Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: iXdwLG2f1fggYnN60imxHsBdssq1M/c2qoXNqZtrUPA=
Subject key identifier: 3F:9D:2F:44:2C:16:11:D2:FF:D7:15:75:43:51:FE:D7:CB:FB:02:26
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 0198733DCB14987AA3E41F987C5DDAFD6A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 09E2
Signing time: Mon 04 Aug 2025 04:01:26 +0000
Manifest this update: Mon 04 Aug 2025 04:01:26 +0000
Manifest next update: Tue 05 Aug 2025 04:01:26 +0000
Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: fLFgZYSi1lbzrl6JS6YXi02BKKG5CibZOcIFzr7/8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:cb:14:98:7a:a3:e4:1f:98:7c:5d:da:fd:6a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Aug 4 04:01:26 2025 GMT
Not After : Aug 5 04:01:26 2025 GMT
Subject: CN=3f9d2f442c1611d2ffd715754351fed7cbfb0226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:19:bb:b2:6d:6e:ad:2c:35:99:6e:be:c6:
7d:b0:3e:9d:f1:95:8a:cc:51:33:fd:8e:c7:4d:5d:
eb:44:f8:73:3b:de:84:10:71:a8:62:6e:bf:89:ae:
dd:83:1f:b7:db:dc:cd:5c:3c:99:68:4d:0d:c2:02:
f8:e2:41:22:e6:ad:26:9c:ab:da:2e:ef:9a:74:c7:
b1:5c:8e:ed:93:83:ce:6c:15:29:b5:4b:82:57:3a:
18:42:71:7c:fc:2b:1b:d4:00:be:d4:31:60:c5:92:
ed:a1:26:6f:67:a7:79:38:36:2a:d4:f0:cd:cf:5f:
05:12:69:28:d5:c4:75:12:98:ef:9e:1a:55:30:9c:
61:89:05:f8:81:45:d3:de:08:ca:d2:32:1a:ec:f3:
f7:28:a5:2a:29:97:c7:ce:04:84:09:e9:f1:fb:a2:
cf:70:61:d1:de:59:c1:9d:b9:a9:25:88:73:dd:f1:
b0:3d:b4:d1:98:9c:d8:61:b2:69:2d:38:d5:59:68:
10:33:f2:a9:e5:9d:fb:24:ed:7f:51:64:10:0d:3a:
b3:f0:9d:a9:64:df:7d:04:5a:2c:be:a7:f4:4c:ca:
15:a2:e6:1d:01:e7:3d:96:a1:41:f7:1b:20:b1:5c:
91:94:92:79:44:2e:1f:66:2e:2c:24:9c:7d:6b:da:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9D:2F:44:2C:16:11:D2:FF:D7:15:75:43:51:FE:D7:CB:FB:02:26
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cb:97:8b:99:4e:09:62:29:2e:bb:24:7d:f6:1a:60:bc:33:
c2:ca:26:57:6f:46:02:4c:e2:17:65:d5:56:fb:0f:c9:61:fc:
eb:2b:c9:98:c1:8e:ec:d6:94:4d:45:06:c6:f0:97:f4:69:30:
4c:32:b2:08:ec:76:73:00:0b:6e:e9:8f:fd:e6:49:58:91:72:
dc:6b:97:ce:bb:73:77:3b:12:18:ef:1b:d8:30:1d:db:18:a1:
82:2b:9b:a6:be:b9:d6:34:b6:dc:a5:3e:ec:9a:74:2e:66:fb:
a8:9a:af:77:56:f4:66:e6:74:76:c2:93:27:77:0d:5f:eb:24:
5a:dc:22:fb:f1:f6:ce:d8:b1:10:59:c9:13:d5:7e:de:81:9c:
c8:dd:65:80:20:27:97:de:cb:d0:08:f8:36:90:bb:b7:84:d5:
da:0b:1d:3c:af:a2:6d:09:b0:38:c2:c9:32:fb:85:86:3c:74:
d7:05:59:7e:ab:f7:7f:1a:93:81:98:fc:f9:84:e4:e6:5a:64:
4a:04:63:81:e6:44:8a:0d:20:f6:49:d8:ae:1c:83:95:e4:82:
45:75:23:75:9d:70:77:8a:e2:b4:59:03:26:ae:9e:35:0a:88:
4d:dc:34:a6:93:26:6d:8e:0a:e9:2a:fb:7e:a5:5d:cf:d4:5e:
5d:5b:25:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:09 2025 by rpki-client