Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
File: xseGdZEgDB9fn9DMPemVTcE5hi4.mft (raw, json)
Hash identifier: T5whqBjh1p7mJXwDrOChjJgeghmox8fezagCQ31V750=
Subject key identifier: 05:CC:19:BB:17:1D:8C:5F:1D:D4:FC:7E:F7:89:56:10:97:90:B6:B6
Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Certificate serial: 019923A045C0C753F809327D504FA32D684A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
Manifest number: 05C7
Signing time: Sun 07 Sep 2025 10:02:09 +0000
Manifest this update: Sun 07 Sep 2025 10:02:09 +0000
Manifest next update: Mon 08 Sep 2025 10:02:09 +0000
Files and hashes: 1: n5CLi01m2wEwkEwNJimVxySnb68.roa (hash: 5V0GC7bRrvLJkkKN335rdHnMpL5HHN7RxPUN+snnmZM=)
2: xseGdZEgDB9fn9DMPemVTcE5hi4.crl (hash: gUtVvRR0mu4RE41mDJy6cdOHUMSmJaxn1rf5nTXz1jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:45:c0:c7:53:f8:09:32:7d:50:4f:a3:2d:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e
Validity
Not Before: Sep 7 10:02:09 2025 GMT
Not After : Sep 8 10:02:09 2025 GMT
Subject: CN=05cc19bb171d8c5f1dd4fc7ef78956109790b6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:20:f0:4c:4d:36:49:d9:b4:de:57:5a:5b:90:
90:14:22:ed:bf:c5:a0:73:76:74:72:df:07:e2:56:
39:df:31:74:04:0e:f8:c2:3e:b6:3e:26:92:05:bc:
6d:cb:71:e2:5a:58:c9:e7:cc:f0:02:1a:d8:a4:f7:
3e:21:0b:d9:a8:2a:63:79:b0:81:84:10:eb:79:99:
2e:ad:8d:3a:31:63:e6:21:c4:f6:bf:fa:72:28:2c:
fc:32:60:fa:76:e8:43:cf:51:4e:8f:28:a1:0e:4b:
03:7c:bf:fb:d7:85:f2:0c:a0:32:c5:0c:34:37:e0:
0e:9a:30:d9:9a:6e:ad:e0:de:ab:57:29:d2:e7:4f:
c9:02:fe:d4:84:b0:10:02:15:22:6c:cd:ef:08:6c:
f2:f1:c2:a8:aa:69:2b:11:f3:49:41:e8:02:08:50:
6c:a0:c8:ef:9d:78:2f:46:fc:38:3b:52:56:a1:cb:
96:ee:9a:ff:12:c3:7c:e1:b4:33:8b:56:c4:9d:d9:
c0:c8:fd:e4:e8:da:d1:3a:5f:22:c8:21:4a:6e:29:
88:5f:4f:08:90:b8:6a:58:8c:f4:0a:c9:9d:ba:4d:
bc:8d:aa:c0:e6:f8:ae:c3:33:b0:06:e2:f6:f5:52:
14:e9:09:e2:66:2c:47:8b:c7:44:cc:9d:80:47:14:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:19:BB:17:1D:8C:5F:1D:D4:FC:7E:F7:89:56:10:97:90:B6:B6
X509v3 Authority Key Identifier:
keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a4:fb:70:08:3a:2d:1b:34:df:6a:73:23:9c:90:59:10:7c:
2f:a3:e0:bd:dd:d6:24:c3:84:30:c6:f6:5b:1f:97:88:89:0c:
47:27:a0:23:3f:1e:e3:f3:27:67:be:99:0c:89:67:1e:1a:9d:
4a:b2:4c:3f:b3:9e:d8:e4:c4:c8:3e:a7:06:0f:e6:bb:13:94:
49:bd:c8:46:19:b1:51:85:06:ce:b5:24:de:15:62:70:7b:37:
57:17:c3:81:42:e7:f0:0c:d8:10:b1:92:b8:95:78:0f:88:10:
aa:ad:a3:c8:22:2f:8a:6d:72:12:b5:8a:62:15:44:59:75:62:
3b:e5:dd:7f:75:52:72:78:ad:79:ab:06:90:5a:3e:13:b3:d6:
db:56:fa:88:d7:9f:8a:43:cd:9c:ee:c1:b1:04:26:5e:a8:ac:
6e:4b:e5:46:9a:8d:c2:8a:ab:c5:37:dc:d9:39:3d:52:57:f3:
8b:7b:fe:3f:ea:20:80:da:d4:ed:05:1a:4d:6e:f3:9e:c6:72:
a4:5d:52:d8:62:90:66:f2:97:d2:f0:f5:b6:e4:31:8a:81:e1:
58:45:c1:5e:8f:84:5a:a5:f1:d8:e5:45:19:95:71:e3:c2:5b:
f9:45:2f:15:52:43:ae:05:2d:ad:8e:a3:8d:be:05:0d:38:a7:
25:a7:a5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:38 2025 by rpki-client