Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: tRI6iQb7VmyNV5ix50AYF2Gv8rW6x1lLmaOLiPShAio=
Subject key identifier: 1E:66:8A:77:8C:42:24:8C:B5:B1:0E:C9:8B:6E:28:3A:5B:56:70:D6
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 01993649B385471C69CDCC68E4984A2BB746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0840
Signing time: Thu 11 Sep 2025 01:00:23 +0000
Manifest this update: Thu 11 Sep 2025 01:00:23 +0000
Manifest next update: Fri 12 Sep 2025 01:00:23 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: kjTm8S45WJdlWPOPGTF5Zp0luBouUQI1LdM0a0A6N6U=)
2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:49:b3:85:47:1c:69:cd:cc:68:e4:98:4a:2b:b7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Sep 11 01:00:23 2025 GMT
Not After : Sep 12 01:00:23 2025 GMT
Subject: CN=1e668a778c42248cb5b10ec98b6e283a5b5670d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:c2:a3:43:56:e5:ff:d1:6c:b2:63:31:c3:
a0:30:9d:b8:35:a9:c8:f4:72:6f:0d:f5:43:ec:92:
2c:ba:ad:96:9e:ba:94:e7:3b:6c:5b:d9:11:22:80:
b5:aa:1f:79:56:b7:c9:b6:06:16:36:8a:8c:da:fa:
f3:a0:62:37:6b:c7:00:ba:2b:91:75:f4:2d:8d:57:
ab:6a:f2:0a:0e:7b:ac:92:77:2e:39:6b:81:db:1b:
34:bb:b9:e9:10:61:4a:11:5a:c5:fb:89:11:dc:56:
41:80:cd:b3:7e:02:c1:8f:b4:29:29:bd:aa:a1:ab:
f8:ab:0e:e5:a6:2c:d2:c3:b8:75:e2:44:51:30:ee:
86:d1:5e:a8:4c:b4:02:16:e2:15:6c:15:cd:24:54:
f8:76:14:cb:12:90:3e:ec:6d:3b:4f:30:d4:61:e0:
ae:da:5f:cc:7e:55:a7:75:1c:46:55:dc:b9:b6:a3:
43:25:bb:85:72:37:97:44:90:25:2f:1d:e7:b5:57:
a0:4a:35:52:42:68:04:e9:61:d1:aa:57:c8:07:30:
cc:ea:14:1d:24:b9:59:8d:1a:5e:95:c7:e7:49:42:
bb:09:63:77:0d:4d:15:25:49:e1:39:66:a0:b7:bc:
ee:db:31:2d:4c:af:7d:17:84:d5:fa:8f:10:a9:e3:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:66:8A:77:8C:42:24:8C:B5:B1:0E:C9:8B:6E:28:3A:5B:56:70:D6
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e2:a2:d3:6e:67:8a:78:39:10:84:fd:d2:d9:3e:c2:88:6d:
84:69:b8:e0:4c:8e:c0:52:98:95:02:28:f2:80:33:0c:5f:53:
7a:6c:8f:c9:13:44:e4:a7:79:9d:bf:21:77:07:be:67:cf:f4:
8a:4b:ff:be:bc:da:3e:1e:54:fb:b0:bb:26:68:6f:e0:1e:44:
71:28:3e:9d:99:df:24:a8:8c:3e:4c:32:58:04:58:86:af:7b:
b5:4d:46:1a:4d:f0:c3:a8:fb:a1:e5:9a:69:7d:a3:45:64:9b:
2d:67:19:95:12:bc:33:31:6c:34:3f:d7:2e:6e:46:21:ad:62:
5f:96:8c:5e:0a:17:85:13:9f:49:a3:5d:99:64:54:6e:e3:7d:
a8:be:39:5d:aa:11:21:f2:9a:f0:16:42:fd:2d:71:67:c1:2f:
d9:b0:b4:d8:d6:47:78:5b:78:b0:df:21:7d:35:af:4f:8a:9f:
9f:da:36:d8:87:fc:df:09:00:b9:90:93:c5:84:53:e0:b1:46:
5e:81:1b:c9:66:1b:95:94:fd:3d:e0:83:20:0b:ca:72:6e:74:
73:4d:3b:99:84:3e:72:0d:1d:03:a2:fe:43:47:11:e9:48:be:
48:f7:27:ab:89:05:11:50:cd:19:67:9d:53:eb:cd:84:9f:df:
87:cd:fc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:52:42 2025 by rpki-client