Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json)
Hash identifier: F9LTSN13+TlAkcWDS0z10iRG70CC8S9fjUtAP94x+n8=
Subject key identifier: 71:EA:11:08:96:7E:E8:45:7D:0C:CE:4E:70:85:47:9F:64:5A:6A:0C
Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Certificate serial: 0199233188B8CEABB2105EC7E8DB05FB849B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
Manifest number: 1577
Signing time: Sun 07 Sep 2025 08:01:12 +0000
Manifest this update: Sun 07 Sep 2025 08:01:12 +0000
Manifest next update: Mon 08 Sep 2025 08:01:12 +0000
Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=)
2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: H/FROpL289o/+IBkuGMUfOxs2n3ZBtwznt2HZfvT8eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:88:b8:ce:ab:b2:10:5e:c7:e8:db:05:fb:84:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad
Validity
Not Before: Sep 7 08:01:12 2025 GMT
Not After : Sep 8 08:01:12 2025 GMT
Subject: CN=71ea1108967ee8457d0cce4e7085479f645a6a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:2b:8c:9d:8d:b8:b3:7f:09:cd:32:2d:1d:
d1:dd:e9:67:4e:84:2b:38:e1:fc:eb:f8:ba:24:b8:
02:57:23:f6:7d:60:b7:9e:14:12:87:b3:12:d7:9b:
be:50:0e:ef:e9:d2:cd:9f:cd:ad:62:23:91:04:68:
be:b2:b1:74:03:48:e1:20:0e:d5:69:69:db:fb:43:
c8:e4:f3:b8:09:f7:c3:29:cd:f6:f6:73:7c:8a:d0:
ea:40:81:9a:80:84:7e:ad:ab:c0:28:ab:55:7b:cc:
a6:7d:0c:ed:e7:10:38:4e:28:5e:7d:ec:f0:b4:1c:
f9:86:5c:4d:36:74:d5:ae:47:c8:aa:94:1c:92:17:
9c:78:37:91:76:c6:c6:76:fa:a4:75:a5:e1:f5:a1:
62:82:91:8d:3e:1d:98:c4:ef:c9:fd:99:ca:7d:17:
cb:63:5e:28:7d:58:8a:32:a9:be:74:9d:ca:74:ea:
25:e7:55:f5:86:cc:03:f0:7b:35:6e:57:00:de:4a:
ef:c4:30:db:26:b5:b5:30:0f:2c:5d:90:42:06:73:
be:49:a6:82:37:9a:ec:03:ab:d2:cb:46:d0:c2:7c:
3f:e4:7b:11:c8:76:d3:dc:cd:74:22:ee:e5:25:10:
95:b9:d6:93:41:c9:f0:a4:74:6b:5c:ca:fb:eb:b0:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EA:11:08:96:7E:E8:45:7D:0C:CE:4E:70:85:47:9F:64:5A:6A:0C
X509v3 Authority Key Identifier:
keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:00:81:84:1b:17:62:67:1f:6d:00:ed:38:57:b4:dc:72:61:
ca:34:88:94:70:38:38:40:16:56:1e:21:d3:7d:b6:0e:14:c3:
28:c9:4a:60:47:10:3d:ef:6d:20:d4:88:9f:9d:11:f4:83:ce:
41:af:5f:ee:84:e9:9c:b7:80:b3:39:af:0c:04:01:7c:bc:f1:
cb:e3:f0:d8:07:ad:97:00:2f:42:35:19:9a:55:f5:f1:01:29:
3f:db:4b:a6:36:50:2d:3d:06:c3:ff:88:7c:96:ac:f1:d4:08:
0f:b8:a9:15:4b:b2:a2:31:74:37:fe:37:d5:87:aa:91:9e:52:
65:cb:94:91:e9:1e:c4:8f:99:e2:4d:a2:6e:c0:69:f4:a2:8a:
62:7f:f1:c1:a0:bb:31:46:15:4d:e1:09:fc:f1:5a:1d:18:0b:
bc:f8:2e:da:40:bc:e6:02:c4:67:13:1e:0f:8b:40:27:d7:ee:
96:a7:29:30:ce:90:2e:ec:7c:c8:28:f8:46:b1:62:e9:b1:e1:
1c:c6:87:b9:83:24:2c:72:a5:d8:c7:53:1a:42:39:8c:12:e7:
fe:2f:2e:77:f0:36:62:66:d2:be:62:6f:a3:85:37:c8:5b:b3:
89:ad:58:dd:33:14:15:79:26:d2:12:31:d4:bc:e9:bd:6a:5f:
f2:8d:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:24 2025 by rpki-client