
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: MYITG9eHKtoo9mwy460VANInq8hAVdeWPCjcCUUkDRQ=
Subject key identifier: 04:43:8D:E7:CA:A5:77:13:26:2D:9B:AD:DF:AF:6E:F9:67:0A:BC:10
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 019922551C269F9D360297651FE266C54B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 0130
Signing time: Sun 07 Sep 2025 04:00:26 +0000
Manifest this update: Sun 07 Sep 2025 04:00:26 +0000
Manifest next update: Mon 08 Sep 2025 04:00:26 +0000
Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: ieKWqboxP2LJAoYaJfYo56k7xADaBD4rZTiNxA9XEwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1c:26:9f:9d:36:02:97:65:1f:e2:66:c5:4b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Sep 7 04:00:26 2025 GMT
Not After : Sep 8 04:00:26 2025 GMT
Subject: CN=04438de7caa57713262d9baddfaf6ef9670abc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:dc:79:8c:94:66:1e:e5:51:16:79:d7:3d:
6b:38:ac:89:33:d5:4d:8b:30:95:ac:c8:34:01:7b:
dd:4b:8b:97:8f:89:9c:e5:3d:7d:49:81:fb:67:5f:
aa:25:df:5b:14:dc:d7:06:ed:30:47:a5:b4:86:86:
a3:43:92:c7:8c:35:89:60:df:d7:a6:0b:4e:a4:f4:
7a:62:dc:a7:26:e9:c7:4e:8c:99:5b:b9:0a:58:31:
6a:6d:34:48:97:cc:19:ff:c9:78:8f:fa:90:64:77:
78:b6:ca:48:99:d0:d1:63:cb:e8:27:28:24:b1:43:
83:b0:9f:60:ac:dc:9f:e6:2c:7e:99:7e:91:c8:1b:
d5:22:8a:26:bb:3c:b7:76:9a:cb:a4:b7:16:f2:45:
f8:44:2a:59:fc:e5:64:18:bb:52:e3:16:15:49:ab:
17:73:b4:6f:7f:6e:fa:a4:fa:df:45:ac:21:d9:ed:
e6:ac:b8:9b:01:02:fd:09:61:35:7e:30:6e:1f:7f:
49:1a:ac:5b:24:96:e6:83:43:8d:1d:13:01:8e:77:
5f:94:b3:b5:21:12:5a:8d:f6:97:b8:59:ab:61:3d:
70:88:de:dd:4a:31:48:2e:76:55:b6:b6:99:9d:83:
9d:90:40:c1:5b:96:6a:40:13:b6:db:bf:bc:ff:99:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:8D:E7:CA:A5:77:13:26:2D:9B:AD:DF:AF:6E:F9:67:0A:BC:10
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:67:8b:02:a3:e4:74:8c:a1:63:46:38:21:89:7b:f0:ae:f0:
e6:d7:20:12:0c:28:fe:fa:29:4f:65:1a:4b:6e:54:a7:e7:8f:
1a:7f:f2:ad:62:f2:e3:59:11:65:e0:09:00:57:0d:28:81:46:
12:ab:ea:ba:f8:cd:e2:67:b4:60:83:5f:c7:6a:38:e4:a5:5b:
84:03:c4:ac:ca:e3:9c:b8:45:c2:d3:75:0d:8f:9b:55:12:e1:
05:1f:0e:26:a7:24:e5:6a:c9:9f:3c:84:15:38:2f:13:87:8d:
c6:10:b6:f0:2e:5a:5d:d4:0d:07:6c:0a:be:01:dc:e7:29:e4:
fa:89:43:66:e1:a9:26:83:91:74:33:9b:f3:6f:6b:c9:6e:3f:
0c:47:40:81:aa:03:cc:62:f5:b7:d2:7e:13:8b:55:5f:a5:92:
a9:b1:cd:a2:b9:b6:b8:f9:03:71:e6:38:91:ab:52:a2:e7:c6:
d3:68:7e:ae:27:23:8d:ae:08:b8:1c:4c:fa:3b:20:8e:2d:e8:
1b:6d:f6:e8:38:f2:76:3f:62:9b:29:5b:a5:b0:82:20:50:7d:
fc:a8:d0:2e:d1:41:79:0e:fc:9c:a4:cb:04:9f:8d:30:6b:e9:
0b:12:8d:d3:35:13:98:20:99:72:1f:38:84:cb:5a:3d:59:f4:
6d:91:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:45 2025 by rpki-client