Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: MJSbGFeiFkyrwZbk7HKjrsQCs68Prk2wiGi7SDCc+og=
Subject key identifier: 8D:60:E2:29:F8:5B:57:55:BA:75:C4:10:45:A5:91:75:22:FB:79:19
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 0199228D336998314F20BD78F58CF1431A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 05:01:42 +0000
Manifest this update: Sun 07 Sep 2025 05:01:42 +0000
Manifest next update: Mon 08 Sep 2025 05:01:42 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: CuUGJeN1sHbmcOre/VxWHFHpRzCpXnHlgyLzRVK9z3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:33:69:98:31:4f:20:bd:78:f5:8c:f1:43:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Sep 7 05:01:42 2025 GMT
Not After : Sep 8 05:01:42 2025 GMT
Subject: CN=8d60e229f85b5755ba75c41045a5917522fb7919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:d2:72:d6:ea:26:cd:03:ba:c0:3f:04:42:
ee:25:7c:64:3a:8d:e7:b3:07:f0:f4:41:6f:63:f1:
f9:86:37:15:62:8d:2e:b5:c5:8d:1b:9d:99:0b:95:
60:66:46:88:cb:c4:86:e3:01:ad:db:a8:92:c2:41:
03:2b:99:1a:28:49:01:c2:cd:86:b5:07:09:60:1b:
c2:fd:e9:5d:d2:e7:00:c4:f4:02:73:e2:83:29:74:
38:8c:21:71:e9:08:0c:08:1f:6b:ce:c7:f1:1c:5f:
ac:6e:56:57:9e:13:f9:57:26:79:78:b1:5d:13:ce:
d3:74:24:e1:2d:41:cf:aa:fd:e2:7e:1a:4b:42:51:
3d:6d:e1:03:81:89:4b:cf:c0:81:2a:29:fb:c1:4a:
29:a2:6d:49:61:e3:e9:36:4a:f1:29:ea:3c:15:f0:
86:a0:9b:f8:46:b5:f2:cb:27:34:e3:2a:3b:b6:b4:
9e:84:65:d1:c7:30:0a:9f:63:36:b4:10:f5:42:e1:
9a:d0:55:f1:11:8a:07:99:bd:bf:5d:c8:4f:10:9e:
ec:86:24:c4:93:8a:2d:eb:aa:c6:f7:8e:9d:82:1c:
21:96:3a:7d:5d:6e:cb:76:67:2e:59:0c:05:e9:ed:
22:d1:69:29:3c:53:06:ad:6d:e8:7d:64:a2:61:21:
0d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:60:E2:29:F8:5B:57:55:BA:75:C4:10:45:A5:91:75:22:FB:79:19
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:91:10:96:10:c4:2a:cd:84:a7:00:53:47:8c:27:8a:ba:58:
69:2b:9d:c8:db:60:60:02:50:f8:05:46:88:33:e7:04:23:cb:
cb:77:fd:0f:04:ab:e8:af:3c:6a:09:c2:14:cb:6e:6f:40:7a:
11:b1:17:d6:1d:d0:d7:d3:7e:f6:d2:07:82:7d:c5:b6:b5:c0:
6e:28:48:2c:2d:17:a4:42:2b:bc:d2:81:51:3a:b8:52:c1:0b:
99:56:03:f6:66:48:a3:80:76:3c:85:58:c7:ac:ac:d4:2c:ab:
2d:f8:26:00:b5:3b:ec:50:5a:dd:0d:1c:44:a1:58:ee:90:bb:
5d:31:9e:e0:b7:0c:a0:e5:66:1a:16:f9:41:9d:26:c5:a4:c9:
56:c7:d1:20:e1:32:96:b2:bd:9b:c0:4c:88:e1:d0:51:63:6d:
de:c1:51:0e:7c:20:a1:35:fc:30:fe:5b:8a:b9:d2:cd:72:00:
c6:8c:76:00:4d:10:aa:a5:26:be:30:36:49:27:ff:b2:c5:28:
7f:a5:1e:c0:a9:97:5c:40:53:cb:74:af:3a:0d:36:23:85:b4:
55:9a:b5:ca:a2:73:ff:9a:10:3b:47:40:da:8d:e1:39:8d:cc:
75:16:cb:29:2a:f7:8b:8c:9b:9c:92:e8:3b:32:38:bb:ff:e0:
1c:ca:08:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:23 2025 by rpki-client