Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: 42AFlf8DlMMIkb3xnPqd3aXkUERO87lg57+aw5zbDJA=
Subject key identifier: 4F:30:C2:7F:08:27:46:BF:3C:FB:83:CF:ED:2B:57:FB:3D:A2:A7:83
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019926D73056802C0530834C8E3F6524C8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 1587
Signing time: Mon 08 Sep 2025 01:01:00 +0000
Manifest this update: Mon 08 Sep 2025 01:01:00 +0000
Manifest next update: Tue 09 Sep 2025 01:01:00 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: 1ZLQG4VRQgrtvaVGLP8lcTYLVF6DIETf1IJcPPEiOXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:30:56:80:2c:05:30:83:4c:8e:3f:65:24:c8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Sep 8 01:01:00 2025 GMT
Not After : Sep 9 01:01:00 2025 GMT
Subject: CN=4f30c27f082746bf3cfb83cfed2b57fb3da2a783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:9f:07:b4:b7:6a:e0:6e:a4:2f:76:94:9c:
bf:17:25:2e:64:d3:29:02:aa:c6:31:14:51:07:b2:
13:0f:3d:72:6a:85:62:21:f9:37:8e:5e:e1:5f:06:
ca:41:30:f9:c0:24:22:fb:74:c6:41:93:89:87:56:
49:e6:9c:70:b4:b9:fd:64:31:37:b7:57:80:3c:14:
3b:43:a2:c0:4c:e3:3d:92:97:c6:92:b3:88:59:7b:
11:54:78:45:b2:f6:d7:03:d7:37:a2:4d:c8:d7:ee:
a0:17:8f:0d:79:15:8d:f0:4f:0a:bc:c3:6a:13:06:
aa:e6:9b:ce:72:2a:0a:b0:a2:96:0d:ca:08:24:74:
05:e6:f4:43:6d:03:64:c8:90:28:ce:de:68:24:8e:
ad:0a:84:c7:05:e6:16:e4:92:c8:51:71:cd:b3:45:
b9:6f:74:f0:ba:8b:09:13:bf:ef:3f:88:7d:46:62:
72:64:bd:2a:7c:b0:c3:52:84:b4:95:40:bc:b2:63:
cd:5a:a7:4f:d6:85:a6:ef:47:a3:71:68:ac:c9:d3:
79:df:75:5c:95:a1:5e:f1:1d:d4:d9:a4:07:1f:70:
30:01:b8:67:be:37:8e:97:3b:a5:39:1e:c8:28:a6:
17:51:1f:77:52:2e:7c:4e:56:a8:1a:fb:87:05:de:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:30:C2:7F:08:27:46:BF:3C:FB:83:CF:ED:2B:57:FB:3D:A2:A7:83
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f2:69:ae:d5:e1:d8:00:9f:96:c9:03:d1:76:87:d9:94:c4:
58:72:01:52:a3:11:96:fc:77:34:53:c8:56:31:f6:aa:a6:a4:
59:00:98:db:84:77:c1:1b:57:35:85:10:d6:d3:cb:e6:4e:09:
97:64:2f:fa:10:d4:b4:62:0d:ba:a1:56:2e:1d:32:21:19:eb:
88:e5:bc:4e:79:29:02:38:3f:ce:d4:25:02:47:a8:b5:dc:14:
e7:b0:f3:f1:9e:b6:0a:32:70:9a:c6:99:39:d2:d6:28:ae:62:
c7:6e:8b:cc:e1:2c:1d:42:8d:3c:d6:bd:a3:94:16:7b:bc:53:
1d:d9:0e:c3:80:52:24:80:1e:36:7a:b2:4b:92:8a:97:10:e3:
bc:19:fe:4f:20:cc:6a:12:54:5a:00:5e:12:ef:11:33:ee:58:
c4:88:c0:e5:20:bd:b0:94:a1:7b:28:1d:13:fe:be:c3:98:9d:
9c:95:c6:d3:5f:00:28:0f:4d:e4:70:dd:f7:2f:f4:18:16:ea:
f1:68:7e:2f:28:fa:78:2c:a8:18:b6:6e:0e:e6:10:ea:f5:96:
ba:6e:5b:c0:3e:96:9a:a2:59:91:e7:84:0a:33:6f:56:6d:79:
d5:2d:2f:72:c6:40:c5:9c:e8:10:0e:45:4c:d7:8c:9c:b2:d8:
d8:40:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:42:44 2025 by rpki-client