Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: AzRNJJFCdzJOnGobHjl66tEgS9BnIRcPS2xHoQLk7nA=
Subject key identifier: D4:66:EC:92:B8:73:98:09:21:8F:EE:61:DB:2A:8D:5C:C1:22:40:A1
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 01992E5A54F8EFCE8E1AE88F069E7AA64401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1677
Signing time: Tue 09 Sep 2025 12:01:35 +0000
Manifest this update: Tue 09 Sep 2025 12:01:35 +0000
Manifest next update: Wed 10 Sep 2025 12:01:35 +0000
Files and hashes: 1: 1-eNX-zOFtjFclCSH0mTJdCSae98.roa (hash: M30Jnhsr3n3FbZbY3hov7cmuQb2xUsoReMhqFsTONps=)
2: MsrjwPiofwRbqxLYk1Ga7WSIbIA.roa (hash: IMwhFKCuLtTRw4YQ2OqrJF8QQPbmc6DZSTTcYhHXS88=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: yoaL6Tso6uWyDDYV/H2u32LR0ApH45L1hfM5Xi4+raE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:5a:54:f8:ef:ce:8e:1a:e8:8f:06:9e:7a:a6:44:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Sep 9 12:01:35 2025 GMT
Not After : Sep 10 12:01:35 2025 GMT
Subject: CN=d466ec92b8739809218fee61db2a8d5cc12240a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:49:da:f8:5c:5f:a3:5c:c1:bc:bd:32:4e:
3d:d8:f0:60:c7:de:69:34:9e:6f:4a:ce:b7:62:6d:
dd:56:ba:f1:25:6d:53:2a:ee:4c:a5:17:9a:d0:8b:
58:33:8b:21:a4:d0:c4:0e:4f:e2:c9:ed:a5:94:fb:
44:32:e7:e2:b3:31:16:c8:ee:f5:96:b9:35:86:48:
82:28:c7:fd:0f:72:3d:c2:b0:b8:2f:f6:c6:ed:9b:
c7:f3:35:56:2e:99:73:a3:c0:62:79:0f:09:aa:34:
3d:47:ac:b4:ab:b1:a0:5a:a4:f4:07:47:7a:93:23:
23:bb:07:db:7a:a9:c7:92:f4:bf:ea:92:d9:d1:2b:
3b:1c:70:cd:a0:c9:ac:6c:1a:99:8c:80:44:a5:91:
1a:e2:74:be:25:71:cc:26:45:e0:b2:3f:eb:8e:71:
bf:fb:17:1b:91:b0:57:ef:5a:32:61:cf:3c:77:ec:
ec:21:45:f8:af:0a:97:77:43:90:7a:35:87:66:e5:
b9:25:1c:e2:01:15:44:d6:76:47:37:39:77:f9:25:
26:0b:a1:56:87:a5:19:38:26:04:61:9c:cd:4f:79:
f0:2e:e1:fd:9a:f3:2a:53:8c:b2:25:6f:42:a8:60:
e4:44:83:47:37:79:2c:6a:e8:b4:ac:fd:62:d8:04:
ce:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:EC:92:B8:73:98:09:21:8F:EE:61:DB:2A:8D:5C:C1:22:40:A1
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5b:85:04:65:76:90:fb:24:09:23:ad:48:e0:a4:51:cd:96:
96:bc:ab:a7:7a:55:11:d0:00:36:41:03:4b:3a:a3:e6:dc:f1:
21:f2:46:04:0a:7a:84:59:c3:44:29:c1:de:a9:21:d6:3d:e5:
c8:13:dd:bd:cb:e8:cc:a3:31:f9:57:65:37:34:88:0c:df:39:
da:74:bb:93:e2:86:c2:3b:8a:85:73:c5:c9:87:31:16:3d:a9:
3a:e9:41:d0:72:4e:b9:eb:d6:5c:c5:4c:04:72:cb:fa:bc:37:
a8:f8:5a:5f:0a:3d:cb:83:61:15:b3:fe:05:92:cf:0e:4a:3e:
88:ea:10:e9:eb:2c:e1:95:76:5e:c7:12:bc:e0:3d:f6:79:e0:
0d:91:15:d9:4b:d5:b0:46:69:c9:8c:40:2b:13:fc:d9:96:e4:
93:d1:12:14:dc:6c:a4:6d:1b:a2:73:75:f3:60:8d:0f:1a:0a:
d3:ce:02:42:c2:1b:5f:d7:b5:ed:db:c1:0c:66:6f:d2:e9:b6:
7e:48:f0:37:c0:f8:22:64:f6:06:22:f7:3a:d3:bd:62:39:65:
70:e1:04:0c:20:84:a1:fd:bc:7f:b6:3d:d4:dd:86:ba:db:be:
72:0f:5f:f8:91:28:44:e0:c6:5a:ea:49:64:e3:cb:3b:dc:c1:
2f:f2:25:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:52:08 2025 by rpki-client