Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
File: xTsinnPOa7GW1lwL7xGVYGV6NyA.mft (raw, json)
Hash identifier: /TiNwVdwj5JmEbN89pzx2JXe3lvhzJoPX3rLc8WWjDU=
Subject key identifier: 77:75:7F:53:9D:F7:B3:F7:DC:CA:F1:37:C5:9C:CF:47:16:C1:6D:08
Authority key identifier: C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
Certificate issuer: /CN=c53b229e73ce6bb196d65c0bef119560657a3720
Certificate serial: 01992330E3498A194CA41F7E35294C7DC4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
Manifest number: 0ADC
Signing time: Sun 07 Sep 2025 08:00:30 +0000
Manifest this update: Sun 07 Sep 2025 08:00:30 +0000
Manifest next update: Mon 08 Sep 2025 08:00:30 +0000
Files and hashes: 1: gzZahYqckgC0Uj_Nklh90nWZtP0.roa (hash: oNQlnk2/mO4eMuiG7Nb/MiiGpF0Vc9lIJ1vyvcm+wlA=)
2: xTsinnPOa7GW1lwL7xGVYGV6NyA.crl (hash: l3jBiRTe98u3/WMv1xtXn8w9KcGMF/nrbPr5Wo2pi2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e3:49:8a:19:4c:a4:1f:7e:35:29:4c:7d:c4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b229e73ce6bb196d65c0bef119560657a3720
Validity
Not Before: Sep 7 08:00:30 2025 GMT
Not After : Sep 8 08:00:30 2025 GMT
Subject: CN=77757f539df7b3f7dccaf137c59ccf4716c16d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fa:2f:97:0e:6a:05:a2:28:09:bd:ec:4c:86:
b2:7f:87:3c:1c:92:46:93:b3:f7:e2:2f:b4:63:a1:
07:dc:37:0a:00:90:c9:02:a9:8d:42:f8:d4:9f:9d:
22:2e:40:bb:bd:48:f4:60:04:6a:44:95:b5:ac:8f:
5e:0e:df:fe:47:09:da:de:2f:fe:d6:a9:0c:17:d3:
4b:cc:64:d8:76:49:2d:c0:79:a3:d8:67:cc:db:3d:
f7:88:21:5d:c6:a2:3f:90:cc:14:2e:0d:f1:ed:61:
5f:3b:d3:9b:18:2b:59:66:52:96:08:05:d4:ca:af:
6a:60:a3:04:e2:d2:c4:33:51:65:1c:2b:b4:0a:7e:
85:22:d1:f4:7d:61:1e:2e:58:23:31:fc:6d:54:c1:
51:a7:e2:ec:82:b9:b6:23:97:74:ac:bf:53:b1:e7:
0b:37:d6:1b:ef:3f:ef:06:dc:d1:e4:7f:1e:b1:9b:
33:f1:76:00:2d:83:65:98:d5:9a:91:ac:bc:58:16:
5d:1d:0f:eb:36:44:cc:df:df:59:40:5a:46:81:f0:
05:6a:8d:34:b0:8c:d1:dd:b2:62:25:8c:fe:05:db:
95:8c:c8:d4:fc:bf:5a:25:ce:55:02:4f:f4:b3:e3:
eb:25:8f:de:49:66:75:d8:b6:a5:1b:6f:ab:8d:70:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:75:7F:53:9D:F7:B3:F7:DC:CA:F1:37:C5:9C:CF:47:16:C1:6D:08
X509v3 Authority Key Identifier:
keyid:C5:3B:22:9E:73:CE:6B:B1:96:D6:5C:0B:EF:11:95:60:65:7A:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTsinnPOa7GW1lwL7xGVYGV6NyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e92666-4526-47c1-b2ba-63728b0fa108/1/xTsinnPOa7GW1lwL7xGVYGV6NyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9c:d3:7e:23:43:f5:b9:14:8f:41:01:58:f2:81:3e:b0:5e:
c2:4a:8f:3c:29:75:55:b1:74:0b:e9:8f:0f:ed:57:3a:28:a8:
86:21:0d:ea:69:65:81:ab:b6:88:f3:a0:c2:f0:b8:a6:86:5b:
47:89:bd:ec:c2:c5:2a:cf:d1:83:78:84:d7:53:12:cf:34:9c:
ce:8e:4f:e3:2d:ba:af:3c:84:f6:e9:bd:8f:f2:96:f9:8e:8d:
08:22:27:ba:9f:5f:76:24:f4:3a:d5:a2:69:ae:1f:ee:22:31:
15:78:9c:18:48:c6:8b:a3:13:ad:98:85:bb:92:9c:cf:d6:3a:
b4:80:b6:a1:2a:9c:de:82:b1:5f:9a:74:0e:45:cd:cc:f9:1e:
e3:56:1a:c3:64:89:5c:84:81:5c:70:84:f8:59:22:21:a8:c8:
f3:63:93:6f:df:cd:77:f8:29:f6:de:5c:0a:ed:63:92:36:05:
ea:f9:d5:ce:d0:53:ca:3e:9c:f0:91:86:20:0c:60:96:69:17:
87:2b:cc:b8:e5:46:ad:4b:f6:f4:3b:e6:fb:05:34:ca:9f:5d:
11:59:f1:09:40:21:a0:32:d9:42:12:55:ec:46:e9:9d:c5:cb:
2b:e0:29:64:fb:9a:a8:75:f1:83:00:f6:14:86:84:4a:49:2e:
88:f6:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:52 2025 by rpki-client