Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: /LU45Xff4bGqYKNxmTNNyEaF9F6UySZGgMk2tbTgSGM=
Subject key identifier: A2:1C:E3:C8:67:1D:0E:9B:33:69:16:58:5D:FF:46:B7:80:EB:AF:A4
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 019921B0B75A29CF8E74FE2A67193E2ECAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 0421
Signing time: Sun 07 Sep 2025 01:00:53 +0000
Manifest this update: Sun 07 Sep 2025 01:00:53 +0000
Manifest next update: Mon 08 Sep 2025 01:00:53 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: Hlc0/gHMZPRYF72qvvPoXMHqzSDP6vso1CxOjXA44KY=)
2: Zalmb79lgnJ8ZqrgJMNHmIB0_a8.roa (hash: qT5QBRK21+1uxjdCx9gW03qYws/IDIrgYu8jrzg9fD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:b7:5a:29:cf:8e:74:fe:2a:67:19:3e:2e:ca:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Sep 7 01:00:53 2025 GMT
Not After : Sep 8 01:00:53 2025 GMT
Subject: CN=a21ce3c8671d0e9b336916585dff46b780ebafa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:92:ab:08:9b:00:29:d1:6d:a4:6d:d7:a4:
8b:ea:a3:5c:1b:c3:3d:40:7a:4c:0c:fa:10:59:df:
06:cf:08:f4:f2:8d:33:33:ed:21:47:ed:9c:f2:4b:
eb:be:c7:c4:ee:fb:4a:c4:94:57:71:9d:68:f5:36:
bc:51:b5:ee:33:f0:8e:96:0f:fe:c4:ea:d5:6e:04:
d7:32:dd:fe:b1:7f:64:20:ea:f1:36:a8:94:31:12:
f7:72:e1:e0:f9:d2:d1:2c:af:11:5e:72:bb:f2:82:
77:00:b7:a0:11:b3:69:7c:ac:26:76:7d:cc:7f:2b:
e2:8d:6e:33:a7:53:eb:5f:03:69:fa:73:16:6a:8f:
b4:06:02:4d:41:fa:31:50:ec:9a:27:e0:ec:4f:c9:
25:96:2a:3f:25:9d:88:10:a8:7b:06:ad:dc:ad:86:
63:c3:7d:82:0f:16:db:ed:95:c3:16:48:e9:11:a0:
c8:f8:52:77:1e:47:0a:06:33:24:fb:c6:77:90:c0:
34:8b:d4:14:ea:44:9a:d9:46:8d:e5:45:bc:00:51:
c9:c9:39:18:4c:fe:5b:03:ba:b3:c7:b4:dc:7b:ba:
83:f9:de:24:2a:e9:21:50:d0:b1:bd:dd:27:d3:e4:
5f:47:2d:a8:72:99:69:24:e4:58:d3:83:55:a6:a5:
e7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1C:E3:C8:67:1D:0E:9B:33:69:16:58:5D:FF:46:B7:80:EB:AF:A4
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:27:6f:c8:1f:e0:cc:66:3e:b8:0b:85:9f:c2:13:18:01:
57:4c:42:d2:e6:67:af:1a:73:f0:62:ed:68:8e:a2:09:e4:e8:
10:24:cd:d3:27:e1:02:6b:6c:c9:83:1a:86:67:db:85:17:c1:
4d:d4:7c:62:cd:b0:96:b2:6a:2b:97:44:c0:1d:83:8e:03:7e:
da:90:33:f1:21:85:0a:c4:50:7b:ca:9e:71:8c:02:f6:1c:54:
f5:7c:11:f6:87:44:5f:26:7a:3d:a0:cf:80:c8:f1:6b:8e:3a:
be:12:ba:58:17:e4:41:da:8c:a4:65:b6:71:7b:ce:c0:92:52:
99:a0:dd:bd:9e:8f:7c:ca:5e:c9:bd:3d:e9:36:83:ed:6a:16:
32:cb:e3:44:7e:85:e0:4f:c9:e1:cc:18:16:6c:cf:2b:27:8f:
c9:1e:13:71:d3:d3:67:09:7f:8c:da:22:52:f4:81:6c:4e:fc:
6c:89:1c:fa:00:af:99:f4:11:fb:d6:a4:9e:1e:e3:d5:f7:5c:
49:99:49:f3:68:dc:ba:6a:5d:f6:f3:4d:8a:69:64:12:66:d8:
5d:c3:ae:3d:97:18:cc:f8:0b:c2:87:81:13:21:bf:07:87:20:
a7:5f:09:03:70:35:40:13:36:d9:ef:a8:51:5c:96:b2:e8:45:
1b:cb:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client