Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: MVA3u3h+j975D5xCgIWrlHdDYdHD9OnqDm6j7bVBpmI=
Subject key identifier: 9C:3A:05:1D:CC:DE:47:E7:DF:EC:3C:DC:A4:15:3B:7B:3D:37:44:97
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 01988B0FC0F744DB32EAEFE8EBD0AB36BDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0846
Signing time: Fri 08 Aug 2025 19:02:02 +0000
Manifest this update: Fri 08 Aug 2025 19:02:02 +0000
Manifest next update: Sat 09 Aug 2025 19:02:02 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: KINK7Nmqyrcj1U5fQOZkjHe91AMmfpBx3+SUDHMm40g=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:c0:f7:44:db:32:ea:ef:e8:eb:d0:ab:36:bd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Aug 8 19:02:02 2025 GMT
Not After : Aug 9 19:02:02 2025 GMT
Subject: CN=9c3a051dccde47e7dfec3cdca4153b7b3d374497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:c8:ac:f5:1a:22:28:a1:e9:57:3a:53:12:
4d:28:3a:91:6d:9b:8a:47:ed:49:42:41:29:70:23:
1c:0d:99:6e:36:61:f4:a5:a5:46:a7:e9:92:5f:25:
c6:5f:33:95:57:ff:61:dd:0f:92:ce:f1:f6:70:3b:
02:fd:88:23:e3:f1:a4:17:44:ac:5f:d5:b9:9f:1e:
ee:7e:0d:38:bb:46:9c:65:88:0d:25:31:61:64:eb:
3e:31:d4:76:60:69:00:e1:17:c8:61:00:22:d7:43:
7f:40:56:2e:ea:9a:ec:55:2e:81:12:db:5a:59:68:
cc:6f:50:8c:9d:5f:9c:df:34:3f:e7:44:52:91:91:
03:77:cc:f3:c3:51:68:99:4e:4c:b8:d4:c2:fc:70:
68:f4:bc:57:ff:98:d9:e8:44:80:86:d8:40:8e:89:
9c:8a:f7:ac:b3:66:d1:2c:16:05:1e:e7:cb:4e:a4:
50:c0:ec:27:f6:99:01:79:28:27:f0:2d:7b:24:0a:
0a:c6:84:02:da:85:11:7a:66:d1:b1:f0:0a:0a:d3:
e8:d2:38:fc:93:f7:84:b6:82:78:69:31:fb:e6:93:
1e:77:9a:b6:1b:68:ea:92:a8:e3:59:64:b9:20:a6:
57:d5:e8:2e:aa:9a:81:3e:67:45:5a:6b:a3:20:aa:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3A:05:1D:CC:DE:47:E7:DF:EC:3C:DC:A4:15:3B:7B:3D:37:44:97
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:75:4c:5a:d3:2c:c7:93:00:45:d4:12:b8:65:ac:81:e1:
ff:71:25:f3:41:56:15:14:a0:38:20:0d:fe:b7:80:7a:e1:d5:
70:47:fd:bd:8c:37:a4:5c:6a:6f:43:21:2c:a3:ab:6d:86:55:
53:cb:df:4a:08:17:10:8a:79:3b:ed:b7:84:0a:03:58:09:b1:
3e:64:28:5f:e8:7e:ef:58:f7:e2:7e:c1:04:21:5c:c4:84:08:
4a:b1:fb:a2:8b:7d:40:70:71:12:f8:a8:33:ea:b1:23:1a:09:
0b:ed:1b:cb:fd:34:bb:27:1a:97:9c:70:ab:1e:93:f8:fb:4f:
12:db:b5:b6:0b:e3:17:7e:65:dd:d8:1d:de:dc:43:82:d4:67:
98:80:33:f6:b4:70:82:67:0f:de:9d:92:dc:e5:c8:06:12:a8:
57:7f:a2:f9:3b:6f:f0:06:4e:15:2e:60:c2:39:13:36:8a:19:
5a:b7:7a:19:f9:ba:f3:b0:78:fc:82:5b:a8:a7:50:2a:3f:20:
b6:c2:63:e2:4b:a8:0c:2e:96:3d:6c:6b:2b:ca:09:b6:c0:6e:
51:35:6a:3e:5d:0c:5e:09:fc:f0:7e:de:65:76:d6:24:fd:b3:
9c:80:00:b3:62:74:da:0d:8b:43:31:a4:78:f9:30:d0:1f:ad:
00:28:35:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:55 2025 by rpki-client