Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: guotKbUBZuM/8gPIp5AWwoREF6CdlTO4SUXqxLxbbhM=
Subject key identifier: 92:0C:0C:7F:D8:84:74:74:92:A2:70:B4:B5:DD:8D:CF:B6:13:A6:84
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 019A0290F9DB458915BEFFF18A96A2D76908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0A52
Signing time: Mon 20 Oct 2025 17:00:46 +0000
Manifest this update: Mon 20 Oct 2025 17:00:46 +0000
Manifest next update: Tue 21 Oct 2025 17:00:46 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: ourwAxiQ7241gk6XqTylJNR3odGpFFsqiQ2eiK6xDKw=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:f9:db:45:89:15:be:ff:f1:8a:96:a2:d7:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Oct 20 17:00:46 2025 GMT
Not After : Oct 21 17:00:46 2025 GMT
Subject: CN=920c0c7fd884747492a270b4b5dd8dcfb613a684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:ae:87:cf:4d:8d:89:15:83:ef:93:bf:71:
fc:8f:4e:05:57:4a:c3:1f:d5:7e:7e:f3:70:fe:26:
05:e6:38:62:5a:97:1b:a1:a1:1b:78:f2:d4:da:ed:
ff:72:b2:2f:3d:ee:56:09:da:6d:98:17:cb:63:94:
02:d6:d1:3f:e2:48:bc:30:17:1f:8a:94:1c:22:96:
fe:b8:f7:ab:74:e3:c6:b7:36:20:13:32:fa:62:af:
dc:93:ca:6f:cb:68:56:e4:5f:76:a5:0f:d3:3f:64:
93:8b:0a:cc:c0:d4:2b:95:85:5b:91:be:91:30:ce:
d2:e0:0e:3a:12:0c:52:52:78:2a:6e:c0:b2:0c:c5:
28:59:30:e8:ec:5c:e4:32:8e:26:22:8f:aa:63:9b:
3c:f0:7b:e2:7b:d2:97:00:7c:6a:3d:51:49:01:22:
ff:1b:29:24:92:f4:89:dc:de:b0:09:28:fa:c1:90:
fb:75:c9:46:9c:92:ec:08:99:c7:7a:9d:df:34:85:
86:4f:52:39:27:bc:1b:75:3a:6f:82:ea:69:78:90:
e2:53:93:39:a1:42:5b:b0:f0:ab:75:1d:15:e0:3b:
d4:97:d8:ec:d5:ed:3a:2b:f1:93:cf:32:13:4a:de:
ef:29:ff:10:d4:52:ab:27:c1:f9:a4:da:c5:d3:49:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0C:0C:7F:D8:84:74:74:92:A2:70:B4:B5:DD:8D:CF:B6:13:A6:84
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e7:b4:85:cb:26:04:78:5b:97:b0:fa:90:52:1a:eb:e5:23:
26:c6:f3:37:33:0f:49:48:bd:57:42:48:1a:b2:72:91:b2:cf:
5f:6d:88:d5:4e:70:1e:cd:33:de:3e:e7:31:36:d5:1a:da:e3:
bf:56:f3:4d:e9:fe:c5:2e:78:6c:81:92:d4:33:ee:59:01:9e:
21:d6:43:27:65:c6:ef:cd:b7:e1:a8:03:bc:37:08:ce:c5:d9:
e2:4e:b9:36:78:10:d3:5a:79:5b:52:bd:76:76:1e:71:d0:82:
0d:23:3f:e0:2d:d6:d4:fb:cb:ed:0d:85:74:6b:5c:a6:d9:81:
45:44:5e:9a:d0:c6:92:c7:ac:95:00:13:16:ca:9c:a5:b0:bd:
19:34:57:06:2d:3f:51:d5:7e:d7:c3:8f:6e:08:9b:c6:60:33:
cf:cc:82:33:02:69:0e:4c:60:66:bc:6f:76:bb:75:66:00:32:
30:7c:6e:04:97:cb:c9:7d:6c:a7:1b:6e:fe:d6:0d:10:43:f7:
97:a3:7e:4c:b6:b5:1c:b1:20:57:74:ee:74:23:84:61:03:13:
ae:dc:b5:5c:05:b1:7e:ee:0e:2e:e3:54:aa:91:71:cd:1b:f9:
fa:68:66:1f:42:5b:a9:2d:6d:81:55:c8:ab:89:70:05:de:e2:
f3:1c:51:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:16 2025 by rpki-client