Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: MGMtZcOH/0PGBbeNyH1+gpmZbkApSBXhxL8yANwMYdM=
Subject key identifier: 40:9F:B0:BB:4F:68:28:F8:8D:24:79:64:83:F5:1D:93:D9:DD:35:42
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 0199183FC9F0D1185A4E70DD51B2B2A0D699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0A57
Signing time: Fri 05 Sep 2025 05:00:57 +0000
Manifest this update: Fri 05 Sep 2025 05:00:57 +0000
Manifest next update: Sat 06 Sep 2025 05:00:57 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: 6RifB/x98/HLOcoNzvF+Bbv0m4lUBscStAGNOTotxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:c9:f0:d1:18:5a:4e:70:dd:51:b2:b2:a0:d6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Sep 5 05:00:57 2025 GMT
Not After : Sep 6 05:00:57 2025 GMT
Subject: CN=409fb0bb4f6828f88d24796483f51d93d9dd3542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:9e:21:a9:94:4b:89:9e:b4:01:68:e0:f3:
a1:4b:ef:18:82:b0:50:95:7d:bc:1f:20:7c:51:59:
4e:f3:42:bb:2e:3d:ed:06:e7:8b:4a:34:1b:ca:e5:
79:16:bf:ae:2e:29:5c:15:88:b5:f9:03:4c:5e:91:
19:da:10:8b:38:1c:c2:c6:3a:4b:6c:16:0c:90:1a:
2a:f2:d9:38:8e:20:68:90:5f:16:63:b3:00:67:45:
c4:6e:62:4a:f5:59:bd:56:cd:83:33:58:c9:0f:4e:
20:45:5a:8d:01:b5:8a:2c:00:0b:b5:99:09:43:8f:
72:04:78:fb:87:74:d8:8b:50:11:1b:18:57:69:f2:
69:51:73:e4:73:9f:c5:f3:49:0f:87:28:29:b3:04:
63:8b:27:a5:53:eb:95:7e:a4:8a:6c:25:fd:86:bc:
1d:1d:fd:25:1b:67:f2:5f:99:fa:a5:e4:2c:95:e2:
9c:8a:87:13:ed:75:86:60:5b:1f:bb:14:ea:79:7f:
fc:ee:cb:e1:43:2b:f5:a2:aa:af:eb:d6:b1:32:55:
98:6a:d6:55:ff:01:d0:2b:53:bd:ac:c4:e2:65:fa:
3a:7b:92:64:92:cd:4c:43:6d:2f:b0:91:4b:07:45:
6d:17:27:3d:cc:2f:fd:d8:55:50:5c:ca:3a:cc:78:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9F:B0:BB:4F:68:28:F8:8D:24:79:64:83:F5:1D:93:D9:DD:35:42
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:60:3d:5a:c4:5e:5a:25:fc:f3:a4:70:7b:37:41:d1:fd:
84:25:fc:d6:45:4a:c9:57:97:ad:7c:07:2d:1d:05:aa:bb:07:
8e:c6:39:97:8b:b4:e3:87:91:d5:d9:5a:cf:86:32:c4:89:f7:
68:b5:c1:64:fe:ac:c5:ab:36:df:64:0b:c4:ac:a9:af:dd:99:
3b:30:50:59:46:c0:81:f7:91:69:28:18:53:1f:7c:1d:96:f0:
b4:12:f1:66:04:1d:37:03:45:e3:1e:ce:f9:d0:0c:87:38:db:
f7:9b:2d:58:7f:2b:bb:b2:47:6d:31:83:2f:ac:81:b2:2b:36:
26:35:69:cb:37:7a:ac:7f:d6:59:a5:02:0d:f2:73:c1:71:96:
af:71:23:5f:e1:6a:fb:38:af:ed:77:5b:2e:0f:d6:68:61:15:
3b:e2:16:95:fa:6c:c9:9f:81:7e:bd:b6:20:fa:c4:0f:53:90:
95:2c:3e:03:41:16:81:c8:33:b0:ad:27:2a:3c:0a:3f:8d:50:
bc:62:a3:6b:8c:25:59:44:60:1f:84:ee:68:b9:9a:8a:6d:1b:
3b:5a:da:aa:16:c6:91:e3:31:a5:36:ac:4b:54:85:08:69:f7:
16:1b:5b:e5:8d:23:47:aa:43:a2:a5:5a:a8:64:2a:ee:f3:9e:
f7:4f:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:14 2025 by rpki-client