Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: p42LQekKVFCOogqjcqjaj78ejlcCQ1Ifj+vhalkYZrY=
Subject key identifier: D1:AA:2D:48:DD:EA:1B:E5:6C:E4:BE:1E:57:8D:FD:6F:4E:7B:FF:8E
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 0199CBD995F95E08210DEB990E7017B754D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 15BA
Signing time: Fri 10 Oct 2025 02:00:58 +0000
Manifest this update: Fri 10 Oct 2025 02:00:58 +0000
Manifest next update: Sat 11 Oct 2025 02:00:58 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: OSKikW/iSXWN50UY8OI9v6j3G7dQlIMkn183JkNXlt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:d9:95:f9:5e:08:21:0d:eb:99:0e:70:17:b7:54:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Oct 10 02:00:58 2025 GMT
Not After : Oct 11 02:00:58 2025 GMT
Subject: CN=d1aa2d48ddea1be56ce4be1e578dfd6f4e7bff8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:c9:4f:63:17:53:1b:27:32:88:f6:35:aa:
af:fa:6d:65:c3:b5:6a:b9:5a:9f:13:12:bd:86:b9:
d4:51:a7:39:ee:f4:b4:a4:3b:bb:7f:a4:a1:45:c4:
14:4a:dc:ba:57:a5:3d:22:99:60:9f:43:bc:8e:75:
72:aa:fb:45:4d:08:b7:27:26:26:8d:2b:0d:80:8a:
8e:b3:ed:26:6f:7b:f4:07:50:fa:5d:3c:36:c1:29:
7e:52:74:39:ab:87:76:d8:92:91:95:06:fb:1a:e8:
7c:53:96:b3:14:3b:41:4e:03:a5:2a:67:bb:f0:4a:
5c:2f:20:54:07:9a:7b:f1:2d:33:da:a8:95:a8:65:
40:e3:14:6c:e8:9b:ac:6e:77:d7:1b:af:d4:69:a4:
6a:c4:8b:1f:43:24:cd:60:3c:28:d9:a2:d1:24:0f:
e6:e3:c2:0d:2e:1c:6f:9d:76:e7:7b:c8:e2:e3:3a:
d7:b5:e7:28:b0:55:b7:8a:74:81:3c:94:e9:a5:24:
5c:56:2a:97:d6:cb:f9:48:2b:95:dc:3a:03:17:90:
85:66:42:96:52:94:c5:cf:79:bf:5e:df:5d:30:1c:
14:a4:2e:f7:e9:c2:3f:d9:28:ad:b6:de:78:ad:9f:
e6:98:dd:2b:f8:60:27:22:43:be:a0:d2:8a:0e:96:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AA:2D:48:DD:EA:1B:E5:6C:E4:BE:1E:57:8D:FD:6F:4E:7B:FF:8E
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c1:0f:d9:29:bb:4b:90:cb:5a:b4:f5:03:6b:fb:9b:2e:fb:
20:5e:93:6b:15:e3:79:4b:35:0d:c1:f0:ab:d7:12:7b:8a:f4:
84:1c:c2:92:e4:b4:d6:ec:36:2a:41:49:ad:93:a2:a0:25:ad:
d3:b3:d2:b1:2b:6b:37:a6:ee:72:c2:22:60:4e:8e:a8:3d:fc:
fc:dc:87:53:7d:9b:91:42:9e:dc:1a:42:a0:75:b7:3d:13:ae:
a9:f8:7c:7a:df:56:29:dc:54:f1:56:e6:d3:d8:c1:93:c6:a7:
88:ea:eb:4b:5f:4a:25:d1:71:b9:f5:12:0b:77:c7:92:ef:5f:
40:bd:1c:e4:73:c1:fc:4e:c0:00:b6:28:b4:53:e1:1d:15:7d:
03:01:a3:c1:79:d5:9d:e0:13:1c:34:1f:fb:eb:6e:84:c1:32:
1d:c8:19:8a:e2:c6:f8:47:11:82:e8:17:ab:96:6b:c4:04:98:
97:ea:58:a2:01:e9:4e:92:65:e1:f7:fa:b1:fb:8b:3c:43:bb:
ae:66:3b:b3:e7:15:5a:44:03:80:7f:b7:1f:13:3b:3e:0d:ad:
e4:ab:30:e5:e1:38:ea:88:e0:19:2a:76:c9:a6:3f:4e:d9:ec:
ae:6c:42:90:34:db:71:78:71:83:9e:14:29:1e:14:af:e5:95:
7a:a4:ce:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:15 2025 by rpki-client