Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: Vau/XTVjx07CYyNlIYHB6WL6niBxexxPtc9TB0pWcfg=
Subject key identifier: B7:4E:2B:2D:91:10:34:D1:AC:1F:CC:6D:3C:2D:0C:FC:EF:C3:08:2F
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 0198D5BC153B114278EE988990E51611CE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0A32
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: sTHEbwqG57C1YmHFY43YO18Vbd/nEHUf7gl/eOFLbfA=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:15:3b:11:42:78:ee:98:89:90:e5:16:11:ce:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=b74e2b2d911034d1ac1fcc6d3c2d0cfcefc3082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:ef:c4:0e:47:9f:a5:a9:75:4f:e1:38:d2:
3c:54:85:38:19:48:be:8f:58:27:53:03:24:cc:64:
3b:10:1d:c2:0a:64:7a:23:66:0c:7d:a4:c8:cf:1f:
04:de:60:4a:4e:68:2f:b8:88:f8:f6:d1:9d:d8:ce:
05:c6:8b:09:a1:eb:f8:ae:4b:e4:dc:ca:f4:a8:3e:
22:b0:02:64:0d:06:0f:e5:3d:91:72:eb:aa:76:c8:
fc:13:d0:82:8a:0e:a6:99:26:7d:2a:22:ff:6c:f4:
29:b6:ae:6e:3c:51:37:8c:63:8b:6f:39:94:29:5c:
9a:9b:3e:cf:09:db:2b:ea:47:00:f4:77:bf:55:4e:
a0:7c:01:6b:79:5f:ab:e5:33:58:e9:c1:16:5f:13:
e9:b5:52:a2:23:7d:76:84:3b:54:d6:dc:1e:c2:dc:
f6:f6:f9:19:da:1e:29:e9:90:c8:89:91:3a:ee:63:
c1:d4:65:c6:d0:f9:d5:9d:b1:dd:6f:8d:ae:d0:d7:
e0:db:95:db:cc:53:f1:87:64:03:4c:74:1c:54:f0:
a0:a6:ee:1b:6e:6b:5a:ee:f5:97:94:41:05:bb:82:
08:46:64:9a:1b:60:86:eb:85:cf:0d:a5:3d:13:a8:
8e:0c:07:2c:09:d9:1c:3e:1e:0d:bf:be:79:1e:e9:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4E:2B:2D:91:10:34:D1:AC:1F:CC:6D:3C:2D:0C:FC:EF:C3:08:2F
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d2:23:05:4f:55:29:7e:b2:9c:80:07:de:e3:52:a5:b3:a2:
ee:3d:6a:09:59:ff:70:a7:6b:4f:9e:09:a1:6c:8c:91:7d:e1:
e3:bb:1f:b5:b0:dd:03:25:a2:ca:4f:90:f4:cf:4c:0f:35:88:
3e:92:19:7d:4c:8e:75:66:d5:43:fb:7d:67:ae:a0:93:39:91:
da:d7:37:ac:9c:47:b4:09:90:ea:4c:0e:04:d6:f5:e0:20:49:
21:86:c1:8c:eb:e8:d9:fd:cb:12:fa:f5:1e:e6:e7:63:26:a9:
a1:99:19:5d:fa:9d:68:e8:c3:9a:54:63:b5:79:03:6d:ca:5b:
89:79:15:6f:4d:c2:c8:e9:73:ca:81:3e:c2:42:63:22:39:29:
50:29:ff:41:1f:d8:84:4c:4d:55:ab:6b:be:ad:25:34:48:e3:
43:1b:19:0f:8e:c5:84:da:da:49:40:bf:ce:81:c4:55:02:95:
37:03:67:7d:72:41:16:5a:97:14:d1:9f:f9:26:94:d0:c0:a4:
2a:2c:39:c9:69:cf:9d:31:af:92:e8:3f:b3:72:c1:80:4b:50:
16:75:ff:03:65:f4:49:a4:be:f0:0d:d8:01:23:a6:60:4c:2c:
3d:c5:cd:f1:20:32:09:bd:6d:29:4c:80:87:02:34:d7:1a:87:
08:1b:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:49 2025 by rpki-client