Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: QahOuQCPOVmzSkX1f0mDiV7VpYFtQyPE8t3PVOPvQ54=
Subject key identifier: E2:C7:82:45:25:ED:50:EA:19:7A:73:0C:68:87:A9:FD:AE:81:0A:54
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 0199350226ED2A7E173E3BE08958A4AAC414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 089E
Signing time: Wed 10 Sep 2025 19:02:37 +0000
Manifest this update: Wed 10 Sep 2025 19:02:37 +0000
Manifest next update: Thu 11 Sep 2025 19:02:37 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: cw6wX4scdBhkmFFc9lTkEGwzeL3FCoBJxdJ7tKbg3a8=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:26:ed:2a:7e:17:3e:3b:e0:89:58:a4:aa:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Sep 10 19:02:37 2025 GMT
Not After : Sep 11 19:02:37 2025 GMT
Subject: CN=e2c7824525ed50ea197a730c6887a9fdae810a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:ed:ce:94:20:c0:a9:0f:c9:27:31:b5:c7:
fe:1d:72:07:12:bb:75:44:0c:65:70:ff:17:a6:38:
1d:93:be:12:32:01:f0:bd:58:57:68:a6:b7:d7:63:
7a:74:a6:d1:92:a0:91:95:0c:9d:5f:90:51:3c:b5:
19:13:04:3b:d4:39:57:7f:f5:31:8d:54:4e:b9:4d:
20:38:22:31:0c:c0:06:b0:3c:e9:5c:8b:d2:e8:a1:
de:89:dc:f3:a0:88:1d:b2:c3:b9:e0:95:2e:c8:64:
54:0f:91:3b:ea:f2:79:16:ba:4f:24:b6:40:64:df:
71:ec:22:2a:70:2c:87:e9:16:89:4d:9c:98:1b:b9:
8b:89:b1:f8:5d:21:63:6f:dd:3b:b2:68:92:7c:60:
d9:8d:87:1b:93:ba:f9:ff:ff:73:2e:49:55:04:cf:
15:04:5f:14:a2:bf:92:dd:31:d4:14:cc:0b:48:86:
b2:4e:07:aa:86:8d:24:59:d0:03:b1:2a:c8:bc:5e:
16:7a:37:0d:f8:e6:88:cf:22:ad:8b:a8:76:5d:c8:
75:fe:3c:e6:3d:5c:cf:ca:fa:08:11:d6:c4:eb:f1:
bf:37:77:fb:bf:7f:3b:81:db:9d:4b:03:17:79:7e:
b6:f9:73:ae:42:85:1f:e9:68:36:72:69:2e:e9:df:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C7:82:45:25:ED:50:EA:19:7A:73:0C:68:87:A9:FD:AE:81:0A:54
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:66:d3:2e:1c:6d:d9:c7:be:75:2f:3b:47:ef:08:fd:3d:
51:c4:a5:ed:62:9a:cf:de:61:8d:c4:a9:71:34:e9:0f:fd:c9:
e5:92:45:f8:23:7c:46:98:34:73:cd:ff:cf:5f:4b:44:23:a1:
e5:68:6c:48:b7:0d:a0:f4:9b:8e:80:50:d4:77:43:c1:37:0b:
be:95:c1:ee:71:ea:c3:ec:d6:46:2f:0b:39:3f:ff:19:c5:ef:
e4:6b:35:86:99:d9:1f:a3:00:54:85:31:94:93:62:48:97:02:
eb:b8:51:b2:2d:8e:3c:e4:c7:78:74:49:0f:c8:81:21:49:6f:
92:b4:84:0c:5b:35:ba:c2:63:ce:f1:c0:d0:d3:04:12:74:fe:
11:3e:34:16:df:b4:fd:a3:b6:31:0a:e2:6f:f6:6b:26:7b:0b:
bf:37:e1:26:5b:34:92:2a:3b:d8:5b:7e:01:01:4b:68:70:76:
a2:56:4d:2c:2b:15:75:eb:41:54:2c:a0:73:dc:db:07:32:e7:
54:b6:99:e4:24:8d:eb:08:0b:f8:bf:7b:38:2f:33:1f:b0:5d:
43:1a:b2:98:47:04:19:65:de:57:0c:85:80:4c:52:c6:23:7f:
d4:ee:ca:70:70:74:80:a1:bb:14:04:b2:30:47:00:6b:12:c9:
f0:96:9c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:43:12 2025 by rpki-client