Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: ZPDfIxung3xVDwN8HNqIr3SZ/UR4WkTJT/ARHw68nw8=
Subject key identifier: 60:80:E4:2F:A0:E8:52:FF:BB:66:C8:67:78:BE:8A:8E:0B:1C:1C:FE
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 01992330D63EC3A10D11F542440F76ECACB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 12D3
Signing time: Sun 07 Sep 2025 08:00:27 +0000
Manifest this update: Sun 07 Sep 2025 08:00:27 +0000
Manifest next update: Mon 08 Sep 2025 08:00:27 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: PlVRcYmMwxBNsr97DMk+J+y7JetQ+yxRyi6djahY4uI=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d6:3e:c3:a1:0d:11:f5:42:44:0f:76:ec:ac:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Sep 7 08:00:27 2025 GMT
Not After : Sep 8 08:00:27 2025 GMT
Subject: CN=6080e42fa0e852ffbb66c86778be8a8e0b1c1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:07:91:94:a0:0c:71:91:23:0c:36:85:f0:
4b:a0:a0:2f:f0:42:15:3d:a5:ba:0e:49:13:d2:d5:
2e:2e:0a:d7:20:53:95:85:06:cb:19:10:0f:c3:14:
73:37:e7:28:21:2c:af:fb:43:4d:71:a3:01:3d:20:
02:7f:04:12:4a:31:46:d3:3c:bb:48:4e:06:b0:95:
f4:81:ed:3d:d8:05:b2:d6:59:2d:00:7e:02:d6:8b:
28:6c:0a:12:be:59:0d:c5:a3:48:e4:62:6c:6d:03:
9b:2b:aa:a6:67:30:66:88:55:db:7e:6e:fd:fe:02:
8b:ec:e0:2e:21:9d:2d:89:9d:de:e3:53:f1:c7:a2:
f2:d2:59:1d:fb:04:12:47:6a:d7:7e:e7:c3:49:99:
63:a0:fb:bb:1f:f6:32:6b:c0:f7:3c:68:a6:32:ce:
65:cb:63:ef:4f:90:54:3d:b1:02:e5:0b:d3:fd:51:
56:7b:e6:8e:85:33:1e:43:cd:ce:a3:1d:78:5f:fd:
ae:db:96:a8:10:a1:e2:5a:92:40:e9:30:96:07:79:
25:d7:f7:56:90:fa:11:11:d8:84:99:37:ef:6d:7a:
08:14:d1:13:f6:cc:51:f1:94:dd:d6:d0:d0:be:c0:
79:5b:08:4a:d7:69:47:2f:0c:7f:9b:ea:09:16:5c:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:80:E4:2F:A0:E8:52:FF:BB:66:C8:67:78:BE:8A:8E:0B:1C:1C:FE
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:96:ae:c9:e1:b5:8c:d8:70:55:c4:79:59:72:84:4b:b4:a6:
1f:23:5a:28:53:27:0a:8c:3d:02:fd:53:33:9a:b0:71:71:29:
21:84:3c:d7:11:25:12:a1:27:dd:b2:9d:3b:d1:70:a2:e4:c3:
e8:9a:48:7e:fb:57:4c:a7:e3:71:b1:4d:7e:4e:56:aa:db:56:
05:ad:4d:0a:ce:44:75:b7:6c:40:52:f5:28:66:64:65:db:84:
12:f2:6e:4d:49:a3:9f:82:14:6f:d8:96:29:7d:ff:d0:b4:8b:
b2:e5:12:44:1b:93:ac:c7:e2:9f:03:0e:b9:2c:5e:c3:ef:30:
3d:82:3b:a2:ca:3d:ec:bc:2d:dc:c2:6d:53:72:a9:1b:3f:9f:
00:a2:e9:21:45:2e:d1:c2:d6:30:5d:68:aa:b4:14:72:da:b0:
74:02:be:c9:52:27:b1:97:3e:d6:52:b0:ed:1e:a9:23:a7:63:
97:7b:34:51:77:30:07:c4:d5:d7:8a:b5:ba:b7:00:06:c9:d1:
10:26:03:fc:2f:00:9e:b2:c1:fe:6f:78:b0:f3:cd:9c:fc:cc:
60:60:1f:05:d2:01:82:61:66:22:92:ca:fd:9a:f5:44:96:89:
d3:dd:c9:ad:eb:64:73:58:8d:66:56:c7:ab:e5:56:ef:ea:08:
40:62:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:14 2025 by rpki-client