Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: zfMLlyL2CoWAqpP7as7cRnrMu1/UAv0R5f9faq3SdJY=
Subject key identifier: 30:4C:62:24:8E:1A:3D:8C:5D:F8:9C:0D:CC:EA:27:C0:17:FF:7D:50
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 019917645EBDC8C40E714785F1022663224A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0D53
Signing time: Fri 05 Sep 2025 01:01:17 +0000
Manifest this update: Fri 05 Sep 2025 01:01:17 +0000
Manifest next update: Sat 06 Sep 2025 01:01:17 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: 3GizdQmbm2Fl/R67LaVKc7U8tk50075c81hUXKepeno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:5e:bd:c8:c4:0e:71:47:85:f1:02:26:63:22:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Sep 5 01:01:17 2025 GMT
Not After : Sep 6 01:01:17 2025 GMT
Subject: CN=304c62248e1a3d8c5df89c0dccea27c017ff7d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:e3:36:29:66:99:46:b7:d2:b2:3f:5e:f2:
eb:01:69:18:86:9a:2c:33:f0:4a:23:65:64:a4:87:
53:c2:3a:62:ea:e0:58:e0:30:5c:25:e5:f8:73:82:
b6:74:5d:37:71:f3:7c:61:a9:25:b6:64:3c:51:48:
45:36:b1:c9:af:d0:40:18:97:0c:82:ef:88:15:46:
ad:cb:93:01:3e:b8:5e:68:08:f6:4f:bb:99:eb:a6:
f6:58:44:1a:27:6e:70:4b:ee:ee:84:ed:04:87:32:
d7:ce:2c:02:ae:4d:bb:eb:e6:9f:0d:e1:81:8d:1c:
b1:58:72:28:0a:95:7c:0a:7a:79:19:e2:b1:00:e5:
38:b9:8e:f0:b6:69:5c:2f:49:93:3b:2c:0b:4f:34:
bc:50:6c:ec:81:9b:af:c7:fa:5f:2c:d0:f9:20:44:
cb:17:ed:cb:e8:74:c1:54:39:79:5f:aa:dc:cb:8f:
c4:92:13:e1:b1:9e:ae:46:ba:6f:ed:60:18:a2:b3:
8b:ec:25:ac:bb:85:2e:0c:b0:39:25:d2:0c:20:9a:
42:42:12:53:f9:37:df:d5:86:cb:a0:b7:be:a1:18:
4b:11:84:e3:29:d8:d4:d3:43:a7:fa:61:1c:8c:99:
40:89:10:08:aa:3c:41:7c:99:3a:df:86:18:89:fb:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4C:62:24:8E:1A:3D:8C:5D:F8:9C:0D:CC:EA:27:C0:17:FF:7D:50
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:87:01:12:e6:8f:cd:7c:e7:ab:5f:7c:4e:a0:e5:42:a8:b1:
af:7f:a8:5d:b2:ed:d9:d9:24:b5:92:69:cf:5b:8c:bd:ae:07:
85:e4:98:a3:54:52:53:2e:15:9c:b3:e1:f1:7d:4e:15:6b:b3:
61:a7:6e:61:76:76:d5:16:30:fe:08:09:9c:90:b4:4d:d5:9e:
9e:14:5b:58:38:37:bf:74:76:a8:b2:24:ad:8d:71:3f:77:f1:
74:49:68:f1:a6:3b:ee:e1:6a:67:b3:5c:66:9b:2d:6e:ae:87:
4f:57:47:58:0e:4c:b4:b1:35:9f:cb:fc:42:48:2c:44:21:01:
52:a9:d4:cd:51:59:a0:a6:9f:e4:8c:40:5f:38:08:4a:d3:8a:
c5:cf:01:35:fe:ad:ff:e9:26:4b:77:9e:db:de:b3:40:bd:2b:
18:5e:d3:42:f1:5e:2b:58:99:1e:21:f0:bc:eb:56:27:e1:c3:
c3:1b:be:64:59:e7:f9:a9:c4:92:9d:ba:36:c0:a7:69:23:37:
43:7d:75:36:3c:33:eb:f4:a5:45:e3:9f:73:e5:4c:42:69:2e:
9f:92:7c:c9:a3:70:3a:ca:ff:4c:9e:96:4a:a9:ff:0b:b2:e7:
56:5d:27:23:a7:eb:37:e3:e6:f7:53:e7:43:7e:40:fc:31:df:
96:49:b4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:53 2025 by rpki-client