Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
File: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft (raw, json)
Hash identifier: mrTev+yFLcu1JnIOqYr9lUFLiFkUnT3D0E8ExsSVrJY=
Subject key identifier: F2:B3:5D:A0:BA:68:06:4F:51:A9:30:E5:A8:69:F6:7C:DE:87:E0:8F
Authority key identifier: 5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
Certificate issuer: /CN=5f2be62be753ba9929355b4ce988bae12af7272a
Certificate serial: 0199239EDBC23B678F66377D89A69862D810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
Manifest number: 05CA
Signing time: Sun 07 Sep 2025 10:00:37 +0000
Manifest this update: Sun 07 Sep 2025 10:00:37 +0000
Manifest next update: Mon 08 Sep 2025 10:00:37 +0000
Files and hashes: 1: ESLl-bZ97LqqEu-5c2cw2-HWsjE.roa (hash: Jxh/Q8xcc0uLDf1/zXrtw9NWQZKR5wMyKpRis33JWsQ=)
2: XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl (hash: 3jGqWB2a4CIGpzMCgPdkvLVQl9JMkHOou+OmBpv2WLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:db:c2:3b:67:8f:66:37:7d:89:a6:98:62:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2be62be753ba9929355b4ce988bae12af7272a
Validity
Not Before: Sep 7 10:00:37 2025 GMT
Not After : Sep 8 10:00:37 2025 GMT
Subject: CN=f2b35da0ba68064f51a930e5a869f67cde87e08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:75:a8:be:b4:7c:f1:87:dc:c1:7f:94:5e:
5d:91:d4:94:5b:ba:79:a9:b1:b6:11:2a:97:f7:b8:
54:9c:36:8c:10:de:68:4f:c3:90:7b:ed:29:84:d8:
ee:85:c7:57:02:ca:05:a4:eb:79:04:74:9b:1e:48:
d4:14:3c:cf:cd:70:8b:f7:13:7b:d2:3c:7f:5a:3b:
27:d7:1e:1c:f6:5d:f1:a0:7e:18:fc:f2:0d:e7:45:
c4:47:dd:96:b1:e1:d9:8b:9d:6f:03:fc:6e:7f:ed:
d6:3b:8f:b1:71:f2:c4:d6:62:ed:04:cd:81:72:a8:
7d:f5:15:48:ad:99:bf:86:6b:3d:21:c3:a4:df:cc:
bc:ee:3f:c8:05:16:bf:c3:e5:a5:b9:50:ab:fa:4e:
51:f0:d5:4c:58:d5:8a:19:df:04:ad:11:11:67:11:
c0:22:a1:55:d3:d2:f3:35:d5:5e:02:0e:b6:2a:27:
44:39:fc:02:7a:26:08:64:19:8e:b7:11:04:54:75:
d5:f2:12:b4:fb:f0:85:db:0f:e5:d5:4c:2a:d6:8a:
4e:f9:87:88:c4:f8:12:92:d0:fe:e0:49:0c:8e:f7:
60:cf:98:a2:4f:c9:e2:68:9e:5f:5e:15:b0:94:d9:
d4:8a:a4:0e:86:55:d8:db:07:74:ea:f3:0a:c4:81:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B3:5D:A0:BA:68:06:4F:51:A9:30:E5:A8:69:F6:7C:DE:87:E0:8F
X509v3 Authority Key Identifier:
keyid:5F:2B:E6:2B:E7:53:BA:99:29:35:5B:4C:E9:88:BA:E1:2A:F7:27:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fda260-9bcf-4f67-bf7b-e522cae63470/1/XyvmK-dTupkpNVtM6Yi64Sr3Jyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:03:3c:19:2c:99:88:0c:a8:1b:6b:16:14:3b:85:34:30:a8:
b8:3f:b2:e7:92:23:fb:3a:05:7d:aa:d5:21:77:4c:c7:38:21:
cf:77:88:dc:e3:80:d6:a4:b1:8d:b7:64:91:b4:da:2f:8b:2b:
7e:c5:37:8c:7d:71:7c:29:4f:20:72:d2:ab:d0:bc:1d:ee:9d:
a8:84:3a:45:cc:75:fd:77:44:0f:16:79:66:c3:22:c5:41:ea:
e0:98:26:b3:e1:d4:9a:5d:51:af:07:c5:2e:5f:e2:fc:d4:19:
76:1a:09:5a:31:8e:c2:8e:1b:1f:a4:8d:03:ec:0a:f7:c1:de:
72:bd:10:18:8e:76:22:1e:b3:03:11:e5:88:3e:32:e1:7c:d3:
05:8a:e9:93:9a:5c:bc:7c:6d:08:70:e9:09:6b:99:d3:08:a4:
07:23:1f:cb:7e:4b:bb:d3:14:00:24:8d:1d:df:28:68:8b:9a:
eb:cb:77:cd:94:37:19:d6:dd:94:1c:6f:b5:5a:fd:f7:b0:32:
61:60:48:e9:de:14:50:a9:3a:47:ac:75:cd:a6:7e:9e:b5:32:
e9:fd:dc:09:8b:53:9c:49:d4:e3:8c:fc:c8:d3:da:e0:f7:88:
da:bf:c1:c8:ee:fb:c2:de:37:51:5a:53:8f:4e:f8:dd:87:05:
04:10:c0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:47 2025 by rpki-client