Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: 4GxFZKV7rVXSm2L7OcXkw5sT/XMepc87OIkQyZB3Epw=
Subject key identifier: DC:9E:8C:63:EA:5E:8C:EC:5B:EF:AF:2F:ED:76:6B:8C:61:54:7D:A8
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01992330E0CF42DB63528131868C99B3CA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 08:00:29 +0000
Manifest this update: Sun 07 Sep 2025 08:00:29 +0000
Manifest next update: Mon 08 Sep 2025 08:00:29 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: X8WMyrUWeM6ibLfeHGOyltjEFjWutMRD6mYf1T+gJUo=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e0:cf:42:db:63:52:81:31:86:8c:99:b3:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Sep 7 08:00:29 2025 GMT
Not After : Sep 8 08:00:29 2025 GMT
Subject: CN=dc9e8c63ea5e8cec5befaf2fed766b8c61547da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:3d:59:00:1a:f8:08:6d:2b:fc:8a:cb:5a:
41:92:a1:97:59:7e:21:21:26:a1:fd:c5:bc:c4:57:
bd:ab:73:49:45:d9:0a:57:36:e9:2f:e0:cf:81:03:
6e:a7:ba:d5:c9:2e:ea:47:05:7a:36:79:e9:5d:1c:
22:7b:52:6b:cd:7e:a8:e5:d6:90:68:d6:00:67:a4:
88:24:01:6f:e9:39:67:dd:35:b5:f7:bb:bd:60:67:
c8:bb:09:11:8f:95:11:d7:f9:a9:c9:a5:c4:92:a4:
bd:1d:ff:34:ab:ed:6e:08:b6:ed:c1:4b:39:3c:96:
59:15:75:12:cd:bc:16:3b:ff:1e:5a:2a:98:22:5b:
5c:d3:aa:e4:cf:50:43:6a:81:97:dc:c0:f0:0b:f4:
c8:81:e0:e5:f8:f2:50:7e:c0:cc:3c:4e:99:7d:37:
1d:35:ef:9e:c5:c1:67:f7:6b:58:05:c6:fb:0e:30:
6f:57:d6:7c:6b:b4:6e:26:67:f4:a7:81:23:94:a9:
13:63:d5:59:cb:36:43:e9:45:ff:ee:ba:c0:05:dd:
5e:b6:3f:a4:c9:02:ac:0f:49:f0:fd:c6:db:7c:d0:
5d:0d:78:3f:1e:3c:60:4d:fb:6b:6d:29:0b:34:22:
fa:70:11:e5:52:5a:89:5d:f1:86:43:d1:33:7e:78:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:8C:63:EA:5E:8C:EC:5B:EF:AF:2F:ED:76:6B:8C:61:54:7D:A8
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1b:79:a5:c8:83:0b:9d:c7:52:0d:a1:ce:4d:f0:dc:b0:d7:
96:e1:48:5c:06:ff:f4:ef:63:97:82:8a:cd:42:55:04:22:dc:
18:61:15:76:58:67:4e:2c:c5:e4:0b:9d:4a:2f:6c:e3:a5:60:
b6:1a:8a:ea:23:3d:8c:51:4f:01:e3:62:06:aa:6e:02:36:9c:
51:68:c1:f1:45:44:28:30:65:05:ac:c0:87:54:d5:00:8f:3b:
90:40:a9:90:4b:cf:22:86:93:31:6d:4d:37:2e:6a:4d:d7:10:
04:1a:f5:de:9f:88:c8:16:5e:48:b8:8a:c5:ae:e1:90:0c:ec:
4b:78:94:7c:24:f9:28:55:8f:20:81:48:fa:c1:15:9d:16:f1:
40:ca:00:4f:fd:47:aa:32:7a:cd:83:81:53:56:5a:e2:b1:65:
ba:11:76:b6:9e:f8:87:80:8d:f5:38:47:4e:b3:21:a1:38:c8:
89:40:68:51:ec:9b:74:e9:cb:56:2e:70:24:39:2c:8d:f8:9b:
a7:57:b3:5d:db:c1:79:b9:1f:4d:a3:61:81:67:67:ac:d6:37:
58:41:ab:f1:cb:38:69:8c:d4:48:10:ba:71:b7:e7:5c:00:66:
7d:c1:b8:6d:76:2a:2b:d4:ab:b2:dc:5b:90:e9:5b:d2:d7:8b:
2b:42:db:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:35 2025 by rpki-client