Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: e4Jg8YMgDYckWqmCT73aEXcyGbAP5UjmZ8618H2qwyw=
Subject key identifier: EC:54:C8:53:12:68:DE:B6:69:F6:E4:AB:FF:87:E1:87:AC:66:67:25
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 019921E7FA4CECA22543316AB2E7D6AD3565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:01:14 +0000
Manifest this update: Sun 07 Sep 2025 02:01:14 +0000
Manifest next update: Mon 08 Sep 2025 02:01:14 +0000
Files and hashes: 1: Nw7X2LCFZpQsGc2GoXyrFKElkBk.roa (hash: y5oQHHhbifcLGWzUQAXcT2e3MvPfBEuWSolqQY+gsts=)
2: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: Z4EJD7X6snhUYipRjOh6mXHDGEFccL5D7bEZh4NGKcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:fa:4c:ec:a2:25:43:31:6a:b2:e7:d6:ad:35:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Sep 7 02:01:14 2025 GMT
Not After : Sep 8 02:01:14 2025 GMT
Subject: CN=ec54c8531268deb669f6e4abff87e187ac666725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:04:10:72:97:e1:dc:68:d7:eb:3d:de:5a:
46:e0:70:63:91:23:f3:e7:61:94:e5:0a:93:d0:d1:
d1:6e:3b:a1:78:c9:af:8d:9c:d8:8e:fd:21:32:94:
64:ea:95:e6:bc:f0:7a:a8:ed:f9:de:7d:ea:90:87:
82:57:e7:12:6d:01:03:c2:6d:b9:29:44:cc:d8:ad:
b0:0c:1b:80:b6:4b:0c:7a:1d:96:eb:f2:62:b4:40:
35:6d:64:14:0c:24:40:68:30:c6:42:93:73:74:86:
4b:cf:eb:68:96:35:12:c3:e4:21:63:77:6b:63:57:
b4:85:31:31:b3:ae:8d:61:50:1a:c5:dd:f4:6a:51:
35:2e:9c:4c:38:33:0a:bd:c4:6a:0f:25:81:62:8d:
a5:75:eb:cc:c4:02:11:df:39:b4:45:6d:cb:06:fa:
15:ba:77:4b:98:94:ca:da:b6:80:d8:41:5a:9d:93:
e7:66:5d:05:1a:4b:9d:8d:c7:6e:28:5b:44:93:5f:
12:c0:c2:8b:98:39:b6:4c:f4:04:59:65:59:07:f6:
9d:34:57:09:74:5a:ac:4f:5a:97:cb:2a:64:9f:24:
ca:2a:82:f3:94:9d:53:66:b8:03:85:47:1c:04:09:
45:13:f5:92:08:c6:70:ce:97:25:aa:5d:4b:8e:be:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:54:C8:53:12:68:DE:B6:69:F6:E4:AB:FF:87:E1:87:AC:66:67:25
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b7:c2:18:c2:90:8d:44:7b:bb:b1:ed:11:52:a0:b2:ca:59:
9d:9c:39:08:49:00:c5:cf:c5:40:b6:dc:e8:74:98:ad:39:fa:
de:f1:24:01:6d:f9:6a:1a:54:e6:a4:da:ed:0e:4b:f6:7f:48:
3f:55:ca:83:20:ae:63:f3:8f:e9:1f:33:03:6c:ee:28:03:45:
ab:b7:10:34:a2:22:e8:45:20:0f:44:8a:71:fe:d9:52:05:ac:
9b:e6:52:b6:89:a3:91:a0:b1:83:3b:cd:7a:9e:87:67:fe:97:
cd:bb:59:36:da:9e:e8:94:df:c0:8a:8c:17:3a:f4:44:05:3b:
33:fe:13:8f:94:f3:8d:33:88:d0:13:b4:b0:51:3f:94:a8:dc:
2b:7e:bf:e2:e7:93:2f:5b:a6:0a:b8:d5:f4:53:2b:32:82:75:
cb:58:8f:57:f5:9c:8a:f0:66:0c:83:4b:2f:0a:88:37:04:9b:
9f:c3:43:5f:45:79:ea:e6:0c:26:b4:0f:8e:d9:46:8c:ff:2c:
ae:03:59:2c:ba:c3:02:40:25:ee:17:f2:9e:6f:af:23:07:d3:
1e:9e:00:27:7e:71:41:bf:a8:8e:76:55:8c:cc:4e:51:55:a0:
2d:b6:cf:83:24:c7:c2:6d:d0:c3:33:1b:a4:c6:41:51:1a:31:
5b:35:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:48 2025 by rpki-client