Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: WaA7+LFSlD/aXrmqKpssDImE4DPFepmBQ8npE2UzzF4=
Subject key identifier: 75:92:6F:B1:20:B3:73:2A:E4:2B:D0:7A:4B:47:71:F9:A2:EF:1C:28
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019917645D2121EBAE5EF06CC28B080AF019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1374
Signing time: Fri 05 Sep 2025 01:01:17 +0000
Manifest this update: Fri 05 Sep 2025 01:01:17 +0000
Manifest next update: Sat 06 Sep 2025 01:01:17 +0000
Files and hashes: 1: NKYWlz4gwZY4JXbw2fZ-33Yiq7Q.roa (hash: 78EN8i32FjxMTLLdcIXwd9Vb1kdj7OWCE2WX2/B4rLA=)
2: VUj2jDG1P5mpu3G51mRFUhrIbU4.roa (hash: twr8z4nqYemreBGHT9Kr4AfrcVcZYqpeai7rZry08Us=)
3: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: GsCVIR6rXQvV1/FMf2+Jp6GUQWgJYTt3Bp4R+5ry1pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:5d:21:21:eb:ae:5e:f0:6c:c2:8b:08:0a:f0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Sep 5 01:01:17 2025 GMT
Not After : Sep 6 01:01:17 2025 GMT
Subject: CN=75926fb120b3732ae42bd07a4b4771f9a2ef1c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:8b:46:40:5c:65:27:7b:ab:c0:e7:d3:fc:
c7:7b:00:3e:5e:70:d9:7f:c4:70:80:c0:02:39:75:
33:77:5c:d6:bb:90:9a:a9:89:2e:a6:7e:11:d5:ed:
67:2b:f2:d1:23:30:88:3e:81:4e:e9:1c:ba:fa:55:
d7:b4:a8:c4:c2:71:d0:f6:47:57:31:34:77:fd:26:
40:19:e1:95:b4:e7:00:51:18:af:be:b4:10:ea:f8:
9e:83:34:ed:a1:80:93:d2:44:1f:a8:39:de:1a:85:
d9:7e:70:82:fb:c5:a0:1c:f6:c4:99:39:c2:05:ba:
d9:13:66:d8:7a:c8:c0:b3:99:ab:15:c8:45:8c:bf:
94:13:54:d4:df:e0:c2:dc:4b:7a:0f:ed:fa:9c:d5:
0c:a5:f7:d4:3a:9e:08:b6:3b:e7:50:d7:52:e6:e5:
84:fb:6a:72:24:00:47:02:35:53:25:b7:5e:eb:3e:
8c:25:58:5c:53:e0:20:45:d4:96:3b:04:72:48:12:
23:d3:90:6c:8f:f5:ed:7a:74:ae:7d:9d:d4:90:54:
2c:be:0f:39:7e:0e:84:28:69:ce:4a:bc:85:25:cf:
63:b6:c9:ea:95:1d:08:07:64:b3:b6:7f:b5:2d:59:
53:ec:27:27:70:93:1c:58:fe:42:de:93:3b:34:4f:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:92:6F:B1:20:B3:73:2A:E4:2B:D0:7A:4B:47:71:F9:A2:EF:1C:28
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:eb:47:80:ab:f1:13:38:a7:f5:d2:ea:15:90:4a:e0:af:db:
71:a7:9d:6a:13:92:63:3a:17:6c:07:e7:e4:c2:70:1a:7f:c7:
5c:27:37:6f:81:ff:e9:5d:08:34:7c:c2:79:8d:2b:54:98:b5:
d8:16:21:ec:77:ca:50:a6:b9:54:db:0b:0a:c9:80:52:02:9e:
ec:b3:66:6a:c7:f2:b2:df:15:c7:60:d0:3f:9c:25:d0:68:ce:
87:a5:21:37:86:f2:2e:29:04:0b:27:06:73:9b:b8:62:2b:c7:
d8:27:b2:d2:f7:8e:ef:28:7f:1f:99:2f:99:bf:da:46:4b:6c:
db:0e:19:3a:1e:90:b1:62:43:cc:e9:3e:07:6f:c2:17:16:99:
13:94:18:7e:ab:9b:62:3c:a9:6a:55:30:14:d5:b5:d1:01:df:
5b:6b:3e:36:f3:87:17:23:9a:b7:d0:9a:22:43:b9:dd:7b:c3:
fd:60:b7:45:27:50:b2:1b:72:1d:4b:6f:34:08:ba:5d:27:03:
e2:1d:d1:6e:8f:c9:94:1a:1e:27:c2:e0:49:5f:c3:cc:c3:2c:
51:2a:42:55:98:ef:57:bf:1c:8f:c6:bc:a5:fd:35:c6:e6:23:
5e:f5:b6:43:de:9b:14:d9:67:13:93:47:16:00:69:d0:06:12:
55:1e:eb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:54 2025 by rpki-client