Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json)
Hash identifier: MNCu2FPUt7uEWFHKcUl8dMxI7EY8bKJ85af9TgRi83A=
Subject key identifier: 21:00:FE:96:12:59:50:12:A3:5F:EC:F6:C9:CC:52:64:01:53:0F:7C
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 01992255123B34FE72E7902CCC4B1F125A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 04:00:24 +0000
Manifest this update: Sun 07 Sep 2025 04:00:24 +0000
Manifest next update: Mon 08 Sep 2025 04:00:24 +0000
Files and hashes: 1: 9OuhXfETInOXikMAHDgNmyTRYEU.roa (hash: eIv/UzfTlkAylqHyvhIg1kk0aW1IEfgfDL/qT3P5S8w=)
2: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: DTk6CUAks7LYdSf0vgXMa5R+VZkQqh12hNte2JLKUwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:12:3b:34:fe:72:e7:90:2c:cc:4b:1f:12:5a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: Sep 7 04:00:24 2025 GMT
Not After : Sep 8 04:00:24 2025 GMT
Subject: CN=2100fe9612595012a35fecf6c9cc526401530f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:56:bb:30:11:19:35:41:6c:c7:f5:42:76:
3c:47:ea:81:0d:c3:ec:63:74:a6:6a:15:20:65:6a:
3f:0a:e1:a4:e4:db:2d:1e:94:46:51:55:95:68:67:
74:c2:9d:7d:92:32:f7:6f:53:97:68:27:2f:66:48:
7a:8c:3a:e9:6f:1f:61:56:ab:82:4c:e0:18:89:33:
b7:7b:9b:86:bf:1c:10:31:a7:4c:d4:03:55:d2:1b:
af:4f:f5:6e:3a:4a:2f:44:12:ba:fd:56:4e:7d:65:
86:81:3e:15:e8:86:00:2e:e5:aa:a7:ea:b9:61:ef:
97:11:45:2a:e4:bc:1c:e6:d9:79:15:91:cb:bb:5f:
b5:49:1d:32:48:9f:c9:c9:37:54:45:39:3e:06:e2:
94:8e:1d:5d:bc:52:63:39:fc:ff:ed:dd:44:8d:6e:
0a:10:01:34:ef:ae:c1:5a:02:88:dc:a2:50:83:d4:
5f:5f:ec:0e:c2:af:6a:06:49:08:72:c4:be:3f:b2:
1d:3a:c2:d3:00:f1:cc:1a:2a:85:60:34:87:69:04:
c3:62:60:98:77:5e:e2:e8:dc:91:43:ff:a8:be:b3:
4f:03:ff:e4:90:83:84:6b:82:dd:49:ec:d7:96:61:
ed:cf:47:b7:ec:5f:00:ac:95:fc:a2:a8:1d:e0:30:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:FE:96:12:59:50:12:A3:5F:EC:F6:C9:CC:52:64:01:53:0F:7C
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:09:c7:3f:7d:f1:df:c8:71:2d:02:d9:df:ec:eb:a4:0d:c3:
84:02:1b:f6:ae:bb:38:67:ad:92:0a:90:99:79:78:36:c4:30:
f4:9a:57:ff:02:25:83:7f:1c:d0:31:01:49:c3:3a:e2:83:76:
a4:67:4f:20:1c:f3:3b:45:2c:e6:b2:b3:3f:3a:0f:5e:65:c0:
3c:d0:65:86:9f:bd:91:03:f4:3b:9f:dd:94:7a:09:bd:97:96:
68:b1:1a:db:64:3a:90:35:3b:75:86:8d:c1:09:fe:1a:f7:4e:
73:28:3b:e3:f4:fd:10:56:12:7b:0d:4f:b1:1b:59:ce:c5:73:
fe:ba:21:ab:16:96:83:dc:65:8d:73:37:b6:a9:75:66:96:1b:
7d:00:08:ec:31:c8:1a:5b:34:6a:df:54:47:bb:fb:68:2d:bf:
9f:b6:ce:67:6e:39:e1:16:fb:75:ea:02:22:38:f9:a8:a3:ef:
1d:c5:a5:ef:c8:39:6c:4c:8d:87:5f:ed:a7:68:8c:02:bd:f2:
7e:76:d2:ee:8f:81:07:ef:00:83:bd:f3:74:c9:ad:51:cf:14:
50:63:31:17:e7:fd:a5:87:67:30:e3:fe:4d:54:cf:60:65:41:
f5:1e:69:de:4f:77:a8:6a:59:83:e1:07:13:8c:e0:f8:a3:c3:
f6:0c:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:32 2025 by rpki-client