Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: tKzg/G80rizsmFLWRDR4svlJvL+LhyWqIa0t+Aqox1g=
Subject key identifier: 77:56:9D:90:4E:7F:74:93:81:E4:60:0F:CD:43:48:AF:48:00:33:01
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 0199500A4A3345DEE2BA4773A6F51037D538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1689
Signing time: Tue 16 Sep 2025 01:01:15 +0000
Manifest this update: Tue 16 Sep 2025 01:01:15 +0000
Manifest next update: Wed 17 Sep 2025 01:01:15 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: Q1yvSLz2+7sFQgz+6qwUWPwt38ErivAx6rBrmWhg0nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:0a:4a:33:45:de:e2:ba:47:73:a6:f5:10:37:d5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Sep 16 01:01:15 2025 GMT
Not After : Sep 17 01:01:15 2025 GMT
Subject: CN=77569d904e7f749381e4600fcd4348af48003301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:ec:21:8d:d7:98:f8:83:7b:76:ab:a9:4d:
a0:2b:33:0a:0c:e7:b6:75:9c:a1:22:6e:f4:b0:76:
30:f5:5a:54:5a:cc:9b:d2:ac:0c:68:5b:4f:7a:46:
04:e6:f8:19:5b:54:b5:8e:a1:ad:bf:f1:e9:f6:16:
f1:87:ad:d7:49:3d:4c:6a:e1:d3:86:52:bd:56:f1:
db:82:71:9a:b1:67:89:58:61:6d:a3:a4:cc:f6:53:
30:5b:cb:c9:6e:62:bb:bb:d4:31:61:2b:da:b6:ad:
64:0a:db:69:73:ef:b3:54:bb:ac:c0:96:70:5e:a4:
52:a1:04:a6:22:2e:c7:09:3f:d3:47:60:2c:18:9a:
36:a8:7a:da:fd:57:5c:2f:a8:8c:d8:05:0b:fb:e5:
0b:07:66:73:db:d4:34:fd:b1:39:53:89:49:4e:28:
3b:99:1b:6d:c6:59:09:4c:9c:75:da:5e:ad:34:23:
fd:bf:a5:b9:e1:dd:13:13:ed:0e:2b:d3:fe:48:9b:
08:08:6d:9e:63:b5:bb:a2:b1:e1:13:e9:f4:95:cc:
8c:e6:6a:09:94:4c:6c:99:a5:33:1c:7c:f3:f0:0a:
f9:d0:16:39:23:f9:08:d2:6e:86:ab:6c:59:86:6f:
41:2e:86:1f:d7:da:04:c9:70:e0:f4:39:3b:f9:1e:
1a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:56:9D:90:4E:7F:74:93:81:E4:60:0F:CD:43:48:AF:48:00:33:01
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7a:24:b8:47:b4:77:17:4b:ec:fe:b3:ba:62:4e:11:07:cb:
8e:26:e1:db:0a:3c:52:a5:53:95:c7:a0:ef:01:f3:08:b9:ed:
99:af:77:0c:ed:91:69:24:53:8c:99:60:82:bc:a2:6c:e7:e3:
fb:03:c9:34:9f:83:12:9d:0b:24:3f:93:f8:63:19:f3:6b:41:
59:fb:8a:56:12:82:34:3c:56:16:de:1d:5b:e6:9c:69:c6:67:
d1:a7:a0:47:ca:1c:ab:a8:22:a9:2a:9e:ab:ba:f7:97:b4:c9:
cb:1a:e7:05:fe:73:56:0a:67:4e:50:77:f6:f7:b8:6b:ea:c4:
2a:8a:f0:58:5f:9e:da:cf:71:1d:78:44:4e:9e:dd:e9:af:30:
56:49:a6:5a:6f:60:52:e8:ca:34:14:0e:3a:bb:83:92:11:1a:
73:bb:84:4b:4e:ee:a3:5a:30:be:35:7d:c1:55:0e:f9:39:56:
5a:ba:bf:82:c1:9c:85:86:2a:62:2c:f3:64:24:2b:bc:0f:a5:
5d:e6:cd:49:71:b4:cd:b4:8e:bf:ff:19:7c:6e:20:e9:fc:a1:
42:3b:e0:d4:17:e3:13:bc:d3:7c:3f:0c:1e:39:24:29:91:35:
51:00:73:92:e6:3c:b7:e2:e5:c0:2a:25:f7:f5:46:ec:38:a3:
5b:3f:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 06:23:09 2025 by rpki-client