Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: EvdGuR+xIv0Izl1dopSlaf0SoeYbwJEioceRhb13OYE=
Subject key identifier: E7:6A:46:92:B3:75:2E:35:BF:68:77:55:0D:F2:1C:0B:79:B1:51:2B
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 0199FB7CDD5B597F3F25BE1FCB5525120CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 1143
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: EbuVJXeST1diHySEWsWPtri+uSb/UcrxHUD321oUI9A=)
2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=)
3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=)
4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:dd:5b:59:7f:3f:25:be:1f:cb:55:25:12:0c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=e76a4692b3752e35bf6877550df21c0b79b1512b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:02:fc:13:96:5d:6c:e3:f0:1d:9f:96:5e:
56:71:0d:b0:f1:88:8e:bd:f8:d9:d6:d9:ee:ce:b7:
3f:9c:61:5a:b0:52:e3:12:44:ac:c6:44:93:0d:be:
12:48:2b:5d:8a:4c:d0:06:b8:4a:8c:48:4e:73:d7:
02:c7:dc:b7:11:78:58:ea:80:20:74:d6:67:91:11:
2f:c4:c4:53:be:1c:9b:66:46:c3:12:54:a9:c0:6b:
21:f5:0f:d7:a6:69:12:e0:d8:3a:ed:09:c0:e3:73:
48:58:c4:ce:b3:2a:d3:0f:d4:f7:28:23:71:22:81:
e0:c2:28:24:2d:b5:ef:e3:68:ea:ef:14:53:d1:91:
6c:57:ee:91:b3:ed:8a:18:88:47:6f:49:9f:1d:52:
ca:af:0e:30:a0:81:95:38:6e:eb:b5:02:f0:93:be:
f5:58:ea:a9:e9:cf:ff:6e:f7:06:43:e0:8f:6e:1c:
98:a4:83:fb:ae:88:e5:26:15:d2:b9:9d:94:65:3c:
cd:5c:4a:ab:ff:eb:e9:51:0a:68:a2:16:c5:7a:01:
da:2b:ba:37:27:66:e5:da:f1:ce:3f:fb:b8:4d:41:
db:f0:c2:64:97:93:d3:38:81:33:4e:8c:65:21:f9:
d7:3e:ce:75:1d:d8:43:a4:7e:23:cd:f3:71:03:da:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6A:46:92:B3:75:2E:35:BF:68:77:55:0D:F2:1C:0B:79:B1:51:2B
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:09:c9:76:d9:1a:07:7d:16:10:93:95:1e:51:3f:33:87:65:
0b:da:3f:a7:af:b5:54:21:b4:23:e1:23:a9:c6:a0:f2:dc:8d:
e2:4a:84:71:cd:4f:d1:dc:0e:4c:86:76:71:65:45:2a:e2:d8:
d2:57:1d:af:63:cc:f0:93:71:97:c2:01:32:fe:93:92:65:c3:
b0:f4:11:10:99:67:b2:ef:3d:ae:37:5c:a5:19:46:7b:d6:72:
60:b8:b7:03:a3:2f:a1:5f:f8:c9:fd:34:16:c9:17:84:b7:59:
9c:d6:e5:40:c5:48:5a:ba:ce:12:56:fb:fa:fc:e7:19:a5:80:
9b:f7:a0:05:8a:12:91:c6:83:87:50:06:20:34:81:ef:3c:37:
b8:cd:e8:65:96:c7:eb:07:76:7e:b2:8d:b2:93:a1:ba:3f:55:
80:a5:cb:95:c5:0a:10:fe:06:ab:0c:c6:86:19:d0:05:fd:d1:
1c:f6:94:dc:67:73:24:71:5b:4d:4a:6a:e2:c1:4d:d3:66:77:
26:2d:37:2f:be:b6:6b:2e:fc:44:06:b0:de:20:91:a8:88:51:
8d:c1:3f:39:36:cb:f9:ef:07:a2:f8:dd:de:6c:58:e5:6e:9f:
f5:f2:68:e0:d8:8f:fa:a4:9b:33:d4:ff:d7:66:5d:66:36:8a:
7f:1f:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:26 2025 by rpki-client