Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: 4PSxFI8hnWZ0bEYzjaFiJaPdzEewWmy/GwJPT05wUj0=
Subject key identifier: 59:14:66:A6:C7:02:BD:5C:C0:8C:85:E6:ED:D1:91:B7:18:CA:35:9D
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 019A17983E4F6176B6B30A878D8EDC3B00E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 04EB
Signing time: Fri 24 Oct 2025 19:00:44 +0000
Manifest this update: Fri 24 Oct 2025 19:00:44 +0000
Manifest next update: Sat 25 Oct 2025 19:00:44 +0000
Files and hashes: 1: dzKdTpxKq_7se5lgqFGO0igJYGY.roa (hash: u39TgSEQ2jGGZn4qmwG4cCJAONJvQaBYbbp+0NBr6L0=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: WzhksNAmuozvQrY/YdOC0Bl/yhv/tRHsfMNsRoAq/Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:98:3e:4f:61:76:b6:b3:0a:87:8d:8e:dc:3b:00:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Oct 24 19:00:44 2025 GMT
Not After : Oct 25 19:00:44 2025 GMT
Subject: CN=591466a6c702bd5cc08c85e6edd191b718ca359d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:2a:bf:43:e3:75:4b:e7:10:17:1d:68:3e:
61:ad:b7:97:7a:e2:48:47:51:89:53:be:16:5a:78:
ec:d1:5c:04:87:f1:00:c7:dd:ff:cb:f4:d8:03:65:
5b:38:1f:d1:43:03:af:d4:e4:56:a3:e3:0d:2d:8b:
d3:f7:41:0d:ed:be:19:7f:0f:03:08:fa:32:da:38:
86:77:98:cc:aa:ed:43:39:3a:ba:31:07:74:a3:d7:
ea:27:c7:06:e9:63:8b:b9:f8:44:63:ab:57:d7:4b:
2d:80:8a:ea:69:0d:6e:f0:09:db:fe:97:ce:3f:64:
13:12:b7:8f:ef:95:83:2f:48:a8:22:54:ff:4b:88:
76:0d:e0:1d:9f:28:dc:84:4a:ea:0e:60:7d:27:ba:
6b:0c:99:65:ed:06:de:88:b3:15:0a:34:88:86:3c:
03:e0:3e:cc:43:67:1e:71:73:56:11:6a:dd:53:73:
68:2a:45:2c:c1:29:53:2d:07:66:ef:be:39:7f:2f:
92:62:71:7f:0e:1b:e6:4b:08:7d:c1:90:47:c7:e5:
7b:64:73:da:a8:80:11:76:34:5b:59:c5:2d:23:5f:
92:67:21:79:4b:72:8e:e6:7d:a9:df:83:0f:8d:a2:
4a:e9:e0:26:d2:5e:51:74:c7:ff:24:af:b1:f2:a8:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:66:A6:C7:02:BD:5C:C0:8C:85:E6:ED:D1:91:B7:18:CA:35:9D
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:68:1a:db:01:17:75:d3:db:40:d9:5c:1d:a8:7c:f1:ae:
15:ba:d2:b2:2a:4c:95:8d:97:5a:e3:bd:c5:54:a3:7e:cd:20:
b1:81:03:97:b5:51:ee:1a:ba:78:42:2b:67:b0:40:70:c0:9f:
28:90:56:26:52:d1:17:1b:d1:5d:61:f6:c2:cd:18:c8:f7:66:
97:e3:36:05:5d:a9:ee:c9:75:96:2e:3f:6b:68:82:8e:1a:61:
5b:2f:17:29:8d:c7:ed:94:e2:93:55:3c:09:0b:f3:53:b1:5d:
e5:99:ac:65:b2:45:7b:04:51:7a:be:97:96:91:bc:da:9e:d5:
14:53:4a:ac:f6:7b:88:05:79:a3:e7:f6:e7:26:c9:78:2b:e6:
71:be:f4:72:7d:ed:ef:69:46:0a:1e:d9:b4:eb:46:b8:4f:9e:
f0:b5:59:90:4b:50:23:89:bc:f2:10:91:07:10:14:dd:e5:12:
b7:84:1d:15:3a:d7:6b:a8:63:21:ae:a5:76:b6:73:72:43:6c:
a5:5d:1b:25:03:29:39:43:3a:f3:4e:c6:ab:17:c0:28:28:c3:
a2:34:ec:2d:a6:13:5f:9d:cc:2b:05:90:2d:ee:4e:22:df:f3:
75:2b:5f:a0:07:79:fa:23:6a:6d:aa:8d:e5:f7:96:18:a1:28:
ca:42:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:17:45 2025 by rpki-client