Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: P5Wabui9MsekgRfOMwM21DFIOWJELC9Z/GmpIvymcgU=
Subject key identifier: F5:08:79:45:F1:42:5A:F3:E6:47:8D:C9:97:6B:C0:36:24:25:C6:A4
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 0199239F01CBFC0CAC06ABADB00B578038BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0A2E
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: 3GSug14snlgiM4NgCFj6oXWTQQ7l98zwkOatkAbBKD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:01:cb:fc:0c:ac:06:ab:ad:b0:0b:57:80:38:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=f5087945f1425af3e6478dc9976bc0362425c6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:e2:9a:21:5b:79:92:40:33:07:52:d7:0f:
69:3d:47:d6:3b:fa:27:48:9c:e9:c5:00:da:cf:23:
0a:71:65:b1:21:82:ab:4e:7c:7a:ff:6f:23:a6:8d:
78:29:44:65:82:fb:2b:98:c6:77:6a:b1:bd:cd:15:
5a:17:b2:84:f4:84:07:65:5e:bf:bb:89:bf:e7:4d:
10:59:b0:3c:9b:c3:fe:3d:7e:9a:ed:16:44:ef:1b:
65:b1:ae:ef:7c:ea:d5:87:21:ad:22:22:63:2a:83:
df:51:b8:6b:d7:9a:0b:3b:52:96:ce:9a:b9:18:db:
fb:7d:18:9c:ac:c3:2d:3f:ef:08:6a:ae:9b:89:b2:
50:b2:45:de:e1:cd:24:52:1c:3d:8d:5f:f1:f4:f1:
2a:f8:84:95:f2:1e:8b:5d:a5:5e:e2:26:80:fe:c5:
2e:43:0c:93:83:41:87:6f:d8:d5:41:7d:1a:a0:8e:
8d:3e:7d:44:42:cc:86:3d:7a:23:b3:95:17:2c:83:
92:0e:f3:5c:3d:f1:2f:98:e8:d8:5f:e4:a9:bb:bc:
62:36:19:0f:07:51:08:2f:f5:96:8a:c1:ee:51:08:
9c:92:64:11:f5:b5:b1:42:51:95:da:2d:1b:23:d4:
2c:a5:0f:22:32:52:c3:65:18:e6:6a:1f:a2:07:6a:
8d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:79:45:F1:42:5A:F3:E6:47:8D:C9:97:6B:C0:36:24:25:C6:A4
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:aa:f0:86:f1:27:05:e0:1a:9c:f3:f7:cf:d8:a0:25:da:4b:
7a:27:88:f8:00:d5:f3:b4:eb:bf:2b:64:dc:aa:d7:99:fd:62:
4e:c4:2e:c3:3a:0c:d9:35:00:5e:1a:87:85:51:b0:68:c3:ef:
4b:47:09:da:0c:9b:04:33:fa:37:53:86:d9:84:2c:74:e4:89:
cf:02:d6:03:af:a8:d5:2d:87:e9:36:4d:95:38:61:3b:f6:94:
f6:1f:87:8c:e7:58:e0:99:5c:24:9a:24:63:91:a1:a1:30:b7:
cb:cd:48:88:fa:4e:9f:6e:96:c8:32:71:60:83:db:4c:ab:89:
ce:56:18:ba:73:52:ac:1d:5f:01:0d:78:65:03:cf:06:9b:24:
77:06:0b:dc:6d:d2:e5:b5:c4:0d:9f:d7:25:2b:6d:76:5e:58:
28:6c:46:c9:90:30:7b:08:1a:5a:02:50:a1:72:d0:64:2c:6f:
e2:4a:64:26:a7:53:dc:60:03:a7:3d:38:be:25:90:c1:b8:fa:
da:4a:0e:ef:94:83:31:63:de:10:e1:72:80:87:dc:dc:a6:61:
0f:f9:94:51:a4:8f:20:be:84:b1:60:be:9e:48:98:74:c2:d6:
27:43:27:88:b8:a3:0e:fb:46:83:2e:81:67:36:cd:99:6f:94:
3c:ba:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:26 2025 by rpki-client