Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: UVkERnJSzrjpRyewwpmroDVmyJPCmkWHYUGEvad0KmA=
Subject key identifier: FA:FA:17:7D:A2:CA:E3:17:10:C0:B6:71:8B:66:33:E5:55:67:87:C9
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 0199312474EE555A61B7A965B70BF2D5C4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0A0F
Signing time: Wed 10 Sep 2025 01:01:36 +0000
Manifest this update: Wed 10 Sep 2025 01:01:36 +0000
Manifest next update: Thu 11 Sep 2025 01:01:36 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: hxYI3SjtPaoKK1W1wLmkGnc/bULJ3vrCM5Xlkf7lAIc=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:74:ee:55:5a:61:b7:a9:65:b7:0b:f2:d5:c4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Sep 10 01:01:36 2025 GMT
Not After : Sep 11 01:01:36 2025 GMT
Subject: CN=fafa177da2cae31710c0b6718b6633e5556787c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:b0:c9:f0:27:41:dd:fc:36:36:56:be:51:
c7:30:47:df:1d:7b:4e:7b:5b:64:fb:9f:bb:82:f8:
b5:2c:2e:ac:ec:d0:44:59:dc:47:3f:b7:1b:29:9b:
9c:83:5d:b4:e1:b5:f0:3d:89:b6:53:59:18:b0:b2:
48:9e:dd:a2:26:88:3f:b5:44:2d:5d:0e:94:27:87:
0d:17:28:6d:5a:a3:88:6b:c3:64:21:aa:e2:5f:d8:
c6:77:4a:0f:5e:dc:cf:72:aa:72:05:a7:c4:08:48:
96:a2:5f:88:89:e9:ea:35:8b:70:a8:b4:48:fe:76:
47:a6:71:ec:66:78:46:e8:a8:1f:8e:65:98:1a:2c:
83:ec:07:83:b9:df:e3:46:4e:f5:4f:d8:83:69:a8:
86:89:53:63:b9:b6:b6:11:c9:0c:f4:92:dc:43:a4:
df:00:fb:ce:de:c4:bf:4d:5d:ee:5c:d5:34:e5:1f:
20:9c:c1:a5:1e:b6:7f:3a:c0:7c:cf:b1:00:da:ac:
2f:00:43:63:20:36:c1:95:24:7b:3a:9f:c8:00:b8:
2e:f9:c2:6f:e7:48:ec:0a:5b:bc:1e:dc:c5:2e:e4:
1b:5f:19:2b:ba:ca:3e:b1:6d:68:57:16:e2:1d:ab:
4e:08:5f:67:ee:b7:c9:c6:84:41:c1:e0:63:04:49:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FA:17:7D:A2:CA:E3:17:10:C0:B6:71:8B:66:33:E5:55:67:87:C9
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:af:83:16:2b:24:b5:28:3a:a5:bc:37:06:88:e2:6e:d6:13:
3d:ec:71:63:e7:ae:c1:9a:2a:db:55:2f:db:48:9e:46:ed:79:
94:93:6c:75:b0:78:b3:f2:cd:6c:ed:dc:2e:cb:5b:89:8a:33:
ee:2b:fd:d6:e6:97:f0:44:d3:20:52:51:65:9c:7c:bb:f0:84:
d6:c4:df:f7:a6:51:4d:15:2a:5f:b8:3b:c1:cd:31:12:8e:78:
a7:63:da:bd:3e:46:04:7a:11:32:7d:c2:53:6c:9e:93:83:71:
b1:e5:34:c1:c2:c3:cd:ee:f7:40:29:ac:fa:f1:a1:88:7b:90:
87:8a:50:ce:c1:7e:7b:0e:27:2f:57:1c:3d:75:78:ce:53:47:
cd:55:0c:7c:a7:e4:4b:c4:f6:23:5d:9d:3d:4d:a5:49:bf:a3:
ff:ef:98:81:e5:0e:49:49:65:fc:54:cc:13:3e:8d:aa:35:e1:
81:69:eb:ef:14:8f:6e:3c:b3:94:0f:6b:61:5c:34:89:5b:5d:
5f:4c:64:1d:17:7c:ee:85:8f:75:ba:6d:91:c2:c4:44:9d:15:
b0:8b:8c:a2:bc:07:1c:31:96:8e:5e:28:83:b5:6e:39:02:2f:
06:49:70:a3:1b:28:ad:54:c4:00:7e:38:2e:96:b3:31:60:3a:
c8:d7:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:41:01 2025 by rpki-client