Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: 4XnxXb+Ze4AOUJQ096gdMWduTaW7T4NyZM26hfNw8PY=
Subject key identifier: 09:22:58:8B:C1:CC:6B:FD:E8:C1:32:7B:E0:33:F6:18:90:3F:37:68
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019A247900078B918367AD5FBB79E62A327D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 07:01:40 +0000
Manifest this update: Mon 27 Oct 2025 07:01:40 +0000
Manifest next update: Tue 28 Oct 2025 07:01:40 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: u4uaLgO1MeN7knybYF64mP8v8A8zarrOC6YcBkXgNbs=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:00:07:8b:91:83:67:ad:5f:bb:79:e6:2a:32:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Oct 27 07:01:40 2025 GMT
Not After : Oct 28 07:01:40 2025 GMT
Subject: CN=0922588bc1cc6bfde8c1327be033f618903f3768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:68:37:e6:00:9c:08:2f:83:4e:3d:45:0c:
33:de:dd:e4:d6:b7:7b:0f:ae:70:9b:7c:61:8b:3e:
31:b5:bd:3a:44:61:2e:cc:da:94:bf:ca:4a:67:6f:
a0:24:e8:44:16:3e:e5:9a:50:c8:ec:98:ca:66:dd:
71:12:1f:c1:c2:9f:6a:30:37:c6:95:52:d7:fd:56:
86:ce:19:a7:b4:2c:fd:46:62:60:3f:62:1a:c7:28:
9d:d0:0b:18:e5:2f:57:38:e3:29:8d:4a:47:ed:b5:
89:3a:37:3e:0b:60:29:22:47:e3:69:9f:1e:1c:44:
6e:17:22:e5:11:65:d7:bf:64:a2:c6:84:71:58:64:
71:f2:75:ec:8b:09:4e:25:bb:af:dd:cb:4c:74:c8:
b8:cc:8f:85:a9:b8:b6:5e:99:5b:09:ed:7c:e4:81:
dd:f3:ef:82:7e:d7:01:7e:e6:14:e8:43:83:5c:a8:
47:a3:b4:de:67:0e:85:56:4e:2a:28:8d:e8:eb:c9:
3a:cc:c4:60:4b:83:86:38:bc:dd:a9:e3:95:27:a0:
d6:56:fa:34:9a:61:a8:9d:de:7d:66:a1:21:0c:25:
6a:bd:af:f8:ba:a8:80:7c:30:a6:4b:81:42:f2:89:
06:ec:54:4b:df:4d:3e:b4:1e:5e:a2:f2:75:bb:4c:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:58:8B:C1:CC:6B:FD:E8:C1:32:7B:E0:33:F6:18:90:3F:37:68
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:73:8a:24:44:1c:fc:c2:51:25:17:12:53:ac:d8:aa:bf:71:
21:62:42:d3:46:d2:8a:03:0c:eb:f9:4a:cd:96:02:46:ec:60:
aa:24:b9:98:8b:57:f2:58:02:73:bb:7c:b5:9d:dd:14:45:42:
66:44:fe:f1:c7:93:7d:2e:13:c9:b6:10:3e:60:de:ae:8e:f9:
b2:bd:d6:30:b0:75:45:f0:9f:fa:98:f8:4f:f6:0d:ce:37:92:
38:67:0f:cd:be:9e:bc:87:a2:e7:cd:38:27:44:66:45:25:da:
46:c4:da:a8:ac:ce:7d:c6:a6:90:e4:63:42:65:52:6f:22:83:
9b:a1:a2:da:d4:b0:bc:27:98:96:b5:ef:0b:b9:f0:c5:83:b3:
35:c4:18:c4:93:c8:ab:3e:68:b1:a6:c1:ec:9b:ca:76:c3:7a:
e4:82:39:c3:2e:af:a1:64:f0:42:9e:fa:3c:30:e2:45:71:31:
f9:b3:3e:87:30:00:5c:45:b3:8d:65:0f:d7:43:40:00:32:36:
32:c5:7e:e9:4c:da:3e:18:f1:90:f5:35:be:02:68:09:08:b5:
1a:fd:16:d4:38:9b:4d:cf:b8:02:82:a8:aa:36:a5:a5:04:da:
11:65:c9:8d:5f:7b:ba:15:dc:8d:03:6d:a1:50:47:80:01:47:
9e:77:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:11 2025 by rpki-client