Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: EOpVHSSEQidqWKZg6A9eqS5KOO3NnJHCgsb9tRmVzGk=
Subject key identifier: 7E:AE:CE:96:B3:2A:91:7E:27:76:0B:56:E7:7F:CE:46:1D:40:05:ED
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 01996435335E53647A8408C0C294848DE6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0DF3
Signing time: Fri 19 Sep 2025 23:00:32 +0000
Manifest this update: Fri 19 Sep 2025 23:00:32 +0000
Manifest next update: Sat 20 Sep 2025 23:00:32 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: GJnx5RPBMJKIbfExoayjHsSnOKf6pG+BEwW2HwnFq3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:64:35:33:5e:53:64:7a:84:08:c0:c2:94:84:8d:e6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Sep 19 23:00:32 2025 GMT
Not After : Sep 20 23:00:32 2025 GMT
Subject: CN=7eaece96b32a917e27760b56e77fce461d4005ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:ba:c8:23:9a:f9:71:33:87:a8:2a:0d:8b:
12:f2:ef:2d:14:3f:5a:82:8c:68:b6:b7:3c:cc:fd:
a3:ab:95:16:3c:50:a1:20:e7:84:dc:3e:9b:2d:a0:
35:dc:17:dc:e8:67:8e:05:ad:f8:c8:bd:d1:82:5d:
e1:78:db:70:9f:e6:55:b4:e5:eb:73:96:5f:b4:cb:
61:ed:78:24:27:62:0c:46:bf:47:87:df:04:38:cc:
13:a3:1e:af:9d:04:c1:23:30:2b:06:27:97:71:72:
38:e9:7d:00:be:2d:3d:04:a4:c0:f2:82:fa:2b:9b:
97:78:f7:bc:37:63:39:6e:ac:74:b9:13:4b:0d:f6:
46:84:29:2a:56:58:72:90:55:fa:4c:44:b7:60:28:
f2:7c:c3:f2:0d:09:13:c8:d6:de:ff:6a:ed:82:97:
35:e6:47:9c:ca:43:48:a5:23:8a:82:ab:e4:b3:fd:
05:52:56:6f:39:11:8a:e3:58:79:16:a3:8b:07:9c:
8e:9a:ea:1a:41:38:a3:c0:9b:4a:ad:8a:e7:44:59:
9b:8c:b1:10:06:1e:6f:8a:d1:41:53:d4:8b:8f:07:
26:46:b6:d0:0c:8f:4f:4d:d3:97:71:62:f1:65:2f:
08:b7:66:b7:27:ad:f5:fc:7a:bd:1d:64:a9:54:a0:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:CE:96:B3:2A:91:7E:27:76:0B:56:E7:7F:CE:46:1D:40:05:ED
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ad:10:66:a4:0d:75:ec:2c:02:28:5b:61:05:34:bf:1d:ca:
4c:49:18:c2:f3:72:bf:b8:d5:21:22:24:da:e7:a1:49:da:40:
7b:24:e1:90:2b:f9:83:6d:e9:30:ff:13:8a:e1:d3:de:80:3f:
64:6a:18:ef:28:47:a9:4e:d8:c2:ae:28:50:f7:f1:f0:3d:52:
06:d8:d6:75:1d:36:74:bf:ef:31:88:cf:8e:92:25:a8:95:2c:
09:b1:f2:9b:7d:ba:f2:68:4a:f7:d5:7f:6b:24:96:c8:33:1e:
12:1f:af:db:4d:46:26:80:ca:e0:fb:04:89:f1:09:10:a6:ef:
bb:eb:1b:9c:29:6a:c1:74:e8:ed:24:57:44:ce:af:a7:ed:70:
da:76:5f:27:71:09:c2:3c:37:f3:d8:75:8b:cd:01:a6:7a:12:
b8:30:bc:36:74:d7:c7:e3:d0:a3:a8:e8:3d:35:6f:de:95:0d:
d2:6b:d6:ba:d1:54:49:82:db:db:5c:c9:db:6f:88:aa:cf:fb:
63:4c:19:37:d9:fc:79:1a:45:d5:b9:bd:a6:83:c3:76:2d:04:
5b:30:4e:15:63:43:b9:b1:a8:55:61:45:a9:0d:f4:08:e6:08:
2f:6b:03:98:62:ea:c8:b1:27:73:e5:2d:31:cb:20:b3:67:37:
d2:0c:5b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 09:21:09 2025 by rpki-client