
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier: dgMw1BWK9T+xW9Y7hq/a8QCgDzcRPj3lw+UVDvedgS0=
Subject key identifier: EE:45:3A:90:FE:83:0D:32:B5:AB:91:BB:79:EF:5E:CB:C0:EE:41:33
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 01995530266DB7C1913B59FCBDD17164CCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number: 1003
Signing time: Wed 17 Sep 2025 01:00:42 +0000
Manifest this update: Wed 17 Sep 2025 01:00:42 +0000
Manifest next update: Thu 18 Sep 2025 01:00:42 +0000
Files and hashes: 1: 8TUbOWgMpKECDjHTg1j3puZ-Oj0.roa (hash: p4gaip18bX+lGbj9ZddfSE6WP6jiV9uHndZOy2SGtcc=)
2: AxvZFZvFTyXmTJp4vwKjL5P7BJA.roa (hash: DT207lrgFqp9k/8o8ytERsNd+6+ux/7h7W27NxLgDyI=)
3: PDXR81HWxc4LmZz0o4rlzuBkq-k.roa (hash: pGbVknYLItFYYXOLGoW5IyrgdhcVtFImvBhB0wZtkqs=)
4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: yWmPWqMO01tj6wKwxxU4UYOKRUy+PmW3ak1PhZ0Ipu8=)
5: zWVlVmkEB7rMguHla-ob06L-eJg.roa (hash: cPGHTFy9v1aoyHFUZz9UKBWfLnLNl1qFFA0xx+LRhc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 18:48:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:55:30:26:6d:b7:c1:91:3b:59:fc:bd:d1:71:64:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Sep 17 01:00:42 2025 GMT
Not After : Sep 18 01:00:42 2025 GMT
Subject: CN=ee453a90fe830d32b5ab91bb79ef5ecbc0ee4133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:ff:7b:89:1d:9a:5f:53:81:21:3d:f2:16:
04:b3:a8:7f:d9:fa:fb:e7:ad:5c:78:61:29:94:9f:
6e:4f:6d:4f:52:d7:34:51:cf:d8:cb:01:bb:3a:84:
87:b0:37:2b:5b:6e:40:1d:a3:5a:bc:15:f9:d8:a0:
eb:20:e2:b8:13:38:2d:9b:db:91:a8:f4:3e:c5:bc:
04:49:5d:7a:5a:ed:b2:83:48:04:cd:60:92:c2:2b:
b0:4b:f1:23:3c:0f:dc:ed:1b:17:da:3a:23:f2:a7:
03:1a:f9:8d:78:44:27:2b:2d:76:fb:02:88:fb:fa:
6b:52:4c:f2:c6:57:e2:dc:d7:a4:29:45:fb:86:0f:
2b:c7:47:d7:65:a4:cb:06:50:75:ab:50:59:3e:63:
d5:c8:e9:88:a4:72:5e:b4:41:bf:41:8e:6a:33:90:
62:2a:37:fa:2c:3f:cc:eb:ef:54:22:74:d9:d4:4e:
34:8a:dd:cb:33:21:9e:9c:f5:8a:06:7e:f4:8f:2f:
92:7e:26:0d:69:ae:c3:4c:60:d8:b4:6b:4c:17:9f:
c1:94:75:8b:7b:20:76:63:35:f7:e1:7e:81:86:73:
48:7d:b7:ab:81:e1:af:8f:21:6e:12:95:2d:43:89:
3c:ae:62:97:c4:7f:39:16:1e:3d:60:a8:f9:c7:06:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:45:3A:90:FE:83:0D:32:B5:AB:91:BB:79:EF:5E:CB:C0:EE:41:33
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:45:d7:92:40:d8:8a:ff:07:0b:95:76:49:41:09:60:57:
a7:5d:95:c9:59:d4:f5:72:64:25:15:29:ce:fa:10:fb:07:8e:
26:28:f6:00:3e:cf:b0:6e:46:e1:73:83:1f:f7:2d:60:d3:4a:
db:fd:76:23:a5:c1:b3:55:9f:7a:ef:a3:fe:97:8b:cf:37:fa:
26:4e:4b:08:a2:1b:72:79:c5:59:e2:43:2c:c7:d2:d5:f6:65:
d5:f3:1b:18:c3:12:a5:a2:c1:65:12:3b:3d:28:98:17:a9:a2:
45:3b:81:2e:13:d5:c2:b4:04:83:25:75:c9:32:71:5a:46:45:
e3:39:6c:93:0c:85:98:69:8a:f1:0e:6c:21:a6:41:1d:c6:18:
4e:6e:14:ed:f0:8c:79:cc:8e:ed:f8:79:c4:29:c0:1a:97:a4:
1b:90:5d:90:6b:61:03:1a:52:6b:bd:23:98:93:03:1d:98:c9:
f7:80:0b:f1:d4:11:af:6a:32:07:d9:71:95:cf:55:a8:39:a5:
50:eb:08:72:cf:51:0f:0a:ab:a9:e9:bd:2e:07:68:df:5d:ef:
2b:04:5e:dc:6e:89:fa:41:90:6e:5c:0b:55:f8:e0:6e:fa:2d:
25:64:da:47:f8:88:5d:12:1d:a5:44:a4:73:d2:df:11:d0:ce:
24:97:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 02:47:37 2025 by rpki-client