Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: Uov9vgA1zijGjpJpu4x80Eyz0EfNm+kWnl5MXFSPLwY=
Subject key identifier: 2A:64:07:D2:F5:CC:F7:70:94:94:55:7E:7E:FF:6E:EB:A2:F2:02:D6
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 019931FF68993316BA5C52283C84CA47ADA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 0559
Signing time: Wed 10 Sep 2025 05:00:45 +0000
Manifest this update: Wed 10 Sep 2025 05:00:45 +0000
Manifest next update: Thu 11 Sep 2025 05:00:45 +0000
Files and hashes: 1: 02wqSv6S3QfGQclsARr7QXNvdWI.roa (hash: blfoT2HbR+GD9/4BT0/OCiD+iemp7TQrPXABrjQFnJw=)
2: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=)
3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: SPw8TiYXUIESD7tIkn+52ajTHG5MI5DMyZLLkDKbc84=)
4: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:68:99:33:16:ba:5c:52:28:3c:84:ca:47:ad:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Sep 10 05:00:45 2025 GMT
Not After : Sep 11 05:00:45 2025 GMT
Subject: CN=2a6407d2f5ccf7709494557e7eff6eeba2f202d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:09:52:0c:6b:cb:85:96:93:ad:0e:dc:fc:
c8:b5:19:ad:19:f5:6a:53:7f:f4:60:b4:6d:88:45:
14:24:78:c1:f7:26:d7:cf:c0:51:e3:51:33:dc:43:
c6:9e:fc:4f:8f:5a:e4:20:9e:7c:59:a7:0f:31:91:
af:36:b3:45:3a:99:d9:23:36:66:ab:46:74:84:ce:
ae:0c:70:6d:05:45:24:6a:24:70:a7:56:9d:3c:2e:
33:14:9b:f5:28:59:64:7a:98:6c:89:a0:70:c0:6a:
51:b9:86:02:4b:97:18:df:95:44:8d:d8:67:b4:d9:
24:f5:98:0d:b8:0d:62:71:b2:60:c6:76:8d:f3:6d:
3a:a6:6b:94:a2:f5:ae:e0:8a:91:72:e6:7c:90:7c:
a0:9e:3a:27:96:72:64:58:16:c9:21:01:da:56:b0:
4e:06:b2:1f:b4:0d:b7:7b:1d:82:21:bf:cf:ca:50:
70:84:8c:11:f5:b6:7f:d9:b0:37:47:61:3d:d0:ef:
b4:3d:9b:5b:c4:26:93:60:9d:8b:c7:40:35:33:b6:
b5:12:96:ce:b1:4b:fb:24:34:c1:37:52:c0:a3:4d:
1d:a1:02:48:66:72:22:dd:cb:bb:a1:2a:16:14:4d:
34:fb:ae:f8:fa:16:07:d0:ca:32:39:d5:d5:39:ea:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:07:D2:F5:CC:F7:70:94:94:55:7E:7E:FF:6E:EB:A2:F2:02:D6
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:41:2b:56:51:0c:c5:bc:52:3b:01:37:89:cf:18:f3:ff:a7:
1a:00:91:c0:1b:df:28:84:87:07:a3:01:31:3c:96:4a:96:aa:
d8:e1:bd:b2:bd:c0:e0:e5:2a:1d:09:9f:51:12:e6:e4:97:30:
1f:53:c3:e5:10:2e:66:70:21:26:b9:84:f9:80:ab:f2:2f:94:
20:1d:28:ac:6e:f6:b8:e4:ad:23:ad:90:8e:8e:bc:67:fa:d5:
28:bb:a0:8f:5e:b7:a7:a1:04:f5:07:69:94:d8:52:63:5d:15:
67:34:9c:20:8b:8f:96:c0:b8:c1:ea:24:cd:6d:a0:e1:71:6d:
38:24:89:da:df:8d:b9:39:65:d0:38:54:05:ce:ab:28:ac:b9:
d4:1d:1f:21:80:83:47:3e:71:2e:3a:44:ba:80:75:48:b6:7f:
33:83:31:63:ca:d8:fd:57:9a:05:ad:68:c7:7f:ba:82:d6:3b:
ac:a4:c9:97:2e:c0:20:9b:9e:09:df:7c:ec:d0:db:1b:06:4b:
f4:94:e5:24:2d:4f:62:0b:6b:a9:fe:d6:b6:ef:e6:2a:0b:83:
5c:39:9a:32:da:fe:90:e8:24:bc:a2:1e:ff:9c:c2:82:2b:f1:
13:6c:7e:23:6f:98:e8:30:de:c7:9e:7e:bb:99:13:2b:c7:1b:
dd:cc:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:08:45 2025 by rpki-client