Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: YB3tb/qBB9b2+et0XwyFLD5deRb0ADN9f7SA4AuDqGc=
Subject key identifier: 95:6C:2E:B6:01:9C:2A:89:E1:41:81:B8:AC:65:8B:68:22:1B:EC:B2
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 0199240D75592D975151D61857E54180E66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 12:01:25 +0000
Manifest this update: Sun 07 Sep 2025 12:01:25 +0000
Manifest next update: Mon 08 Sep 2025 12:01:25 +0000
Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: e9Y0J2URk6sKahSHOfbyyrS9YJrvoKwIqPoVFbW5dEg=)
2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:75:59:2d:97:51:51:d6:18:57:e5:41:80:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Sep 7 12:01:25 2025 GMT
Not After : Sep 8 12:01:25 2025 GMT
Subject: CN=956c2eb6019c2a89e14181b8ac658b68221becb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:54:db:f7:d2:d4:bb:1b:f9:96:fb:86:e4:
91:5c:70:07:c7:de:ab:94:45:c0:07:68:8a:fc:98:
3c:d2:99:7d:d0:73:01:ba:0a:4f:5d:40:41:04:e3:
5e:a0:37:f6:c1:42:f0:87:c5:18:7c:72:6f:d9:ee:
f6:69:b4:3e:03:fb:54:43:5f:9a:71:c5:00:2f:f8:
54:e2:6b:6a:84:0a:b2:f3:2e:79:ae:b2:be:7b:2c:
90:e4:30:17:0e:12:af:f5:3d:33:47:af:05:9b:6b:
c5:ea:67:ee:a3:94:02:c2:db:bf:6c:60:a8:db:8b:
ba:8c:0b:ff:93:90:c6:2f:be:e2:0c:32:5f:4d:5b:
a9:75:6b:d1:86:11:9c:7d:2e:3a:30:54:38:74:14:
eb:88:23:02:ea:d9:55:d0:7e:de:42:00:a2:13:62:
36:d3:bb:ad:a8:f0:f8:bb:06:bd:e9:68:75:82:4c:
63:bb:3c:6e:d2:92:eb:7f:e1:ac:26:78:9a:b9:4d:
b6:6e:f1:87:de:73:d8:85:d5:80:71:67:68:52:73:
32:c1:ea:49:0a:a7:37:c4:20:7b:ac:d9:fa:72:52:
cc:b0:6f:b4:58:4a:8a:b8:78:26:35:99:53:76:79:
ae:34:11:52:81:e2:a2:91:02:71:54:a8:c5:bf:2d:
cf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6C:2E:B6:01:9C:2A:89:E1:41:81:B8:AC:65:8B:68:22:1B:EC:B2
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:05:00:5c:78:23:4a:00:bc:15:77:2a:6d:90:10:e4:af:67:
5f:91:ed:8d:4a:ec:36:b8:2d:65:9a:a6:89:da:ae:ba:72:68:
04:ec:a9:18:ca:1f:41:d5:fe:5b:a4:de:ca:00:63:3c:31:d7:
fb:c2:51:49:9f:f4:36:d2:c0:5b:d0:e9:c4:1d:b1:fe:73:18:
03:5f:a3:0f:81:a3:46:97:01:17:5d:04:ca:db:c4:1a:fa:4c:
cd:97:04:25:98:6c:20:5c:0b:7c:62:29:ae:53:f0:58:22:22:
ee:39:6f:15:3b:f5:9a:0b:76:0e:61:46:71:7f:7a:4e:c3:9a:
71:10:af:7c:45:10:55:b7:50:78:7b:fd:1e:43:40:00:22:64:
71:af:0a:5d:d1:ba:d5:03:08:98:4d:ec:c5:7e:cb:9b:37:6b:
6c:dd:72:fd:52:6c:c2:41:81:3f:30:8f:5a:8d:9c:7f:34:71:
4f:42:60:81:59:d6:26:61:9b:cd:a9:df:76:56:2a:41:3e:c1:
f4:81:19:94:bd:d6:92:c3:08:d7:64:07:a9:50:e3:92:da:8e:
ce:1a:af:ae:c9:58:37:9b:0f:ad:11:7b:a4:00:f1:66:b4:40:
bf:7e:45:44:51:a7:98:3c:39:62:7b:80:11:a2:aa:29:43:f5:
94:58:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:53 2025 by rpki-client