Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
File: XiYr5dEt_b4keeOiBxP0V-k_Bps.mft (raw, json)
Hash identifier: Qrwf4ou/FgWLVY1yqWdCY50uj8DpVIA7Qbs+sO67+TM=
Subject key identifier: 20:EB:4E:6C:12:B0:CC:23:7A:C7:EA:AC:55:EF:FB:17:3D:AA:05:50
Authority key identifier: 5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
Certificate issuer: /CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Certificate serial: 019A72935381F743B4A4DBA59422BE193C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
Manifest number: 012A
Signing time: Tue 11 Nov 2025 11:00:49 +0000
Manifest this update: Tue 11 Nov 2025 11:00:49 +0000
Manifest next update: Wed 12 Nov 2025 11:00:49 +0000
Files and hashes: 1: XiYr5dEt_b4keeOiBxP0V-k_Bps.crl (hash: dYAbkS+IhNJkCuE11UWCRy83ffgj7kb8PrnxGsS6ZKM=)
2: w-bn-aCE5W30xtl3JcELkxoTsW8.roa (hash: BpJzwRV75hoQ0T1DnwfQt7T4AohZsZH+92QsoGclyp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:53:81:f7:43:b4:a4:db:a5:94:22:be:19:3c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Validity
Not Before: Nov 11 11:00:49 2025 GMT
Not After : Nov 12 11:00:49 2025 GMT
Subject: CN=20eb4e6c12b0cc237ac7eaac55effb173daa0550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:02:c6:74:de:3b:40:40:b0:07:0a:60:56:
07:6e:a2:ad:5c:cb:01:86:b9:77:82:79:a8:b0:54:
dc:98:ae:6c:44:7a:c8:34:31:58:1f:c6:9f:ae:ba:
d5:a1:ed:9e:94:31:d2:af:be:39:4d:0a:e2:c0:48:
a5:2e:4e:87:67:41:fb:82:78:e0:50:b4:8c:4b:7d:
3b:4d:b8:5b:c3:00:84:60:00:4f:97:90:d8:94:c7:
f8:c7:ec:fd:2f:71:ee:14:68:92:72:f6:78:a1:8d:
39:8e:40:49:0c:b5:4f:0a:5e:e4:bb:8e:a8:a6:47:
b9:c0:9a:58:b9:35:2c:8a:ea:cf:ce:b6:ba:ce:f4:
af:a1:f0:52:c4:58:3b:a1:9a:76:c7:0f:c1:33:05:
08:8e:7e:3d:5d:84:88:c7:68:24:a6:c6:24:d6:95:
d9:d3:c3:05:c1:b9:45:2b:74:57:01:67:94:c2:6b:
e2:01:03:a5:c3:da:a1:aa:cf:39:82:ec:3a:57:9e:
2b:0f:83:d4:20:92:c0:be:77:5a:76:f7:94:8e:b1:
0e:2d:db:07:e9:d4:ae:ef:59:1f:67:17:b1:35:77:
76:49:a0:1a:9c:47:ee:52:a5:ed:f0:2a:12:92:ab:
15:58:dc:c6:01:39:66:a7:1b:10:8f:28:c6:29:7e:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EB:4E:6C:12:B0:CC:23:7A:C7:EA:AC:55:EF:FB:17:3D:AA:05:50
X509v3 Authority Key Identifier:
keyid:5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:59:bd:fb:a4:6f:c4:ba:8d:43:ee:a7:94:c4:cb:45:63:5f:
0a:c1:7a:d3:7f:b3:b7:03:a0:56:7b:37:87:f1:0a:11:31:c3:
1b:41:41:1e:8f:47:7c:6b:2a:6f:c4:00:cb:7a:02:8a:8f:aa:
e5:ab:32:02:17:42:4f:01:5b:0f:59:f3:ff:09:fc:99:f1:8f:
94:fc:92:3e:ab:9d:b4:ad:9d:28:f5:15:17:03:82:47:7a:37:
cb:3b:89:25:5a:be:9b:b9:1d:30:11:59:a8:d8:85:61:64:47:
f9:f3:29:f8:e2:de:f1:e7:4d:8b:a8:85:59:55:e9:7d:e7:71:
3c:05:b8:94:3a:89:c0:84:f8:da:25:d2:7c:3d:b2:1b:4c:8b:
f1:9e:78:b6:14:b8:b7:fe:7f:23:41:f8:44:d9:cc:9d:65:8e:
5e:3c:9e:76:82:64:26:07:48:df:00:94:7c:af:d8:d1:71:87:
7f:e0:7c:61:d9:8e:d6:2e:e1:90:7d:ad:2e:e4:cd:b5:34:4d:
75:01:6b:05:a7:c2:0f:28:47:73:88:b5:93:96:85:d0:2f:d0:
af:5f:ab:d8:e5:1b:91:20:53:34:12:6d:47:bb:47:1e:fa:c5:
89:0b:43:c2:1f:fd:5c:2f:e2:20:18:68:ae:1c:89:db:10:50:
47:8a:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:40 2025 by rpki-client