Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: D0vyi+Snr6YSSkijIV6lHj5dDJr3hq8a7uTeE3jjb7A=
Subject key identifier: 0E:91:D6:E4:F2:C8:98:0B:0F:90:8E:61:9D:BF:26:E2:30:7D:46:B6
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 01992367C3DAB4C259F00C7C551CE6ECDAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0EA3
Signing time: Sun 07 Sep 2025 09:00:26 +0000
Manifest this update: Sun 07 Sep 2025 09:00:26 +0000
Manifest next update: Mon 08 Sep 2025 09:00:26 +0000
Files and hashes: 1: PCViN5XjjWy3uXa6yVs2Quk_6To.roa (hash: Aquofks2bcfd5azy6+IqavH7O37I4bc+/mKKyjG/YPU=)
2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: VQJTbDQhxb0hF4e8htbGHt7iA9mYfl4825yEVt7yL6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c3:da:b4:c2:59:f0:0c:7c:55:1c:e6:ec:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Sep 7 09:00:26 2025 GMT
Not After : Sep 8 09:00:26 2025 GMT
Subject: CN=0e91d6e4f2c8980b0f908e619dbf26e2307d46b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:10:60:c3:86:ab:e8:eb:c7:5c:5e:6e:00:
ea:bc:79:a4:2b:a4:f4:f7:34:d6:5e:8c:04:26:46:
3c:8e:a4:ad:d5:5f:70:52:c1:55:72:06:0b:bb:86:
eb:44:da:ce:f0:06:5e:81:c3:05:0b:08:b4:31:43:
9d:87:76:9a:72:25:28:01:9a:20:7d:9c:3b:04:4d:
dd:62:36:af:d5:2c:53:dd:22:5d:87:16:6a:62:1b:
38:7d:82:d7:67:6a:00:e0:1c:e1:83:a8:b6:bf:01:
ee:e0:78:44:6a:f4:21:09:d9:a3:c1:e4:3e:60:a9:
63:60:1f:87:e8:e0:86:85:b3:77:93:cb:d7:49:37:
71:89:02:c5:a2:94:f3:7f:d9:24:e0:05:cc:2f:b2:
17:86:8e:90:2e:97:02:f6:75:f9:ed:6b:e2:d8:d9:
f8:8c:96:8e:33:a4:3b:2e:cd:65:8a:60:22:87:4e:
8c:b6:01:cb:bc:e5:b0:9d:3b:d1:5a:a2:99:da:9d:
59:ae:96:de:a8:7e:b7:95:06:8a:11:8a:d6:f3:b2:
0c:23:e7:30:88:ae:28:ad:0e:91:88:79:1b:bf:ac:
14:7f:94:d1:3a:ae:64:4d:54:57:1f:eb:94:e8:4b:
ad:05:4f:18:08:cd:d1:43:60:21:96:1d:9a:81:70:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:91:D6:E4:F2:C8:98:0B:0F:90:8E:61:9D:BF:26:E2:30:7D:46:B6
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f5:42:92:ca:59:3b:f6:0f:81:29:6b:0b:59:96:c6:54:18:
ac:11:31:15:38:71:29:cf:5c:6e:a3:1b:67:98:4f:fb:02:73:
64:72:c8:6b:c7:14:46:d9:b4:dd:a6:97:47:85:5b:82:dc:83:
e2:cd:0a:4d:22:e5:82:18:05:51:8a:d1:37:0b:df:52:63:f6:
9e:78:86:0a:69:dd:b3:aa:b1:38:1b:32:fe:ba:0b:83:89:13:
5c:6d:90:0c:6a:de:6b:80:78:42:c2:74:c5:c6:c8:1b:3f:cd:
4f:50:cb:1b:1b:f3:be:e6:fb:d4:39:0b:bf:7e:54:15:8d:e4:
29:01:b8:f8:5d:fe:7f:c1:7d:66:ed:00:74:c3:d7:ba:7a:b8:
06:97:b2:0a:0b:1e:84:06:ca:46:b2:46:64:db:ad:0b:6b:a3:
45:5a:38:da:63:ab:5b:b2:0a:17:21:4a:19:9f:73:f4:f7:3c:
d5:7c:6a:cd:a0:64:e1:7a:7b:e1:26:a8:e0:4c:b8:ba:3b:db:
d1:5a:c2:c7:d7:8b:71:28:cf:38:1f:01:94:15:a9:cb:19:76:
cc:39:45:92:b0:4f:2c:f9:38:03:a6:01:35:b0:41:10:95:a7:
19:7d:e5:19:de:4d:47:2e:c6:fb:be:97:77:38:b2:93:ad:65:
da:38:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:20 2025 by rpki-client