Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json)
Hash identifier: rDIf5AbT+Ro15ChmVrEtQ6FNjXBAf0BfTu5/DkNDzR0=
Subject key identifier: 13:D0:7A:F4:22:B4:03:EB:5C:06:C1:05:28:55:8A:CD:E7:DA:07:0D
Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Certificate serial: 019922FA86E560874C3D772949AFBFA4D1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 07:01:07 +0000
Manifest this update: Sun 07 Sep 2025 07:01:07 +0000
Manifest next update: Mon 08 Sep 2025 07:01:07 +0000
Files and hashes: 1: HBQ9odudt8FtC2hg2PdPFEmL6sY.roa (hash: qLOlhGmFNavd+EfWsRToyvlmrGX+k5BkUmneKAiMnB0=)
2: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: hhqEORtOjQGq262+rRQgWFAJyqeRm2n4iYONhxLQq4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:86:e5:60:87:4c:3d:77:29:49:af:bf:a4:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb
Validity
Not Before: Sep 7 07:01:07 2025 GMT
Not After : Sep 8 07:01:07 2025 GMT
Subject: CN=13d07af422b403eb5c06c10528558acde7da070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:af:f0:cf:30:91:f3:88:2f:0f:e5:bc:0c:
f9:1c:5c:41:89:b4:c3:c4:35:55:87:b4:4d:0c:7d:
20:14:df:02:88:4b:42:32:26:95:2f:3f:6e:43:9b:
c7:0f:21:0c:27:a5:00:8c:a5:16:a3:b0:f2:8e:21:
f0:71:27:b3:d3:11:d3:c0:30:da:1b:e4:40:cc:e8:
88:a8:df:31:24:51:ce:9a:da:26:8b:5a:91:1b:1e:
36:77:fd:f0:12:ff:2d:5a:7e:5d:89:1e:a7:97:89:
8f:0d:54:d1:f3:7b:95:c2:d2:85:ce:d4:35:94:10:
98:94:77:8c:46:ab:ea:df:fe:f7:f9:18:1a:5c:e7:
8f:91:4c:17:1c:b8:cd:18:38:51:f3:63:56:09:8f:
88:f5:84:ba:9e:a8:cb:a5:b5:9f:62:32:de:d5:91:
99:c8:0f:c4:df:c3:ee:4f:cc:9c:93:84:81:f3:4f:
e5:10:02:b7:46:23:36:a6:4b:3b:a2:73:14:32:7d:
3d:61:75:d9:10:54:2b:ad:1a:c5:f2:4a:31:3f:77:
42:0f:2e:eb:10:fe:c8:ae:a5:d1:57:bf:0e:29:fe:
8d:ed:18:d1:87:20:af:8f:52:98:be:36:15:a5:0f:
cb:69:ee:af:c6:43:6b:4e:9e:10:d0:66:a9:8b:19:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D0:7A:F4:22:B4:03:EB:5C:06:C1:05:28:55:8A:CD:E7:DA:07:0D
X509v3 Authority Key Identifier:
keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:7f:d6:ba:c6:26:51:c7:2a:85:12:67:27:dc:16:c0:88:
be:e4:f2:c7:c9:10:fb:0f:ac:b0:78:fd:51:e1:de:ac:89:ae:
87:08:d5:15:e4:df:df:d5:b8:50:44:d2:4b:0f:d8:45:d9:2c:
b3:5c:c7:cc:26:ea:43:df:e5:0c:42:90:84:55:e3:2a:41:99:
77:df:0e:97:6a:18:62:0f:0a:73:5c:bf:fc:15:07:d1:9b:e0:
24:e0:d1:44:22:3d:31:93:92:cd:16:72:cf:5c:fe:38:29:7d:
78:fd:6c:3f:e0:8d:02:75:61:8d:0c:5c:74:ce:21:cd:ce:15:
fa:53:58:0a:e6:c0:24:36:c3:cb:0d:dc:a0:a9:06:95:d1:77:
2d:6a:bb:e0:3c:b3:46:89:12:78:3f:49:c5:8d:f4:98:58:fa:
45:74:7e:1e:57:b1:2a:e5:df:bc:74:1f:9d:22:fa:11:bb:db:
9d:1d:ad:fc:36:2a:3d:80:ee:76:88:e9:a0:ca:18:be:92:18:
1d:63:44:33:ab:fe:5c:ca:8e:92:0a:74:de:a9:a7:36:9b:c6:
c8:b9:44:16:26:27:87:98:94:ca:64:1e:f4:03:c5:69:e9:8e:
f8:cd:0b:06:a3:38:a9:f3:38:07:39:4b:cf:13:68:6e:d6:ff:
52:d1:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:37 2025 by rpki-client