0:60:09:59:1b:4a:b7:87:df:b0:d2:
1b:92:87:5f:0d:eb:b5:7f:a9:25:57:65:92:4b:da:5d:f4:a4:
c4:41:d4:54:88:50:27:5d:94:be:d9:df:0b:ed:69:da:42:89:
e6:dd:4b:b6:48:93:61:45:8f:d0:fb:a9:24:f8:54:3f:2c:b9:
5b:ca:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:03 2025 by rpki-client