Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: amKi2U6ObF+39tDKgQJNGlC99JKP4U1zTwidgaZtRhA=
Subject key identifier: 22:FB:5B:38:C0:73:A0:53:39:5E:0C:EC:79:60:A2:DA:45:CF:3E:97
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019A20D21BF98258A6E539660E46B24AB98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 14:00:31 +0000
Manifest this update: Sun 26 Oct 2025 14:00:31 +0000
Manifest next update: Mon 27 Oct 2025 14:00:31 +0000
Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: Z3mJcisPnAjabl8GRyGPmbDQleCPFmnnO1G3BqsUSsU=)
2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:1b:f9:82:58:a6:e5:39:66:0e:46:b2:4a:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Oct 26 14:00:31 2025 GMT
Not After : Oct 27 14:00:31 2025 GMT
Subject: CN=22fb5b38c073a053395e0cec7960a2da45cf3e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:bc:b2:23:50:87:49:ca:62:7f:0a:ef:e2:
06:d2:0f:2f:35:99:81:e1:a0:97:f7:73:dd:fe:d1:
fa:aa:e1:67:14:af:82:71:39:f1:67:13:d6:2b:4e:
09:68:55:30:c0:cd:3d:30:13:e6:93:70:4b:b7:8b:
28:88:9d:7f:c0:40:7a:e5:85:be:31:03:a6:a3:84:
aa:44:75:aa:c3:68:de:eb:22:98:0d:f6:0b:f2:41:
3b:64:fb:dd:4a:ba:52:49:75:73:29:a5:92:d5:15:
35:4c:23:98:1e:4b:6d:7c:66:05:cc:80:8c:84:b2:
2b:c0:49:73:6a:f8:0e:0b:80:38:43:6d:0d:6d:bc:
c7:62:db:d4:e1:b2:48:fc:bf:e6:c4:c4:ba:36:70:
d3:77:f2:af:ea:31:fb:f3:0f:c9:86:55:56:d6:ea:
d6:e5:ee:6d:fe:e5:8e:9a:ef:28:0b:da:b1:b8:26:
f2:29:e1:03:30:61:65:c6:e0:72:47:b1:55:d5:15:
02:b5:dd:69:dc:57:79:3e:66:40:cb:7d:c4:88:d3:
86:c4:2a:55:e5:9a:07:70:08:45:f6:ae:1a:ff:81:
ef:05:04:a5:23:f9:07:76:f0:ef:b3:57:ba:94:d0:
13:46:a9:89:fd:89:bc:91:82:eb:9c:4c:69:04:07:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FB:5B:38:C0:73:A0:53:39:5E:0C:EC:79:60:A2:DA:45:CF:3E:97
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:56:6b:a0:95:f8:17:bb:e5:7f:b8:d2:74:8f:3e:6c:df:3c:
24:30:1c:c4:08:44:bd:69:75:49:0a:db:69:3b:de:5d:8f:08:
44:d3:74:e3:2d:de:ab:a5:c8:70:9e:65:5c:52:09:d9:95:99:
24:0a:c6:46:48:2a:51:ea:4a:19:d6:51:c0:6f:52:e5:ab:47:
1b:32:20:f8:9b:73:1c:d1:e3:a9:21:7d:b7:cb:24:98:43:be:
10:d5:42:9f:1d:2b:50:03:b0:a2:bb:60:45:0e:38:88:b2:4d:
79:ce:28:b6:4b:38:b6:11:22:92:4b:22:bd:5a:3a:b8:7e:ef:
87:fa:44:3c:68:62:be:15:bf:c8:72:37:30:e4:f5:6c:71:c5:
a9:ea:3a:fb:6f:a0:c0:bc:ea:ad:c5:03:d0:7e:a6:d4:07:44:
6d:66:cb:bd:8e:2e:92:f3:be:b4:7f:e3:c8:e1:22:b4:18:f6:
33:36:8a:d3:93:d7:be:f8:62:07:66:0f:af:2e:2d:ba:8b:ff:
5e:4b:91:9b:e7:f4:79:a4:54:35:d2:66:d2:ab:dd:e1:d8:c9:
89:95:e3:41:b9:27:46:41:5e:9c:a7:b8:e7:79:7a:ff:42:c2:
75:7e:c8:ff:90:6a:18:ea:12:35:4f:6f:75:48:d6:e0:f2:33:
a8:7b:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:44:41 2025 by rpki-client