Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: z4Q4PDyFNgxLaOyFTgEeyPIEPBYUbWi0W3NqtjPYWYo=
Subject key identifier: ED:1E:30:86:06:C8:2E:21:47:5F:10:42:78:54:18:95:B5:9A:57:01
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019A1CBE3276145E8732708A0A93FCB63795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0E58
Signing time: Sat 25 Oct 2025 19:00:18 +0000
Manifest this update: Sat 25 Oct 2025 19:00:18 +0000
Manifest next update: Sun 26 Oct 2025 19:00:18 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: DOhg8YVSL7DUT4fuwPt9sYffnsVzMzmeeuTsZ2CYoTI=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:32:76:14:5e:87:32:70:8a:0a:93:fc:b6:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Oct 25 19:00:18 2025 GMT
Not After : Oct 26 19:00:18 2025 GMT
Subject: CN=ed1e308606c82e21475f104278541895b59a5701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:14:21:94:f7:e7:0a:d2:49:13:1e:88:11:
91:af:7d:b4:88:e8:c3:a7:6b:91:17:45:13:4d:ba:
95:b3:5e:cf:80:34:ca:9f:16:ca:87:25:e5:58:0c:
ae:a7:ad:63:d6:05:09:44:72:8a:25:3d:77:15:e6:
4a:75:c0:e4:e1:c3:2c:89:77:60:d3:ac:45:86:0d:
d7:e3:32:f1:3e:e5:f7:40:e4:66:50:93:e8:f8:83:
2c:28:f9:80:7d:71:e3:f2:fb:1d:f6:2e:c1:9b:9e:
94:be:ea:38:ed:21:18:1d:f3:2b:48:2c:00:85:17:
f8:25:08:a1:03:bc:1b:be:98:6e:be:cb:d5:67:40:
25:30:7b:af:80:da:5c:fb:bc:a8:db:e0:34:92:8a:
c4:60:40:e8:cc:f0:0e:f6:e9:6d:0b:ef:d1:9d:61:
8f:a2:27:95:0a:0c:12:54:a3:1c:53:af:4d:14:ed:
19:ba:cb:eb:ac:92:07:30:6e:0d:3e:0f:62:f5:eb:
9f:cb:b3:7c:f2:db:bc:41:07:b5:25:5c:0a:cc:52:
f0:3b:eb:8b:50:b5:71:66:e0:8c:4e:ab:c9:32:04:
b2:40:41:69:84:05:ab:6a:51:72:b3:11:67:bc:87:
1e:01:f8:72:c9:4b:c3:7e:4c:1d:27:9f:97:db:40:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1E:30:86:06:C8:2E:21:47:5F:10:42:78:54:18:95:B5:9A:57:01
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:94:e8:3f:50:28:b6:a8:9a:85:81:e0:59:c0:6c:3d:67:f9:
18:96:b9:2f:1d:d5:c8:d0:99:e0:7d:eb:a8:d3:55:c6:ec:c2:
8e:e4:a1:a3:8f:7b:12:a9:62:a0:50:92:21:ae:6a:fd:db:a6:
19:ce:95:a4:ec:e3:2d:9d:85:ad:4a:e7:28:71:41:2b:13:cb:
53:ac:4e:2a:ee:b5:8e:f4:55:67:20:32:dc:7b:a0:2e:53:65:
4b:40:5a:d7:c5:63:a5:30:07:be:05:0d:a7:5f:ce:e9:fe:5f:
6c:e7:f9:41:a7:c2:3d:a1:02:70:29:9f:58:84:9f:6d:5d:e6:
36:2b:a4:fa:e7:ae:7f:62:71:39:06:7c:93:73:24:44:d4:93:
95:5f:6f:cc:5b:a6:9a:b2:2e:19:9d:ac:7a:1e:39:d4:c7:b0:
81:55:5e:d3:3e:44:e0:8e:3f:0c:66:e3:14:4f:90:76:20:c6:
df:c4:26:83:ea:00:0d:e4:d6:49:c8:0c:f9:cb:1c:c1:1f:8d:
02:eb:bd:87:a4:86:52:12:ee:25:6e:21:62:cd:85:2a:15:ab:
64:0e:24:9f:2a:2a:ce:12:40:f2:70:26:ae:98:bc:44:8a:3e:
ea:98:29:8b:bb:e8:3d:ea:72:01:af:8a:ad:dc:97:9e:4a:07:
b2:80:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:36:50 2025 by rpki-client