Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: YdTSlLnv/eEGcrdMUoHAnXte043EOonhjw4wgzaHOyE=
Subject key identifier: D2:42:69:2B:22:CE:C5:32:54:5D:45:4B:CA:15:F3:33:7E:B1:1C:07
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019A22F7BA936526C379087F3ADDF543E518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 05D4
Signing time: Mon 27 Oct 2025 00:00:51 +0000
Manifest this update: Mon 27 Oct 2025 00:00:51 +0000
Manifest next update: Tue 28 Oct 2025 00:00:51 +0000
Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: bSbI8nhBQsMlriVTGjF4Qwy/cnbnmaNClOoot0V1dJw=)
2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:ba:93:65:26:c3:79:08:7f:3a:dd:f5:43:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Oct 27 00:00:51 2025 GMT
Not After : Oct 28 00:00:51 2025 GMT
Subject: CN=d242692b22cec532545d454bca15f3337eb11c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:ac:3d:9d:c1:ec:db:c2:9d:12:3e:a2:ff:
bf:55:01:b1:3b:58:83:fb:2a:81:9e:ba:c4:9f:64:
2c:93:63:21:06:61:4b:b0:c5:19:0c:ec:0a:13:e5:
32:99:f6:55:d0:c8:44:be:bb:f0:e5:85:83:94:16:
89:d8:e8:73:09:91:c0:28:43:02:47:b6:e6:46:2b:
5c:5e:a3:f5:b3:e9:bb:d8:e5:cd:af:84:bf:9d:38:
70:ad:1d:85:81:9b:52:35:1b:3a:8c:b5:9a:06:e5:
69:de:19:ae:23:99:5a:0f:d3:2d:7c:88:b0:a9:2d:
cf:56:d4:f4:48:b5:18:70:ec:26:b4:6f:fb:d9:2b:
bf:5c:06:d0:ea:5f:4f:5a:91:cc:c1:65:89:1e:74:
b7:7a:fe:f0:5e:75:f9:c7:0c:1e:21:be:87:85:5a:
5b:81:91:fd:19:7b:ea:d6:bf:03:19:43:13:73:4f:
fc:cd:e3:9b:5c:50:19:f2:1a:fb:9b:9c:58:2b:bb:
e7:16:6f:d0:e6:33:35:a3:90:69:6c:c4:56:d7:8c:
53:7e:7c:c2:50:71:a7:35:f2:02:f6:c7:af:c5:ac:
28:89:13:50:38:67:40:b3:8e:93:56:e2:26:34:34:
67:df:ab:92:ef:9a:60:50:63:c0:23:44:ea:2e:c1:
e4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:69:2B:22:CE:C5:32:54:5D:45:4B:CA:15:F3:33:7E:B1:1C:07
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ad:de:bd:f0:ce:00:e2:43:8e:5d:3a:1d:19:23:c0:5b:80:
7c:4f:23:7f:07:d6:69:26:9a:c3:ce:e2:5a:f7:61:bb:fa:b5:
52:b1:fb:e7:a0:71:18:36:8b:d4:18:84:9c:67:9c:69:5b:65:
b4:05:ed:ff:b5:74:b5:0a:82:10:8d:34:a8:13:69:87:a7:24:
91:ef:f2:d3:69:e7:59:10:72:85:8a:00:72:75:c1:d4:8f:1f:
84:dd:22:d1:ae:49:73:77:ae:e8:43:37:28:b3:fc:61:cd:7b:
d7:ce:32:f4:fd:8c:e4:f9:07:00:4b:a9:fa:bb:7e:9a:5d:19:
e4:03:52:69:dc:e5:b3:4c:f7:fe:bf:c8:ae:e6:a1:32:ad:67:
ed:e6:eb:28:fa:76:63:3a:c4:76:b3:7a:be:ea:28:90:0e:e4:
24:86:95:f6:b8:ae:1f:8f:ef:ed:74:92:0d:67:d7:8f:d8:13:
89:2d:24:10:76:3c:ff:4c:27:49:39:67:85:68:f0:7a:2e:c7:
84:61:f6:55:7b:b6:52:c5:42:ba:00:b5:08:3a:b3:d7:82:7b:
78:6e:fb:75:ff:ff:69:f5:f2:47:12:a2:33:a7:80:7e:e3:05:
02:d9:e3:2e:df:34:90:82:bd:a1:68:94:98:44:e5:02:d0:d2:
bb:a8:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:13:41 2025 by rpki-client