Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
File: xYe5zadWA-sNnjdxZ79-DI5EBAM.mft (raw, json)
Hash identifier: 5DDtbHw/TDOuKogTnaieTxiTYdsMhf7yDe0rsrFulGk=
Subject key identifier: B1:29:89:1B:8E:26:C1:D3:53:57:7B:1F:93:FC:D5:4B:6A:DD:EF:09
Authority key identifier: C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
Certificate issuer: /CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Certificate serial: 0199228D2609FFE6EF0E6E4A1FC90E11DA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
Manifest number: 0F9E
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: 2bRBlMS8mkEOsT7iLZp1HMc84Xo.roa (hash: CRan8iZGqQIXvLKVDuE31EVqd8lIF+Eg5+VWJIeFz/I=)
2: xYe5zadWA-sNnjdxZ79-DI5EBAM.crl (hash: LaGg3KsKqmTTFjEJGbzHoQ/e+w5OGNl5PLTb5cEdBDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:26:09:ff:e6:ef:0e:6e:4a:1f:c9:0e:11:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c587b9cda75603eb0d9e377167bf7e0c8e440403
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=b129891b8e26c1d353577b1f93fcd54b6addef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:e4:fc:60:81:60:e5:dc:d3:f1:7e:84:d1:
4b:da:56:5e:4a:26:d2:d5:7a:50:56:14:a0:56:fc:
10:00:ce:28:8f:e7:73:3d:1a:53:19:b4:bb:c2:73:
f0:97:86:ab:d2:0d:96:82:32:27:7e:9d:20:ba:10:
bd:72:68:1e:17:66:e0:43:2d:92:5c:9f:8e:04:33:
b0:e7:0e:b0:72:f1:64:6c:47:36:21:36:d7:1f:96:
7d:a3:6d:c3:42:01:f2:d1:ad:4a:12:f7:38:a4:a1:
1d:a4:f2:92:70:a6:5a:bc:e2:65:fa:c0:15:09:33:
d6:f9:f7:8b:c8:94:32:c0:7c:12:f9:f4:5f:5d:74:
04:2b:b8:fc:20:d7:83:26:6a:06:4b:49:6c:c6:5b:
69:05:14:4d:8d:e4:a1:5a:c3:8a:82:54:15:92:74:
c4:e1:75:e7:81:2c:6a:1e:62:de:1f:cb:2d:34:a5:
c2:d0:14:78:f8:9a:ab:ec:59:4d:89:64:48:ec:f0:
01:83:04:e6:19:e2:00:17:48:14:25:e8:f1:18:86:
e6:a4:2a:c4:01:e8:da:44:2b:27:f3:7c:48:cd:7a:
9a:e7:4b:2a:37:f7:36:b9:9c:3c:23:af:3c:25:7f:
5f:78:28:b7:aa:62:fe:3c:ec:08:8f:f0:20:21:df:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:89:1B:8E:26:C1:D3:53:57:7B:1F:93:FC:D5:4B:6A:DD:EF:09
X509v3 Authority Key Identifier:
keyid:C5:87:B9:CD:A7:56:03:EB:0D:9E:37:71:67:BF:7E:0C:8E:44:04:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYe5zadWA-sNnjdxZ79-DI5EBAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/50d48e-494f-4d14-9f05-e753cf768c14/1/xYe5zadWA-sNnjdxZ79-DI5EBAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f2:53:52:ee:75:69:06:87:5f:86:f4:a9:14:bd:07:08:5b:
ba:c7:5e:43:df:21:d6:06:ee:08:0b:49:a3:04:c3:67:dd:ac:
07:f7:94:7e:8b:77:07:0e:d7:b7:64:7f:5d:d9:d5:f7:61:27:
7c:75:79:a3:8f:d4:87:24:26:e1:94:ba:e2:80:be:2f:02:75:
27:93:2e:1b:da:28:7a:3c:43:05:e0:e4:2d:7e:40:49:73:a2:
f0:c5:58:f2:f6:b5:d7:c9:a0:bd:da:aa:74:1c:76:21:94:3b:
c7:7c:d8:13:b4:50:c7:61:84:28:ec:ff:c8:4e:a2:1c:f1:98:
6b:94:52:33:f2:9a:14:f4:f2:41:b5:6e:1c:8e:e8:a0:90:e7:
b1:37:3b:ac:5e:18:28:e5:de:46:5b:3d:e5:ae:ed:4d:77:e6:
fb:89:46:37:5b:a7:5a:b4:f0:b6:da:13:89:4e:cb:66:38:2c:
93:f1:75:94:1d:65:a5:e3:30:4d:21:cb:45:33:b9:8e:f0:6b:
57:68:11:fb:d2:ca:ad:60:c0:03:7e:06:04:b6:db:3d:47:21:
a2:0a:17:0e:06:e4:b7:36:ee:27:da:1d:a9:d2:d1:42:52:ab:
99:14:44:2b:bb:65:79:77:17:ec:39:3e:60:36:98:b8:17:df:
85:e6:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:50 2025 by rpki-client