Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: VGscuKeuIeWjcamMM0i8ctb7vyPswHAWeg5iaT829sY=
Subject key identifier: 8A:B8:E3:24:31:E4:3F:03:94:32:62:D8:54:8D:3A:CF:C4:58:19:44
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 019922FA39DBE59C1F434F6DBE551186D826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 07:00:48 +0000
Manifest this update: Sun 07 Sep 2025 07:00:48 +0000
Manifest next update: Mon 08 Sep 2025 07:00:48 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: uQmFlOB4vQRRBBdm3e00D2IwI+C7X1zBtPrzATQAmYE=)
2: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (hash: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:39:db:e5:9c:1f:43:4f:6d:be:55:11:86:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Sep 7 07:00:48 2025 GMT
Not After : Sep 8 07:00:48 2025 GMT
Subject: CN=8ab8e32431e43f03943262d8548d3acfc4581944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:26:7b:c3:62:59:fe:64:6b:f1:61:4f:e9:
f5:27:a5:e9:40:54:00:e9:b9:c8:a5:70:19:02:d6:
c6:46:d0:2b:28:d5:5b:e9:50:f2:03:51:5d:db:3c:
90:55:cb:47:5f:5c:b1:4a:2d:a8:95:c4:21:8d:78:
b5:4a:12:6b:08:86:19:1c:3a:93:17:f8:f3:75:3f:
de:87:a1:ac:da:d7:b6:70:5d:fa:cb:9c:59:84:71:
84:e9:5a:8e:94:ce:b8:e6:b1:e4:21:51:ce:ad:13:
7b:e4:58:17:cd:48:41:8b:87:84:b7:e6:72:22:d9:
46:e1:02:32:2e:64:83:01:2e:8c:be:13:03:13:2d:
1d:bf:70:df:1b:51:fc:18:30:22:a1:26:01:e3:01:
18:04:c4:40:4b:16:25:a0:44:62:f9:8f:17:c3:b4:
38:1d:46:fb:21:23:3f:c8:8a:9c:43:68:73:a1:4e:
56:0a:16:3d:ef:93:2c:17:82:a3:92:39:a2:6b:a1:
44:1a:ed:7c:ae:a4:d5:33:64:59:99:dc:02:a1:30:
fb:34:7a:3c:a4:de:38:66:93:ca:7c:ce:34:51:b2:
fd:e8:6c:3a:3c:03:b5:0d:48:1c:87:f0:73:29:39:
d7:64:81:61:55:74:c4:22:75:ea:10:20:9b:58:71:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B8:E3:24:31:E4:3F:03:94:32:62:D8:54:8D:3A:CF:C4:58:19:44
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:da:30:cc:c1:43:f8:53:24:ab:f3:97:a3:01:ff:a3:6d:90:
8a:1f:84:ef:d2:22:2e:89:63:fe:56:b3:19:d3:7f:04:78:35:
1d:d5:70:c6:45:c7:37:a0:15:3d:22:d0:3a:06:ae:9a:29:7a:
9a:d0:ab:29:ab:88:fe:87:63:61:09:02:dc:bb:a6:db:d2:1f:
9a:9f:ae:fb:a4:79:a5:e3:65:42:04:5e:3f:e8:3e:95:f8:70:
3c:6b:64:b4:bd:d4:98:2a:46:d1:c4:ee:45:b5:9b:91:b4:df:
a9:22:7e:29:6f:ed:76:9d:81:98:8d:10:57:8f:82:6f:69:03:
ff:b7:b6:4a:b5:4f:9e:66:f1:80:1c:52:ee:fa:85:b0:af:95:
0c:6a:36:fc:04:93:3e:18:db:23:9e:e6:ef:b4:ca:3c:5f:bd:
e7:b3:1b:08:99:a6:4d:fd:9d:ac:31:b2:f5:85:97:58:c7:e8:
69:53:64:22:0f:4d:49:c3:6d:d3:58:c1:2a:24:d6:6e:a0:57:
61:76:e6:98:e0:62:7f:35:9c:6a:cc:e8:1f:3e:65:d7:3c:3b:
90:2f:c9:41:1c:da:e9:de:de:eb:89:4d:5e:6c:6d:b2:b0:c0:
5a:27:6a:1e:17:61:a1:0c:ac:41:bb:bd:94:e4:68:f0:42:e8:
72:0d:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:42 2025 by rpki-client