Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: Qw/c5D4pRnhmQghyrccVbTJHI7YJ/bxEbt04odTYppw=
Subject key identifier: B0:77:39:F9:41:78:28:61:C4:4E:94:51:BF:A2:F0:D6:34:75:A4:B3
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 019922FA46AE3F76E68EE138448C067655F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 07:00:51 +0000
Manifest this update: Sun 07 Sep 2025 07:00:51 +0000
Manifest next update: Mon 08 Sep 2025 07:00:51 +0000
Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: h9RMyvQBW7OsL62h1nKkv382h/QODyeiqcLd28PSH+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:46:ae:3f:76:e6:8e:e1:38:44:8c:06:76:55:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Sep 7 07:00:51 2025 GMT
Not After : Sep 8 07:00:51 2025 GMT
Subject: CN=b07739f941782861c44e9451bfa2f0d63475a4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c0:74:2f:2b:9f:48:b8:9e:39:a2:be:08:26:
a1:26:34:9b:40:f7:ba:69:8b:7b:85:3b:67:57:63:
37:cb:81:30:09:dc:7c:e5:c1:b0:05:4c:3c:12:32:
37:2b:39:ae:e4:9a:63:be:bb:9e:4d:8a:00:1c:dc:
c8:fc:7f:c5:fe:c2:ae:56:1a:3a:d5:56:16:5b:9c:
7b:68:64:57:c8:46:bc:cb:2e:16:70:3b:a5:36:47:
6b:c8:8c:be:5b:90:96:c8:58:83:f8:d3:84:d6:7c:
9c:f8:a5:8e:51:1e:0f:f9:8c:71:52:29:e8:53:24:
02:ba:21:18:0e:69:ee:cc:7a:4b:52:6f:1b:a9:56:
6c:80:6b:55:22:23:a3:ad:58:be:b1:6b:6c:65:3d:
b8:c7:7c:66:e2:bd:dd:6a:21:75:e7:82:47:28:03:
85:d0:32:6a:21:4a:3f:24:95:41:f2:47:cb:53:04:
cd:7f:1e:44:66:20:52:93:f7:d6:44:d0:d7:d1:c7:
f0:dc:bb:be:ce:5a:39:c7:33:22:10:9b:83:94:78:
1c:e6:59:6b:56:fb:8c:0a:09:fe:b6:fc:0b:13:33:
a9:05:f1:3c:02:7b:91:c7:c9:62:ed:b2:ec:c4:74:
9a:6a:9e:46:67:3d:f4:a6:b0:05:65:39:5b:9f:f7:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:77:39:F9:41:78:28:61:C4:4E:94:51:BF:A2:F0:D6:34:75:A4:B3
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:87:8f:73:82:34:f4:3a:20:9c:11:93:ad:23:9a:77:92:c5:
dc:a9:09:42:33:ba:8e:bd:b9:da:a9:6e:74:14:ff:d2:85:90:
8f:02:ed:43:19:0a:0e:6b:5f:1d:2f:03:f2:aa:56:8d:6d:7d:
3e:a9:88:0e:f1:d3:ad:63:97:7e:a2:21:00:57:fa:3c:77:2d:
10:6f:cf:ae:f4:31:84:2c:9d:11:dc:af:a0:3c:ba:fe:42:9b:
2a:2e:ce:52:a4:93:74:b3:e5:ee:20:4d:7a:d5:db:aa:c8:7a:
f8:b4:32:4c:8b:41:36:08:a9:1a:47:0f:48:80:33:1d:85:14:
76:76:75:a4:f1:96:62:31:b8:d4:f6:08:77:46:0a:43:a1:f9:
d3:7d:da:37:f9:33:82:a8:ca:00:f7:5b:91:2b:69:e4:fa:76:
44:da:42:6c:18:db:c7:13:cd:17:be:12:07:0c:e3:fa:6b:17:
59:77:18:98:8c:63:92:5f:3d:19:cd:68:3a:9f:ed:5f:ab:47:
06:52:66:b1:9c:bb:12:21:63:18:58:91:d0:42:2c:44:22:d6:
b4:86:4b:45:c0:d2:30:1e:1d:8b:de:f2:cc:63:07:3f:67:0c:
31:21:6e:26:5a:b2:d8:ac:e6:51:d2:42:bb:9f:eb:2b:0e:8d:
7a:98:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:40 2025 by rpki-client