Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: y1B77BrusncMLqPRiM+LSWi7PmV+DLF6jU71sRCMehQ=
Subject key identifier: 82:10:E0:BD:D3:03:AC:CB:E5:17:AB:2D:95:87:B3:C1:B6:84:9A:49
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019880C29260EBB24AB8AD51B4ABD5407D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0A06
Signing time: Wed 06 Aug 2025 19:01:31 +0000
Manifest this update: Wed 06 Aug 2025 19:01:31 +0000
Manifest next update: Thu 07 Aug 2025 19:01:31 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: 1cQKEQzLOYXYgxd2ADqfk13+rjYn53TXnJ9exaN/O1s=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:92:60:eb:b2:4a:b8:ad:51:b4:ab:d5:40:7d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Aug 6 19:01:31 2025 GMT
Not After : Aug 7 19:01:31 2025 GMT
Subject: CN=8210e0bdd303accbe517ab2d9587b3c1b6849a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:16:a0:6a:b0:35:81:7e:d8:91:22:cf:88:7f:
01:bd:b0:dc:6d:1c:bc:6f:78:98:6b:34:c0:87:bb:
ee:46:79:73:f3:ca:4c:ee:a7:e8:a9:9d:69:3d:a0:
8d:2d:47:ba:45:e2:f3:bc:24:b4:1a:c3:ee:90:54:
6c:09:fb:b8:e0:27:ce:65:3d:36:35:5d:cc:ea:ce:
60:56:23:a5:7e:f2:f7:af:bc:90:66:bf:2f:cc:e7:
cb:03:10:ee:22:ea:14:c8:be:76:ef:c9:73:33:08:
ae:b3:9d:fb:2f:50:0b:c1:30:76:0c:d1:e6:a6:69:
05:44:d8:a1:d1:4b:c5:7c:f0:2c:e1:3b:a5:7c:c8:
e9:16:3f:82:64:36:ad:ed:0b:ec:bd:80:e8:a7:13:
25:30:ca:33:0c:ca:39:30:4a:0b:39:08:40:6b:02:
cf:12:65:18:e1:f0:18:d9:71:3f:0d:22:eb:ec:eb:
2c:a7:b6:7e:24:ca:b9:13:be:96:29:1b:19:53:8b:
a4:9e:8d:a6:f8:5a:4d:0f:d5:30:e8:62:df:3e:3d:
bf:c2:33:00:fc:e4:ff:f3:3f:d4:08:25:b3:d2:03:
82:ce:41:d5:86:da:3b:fe:b4:da:83:b3:99:cf:58:
25:f6:ec:99:bc:4d:d1:56:90:ac:9e:dd:03:b5:df:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:10:E0:BD:D3:03:AC:CB:E5:17:AB:2D:95:87:B3:C1:B6:84:9A:49
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:33:dd:bb:5b:31:eb:6a:b5:55:5b:4c:1d:8b:a9:84:4a:61:
59:54:6f:ff:98:fe:1a:fb:59:cf:e4:be:50:fd:ec:84:e0:2f:
c4:e7:9f:ed:63:3b:63:6c:b7:76:83:e2:83:25:d6:25:cf:58:
26:29:94:49:31:27:b1:e0:3b:68:31:80:dc:1d:a2:ea:cf:b6:
66:58:02:fa:64:6c:c2:78:3e:b4:c3:4d:dd:de:d1:29:f8:39:
b2:47:4f:e3:52:00:1b:83:29:df:4b:31:8b:a3:d5:79:60:35:
f1:17:f8:09:ef:80:a4:05:e9:30:5e:c7:f6:de:ed:cb:f8:31:
7e:01:47:e9:10:18:51:68:15:c1:5f:93:e7:4a:b0:68:c9:b1:
c9:83:dd:d7:e7:3f:fc:31:f3:e0:95:09:00:47:fd:df:77:f9:
87:28:4f:11:29:46:f9:9b:f9:75:0c:86:e6:b1:17:d3:fb:3d:
38:f3:66:74:96:00:40:30:24:d1:de:4a:a2:84:a3:04:78:cd:
64:c6:99:c4:a5:db:ae:b3:5a:90:45:77:af:34:7a:3c:dd:30:
64:cd:c5:22:14:c2:14:ff:e0:d2:51:d1:a8:26:2d:96:63:47:
f3:0c:6f:da:c8:07:93:46:a9:5c:9d:b0:2b:b6:c1:a7:2d:25:
17:f6:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:54 2025 by rpki-client