Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
File: Xhv2oxnaJImBau26G0_QzH3fPh4.mft (raw, json)
Hash identifier: lMVj48skRlR3KgkwOxnby8o/vlJIbeDnMi2uyn+HNOk=
Subject key identifier: 19:19:C9:D7:4C:CD:06:38:77:34:AD:67:11:98:9C:B0:6B:B3:E8:43
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 019933B6D9DB384C7B64ACB1A4DFE9AE2439
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
Manifest number: 1987
Signing time: Wed 10 Sep 2025 13:00:45 +0000
Manifest this update: Wed 10 Sep 2025 13:00:45 +0000
Manifest next update: Thu 11 Sep 2025 13:00:45 +0000
Files and hashes: 1: 4CoVMMKw0iAY2WbvgdHQblv-YLI.roa (hash: bPGOSQ6fTh78RE8OIALZzzCGD5F7zJ/rcPqgSt70E8I=)
2: FhWnMm1Clrw5RwRfiFSlKmfRRwA.roa (hash: gQv9rzOekg+xFUjHUbHLyAaBLvaPVlrggOFhPsp/xK4=)
3: Xhv2oxnaJImBau26G0_QzH3fPh4.crl (hash: WasLo56LDtg9JTiOf8f7gKjtjT7BR+TvioxSWOb+vMA=)
4: jPPJRlQHOW3Bdo3Xffl1cKS8yYI.roa (hash: +QHKisnDpujXyoJyM4AGTUHFPfJzBO245kYgUJWvE8Q=)
5: lrn8fTBm5Hwwv5lkzu-PF_WjeuM.roa (hash: AulLO5ISzv6y0p0lTRaR6/DExJCM06PRBRCrm0K+hRI=)
6: s6nYW-wwFY4e4FliH1slATjjkcI.roa (hash: IaJM9j4ERldNW3bqfwmZZck2Nh3sfZGgvyUZuPD1Rqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:d9:db:38:4c:7b:64:ac:b1:a4:df:e9:ae:24:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Sep 10 13:00:45 2025 GMT
Not After : Sep 11 13:00:45 2025 GMT
Subject: CN=1919c9d74ccd06387734ad6711989cb06bb3e843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e4:f8:d6:d8:fc:75:94:66:7c:a7:80:59:88:
ff:23:ac:7d:ab:59:cb:1c:28:67:94:3e:ca:db:ae:
2c:a4:52:79:b2:16:62:06:d3:c5:63:71:33:a3:81:
13:1b:8d:84:bd:8d:2c:af:8d:6c:b5:dc:02:d0:f0:
aa:b0:a2:a3:af:52:c1:a9:25:3a:85:bd:a1:b8:4f:
b3:59:cf:de:83:dd:61:47:6a:b8:20:b9:9d:2d:6b:
66:73:af:e6:9e:43:2f:94:3e:6e:a3:2a:d2:82:59:
c6:a9:18:9d:7e:dd:b5:66:b7:7c:a4:95:6e:4b:0a:
db:97:89:d2:fa:33:ec:ce:e8:72:97:8a:55:fb:3f:
f9:19:33:fc:64:5d:59:bc:51:92:94:c2:75:2d:59:
37:2c:68:c0:fd:73:f3:c3:0d:53:48:19:b0:95:bb:
16:51:8a:e2:ea:0d:57:eb:9b:9b:d4:24:a0:ce:89:
6f:ae:c8:54:45:f9:f1:7e:d3:96:7d:74:87:e1:0b:
a6:87:ba:e8:5b:07:70:2c:d5:f1:fd:18:f1:09:b0:
82:23:81:e7:bb:e3:c5:95:a5:1d:3c:43:18:f8:05:
ed:27:30:78:c6:f8:e1:ab:f9:88:f6:c3:97:8e:dd:
a7:8d:a9:0d:07:06:ba:97:55:ec:de:b6:e0:b9:73:
74:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:19:C9:D7:4C:CD:06:38:77:34:AD:67:11:98:9C:B0:6B:B3:E8:43
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9c:ef:18:6f:cf:ad:db:de:df:ce:ef:ca:c1:62:51:32:34:
7d:0c:d4:11:2f:91:41:82:b8:3c:97:bc:b7:08:7c:d2:c1:7a:
a3:2f:76:69:93:3a:d7:ab:52:14:98:ac:0a:db:d4:48:b9:2a:
14:cd:22:0c:c4:14:65:9a:d9:22:5c:86:e1:94:b4:b1:b6:d2:
9f:c9:d2:8b:3b:90:f9:95:87:7e:3c:17:92:af:6a:0a:b1:22:
8b:ab:e5:b0:35:2d:e9:31:a8:f3:91:77:e3:eb:ce:3f:4f:08:
a7:bf:e4:15:ec:ad:a7:a2:d6:f4:89:b3:09:c2:27:c4:fd:ff:
91:c8:eb:d0:12:52:66:50:1c:a2:9b:e5:2c:b7:c7:76:ba:38:
48:5b:d8:4a:3a:57:59:d1:31:8c:dd:6a:87:0c:d1:02:9d:10:
8d:46:4d:13:71:e7:22:03:ba:d9:d4:ce:f2:af:c7:45:ed:27:
d9:4c:42:3c:b4:76:36:89:56:52:20:38:46:cc:5c:2a:20:63:
69:df:5a:91:aa:95:64:56:df:67:ab:cb:88:11:76:f4:66:82:
fb:4f:10:1e:50:fe:ae:2d:18:25:46:0e:36:6e:36:36:b5:77:
d4:76:44:c9:ae:32:bf:35:1f:a0:96:d2:e1:91:bb:4d:bc:a7:
ff:8e:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:15 2025 by rpki-client