Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: 3czoo3MEXSeiGDBwKFok7xRamVLp1IE3abdA8x81RrQ=
Subject key identifier: A1:C6:D3:74:C5:FC:61:52:82:3D:A4:CA:63:25:25:75:69:3C:87:26
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 019A1B74626DEE855B9B0793F4574F06F700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0B1D
Signing time: Sat 25 Oct 2025 13:00:03 +0000
Manifest this update: Sat 25 Oct 2025 13:00:03 +0000
Manifest next update: Sun 26 Oct 2025 13:00:03 +0000
Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=)
2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: A8AfShVV8xIAgAB15VVRpwWFWNBnL6bKF0CvBS1W9rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:62:6d:ee:85:5b:9b:07:93:f4:57:4f:06:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Oct 25 13:00:03 2025 GMT
Not After : Oct 26 13:00:03 2025 GMT
Subject: CN=a1c6d374c5fc6152823da4ca63252575693c8726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:ab:3b:f2:29:9b:14:e3:52:ec:26:19:f0:
17:22:01:bd:d6:30:b7:58:bd:db:16:fb:41:7f:26:
4f:b9:b7:52:44:a1:59:9a:10:21:58:15:07:ca:10:
ec:65:df:c0:10:bc:86:e6:74:b4:4c:1e:46:f4:0d:
a6:b6:ef:3f:0a:43:ca:42:32:6f:97:88:6c:cf:fa:
e7:34:b9:d9:4b:de:b5:e2:fe:13:46:6e:82:ec:4d:
3e:78:37:1e:22:53:a0:f8:05:10:69:de:4e:0e:2f:
e2:62:cf:aa:38:f8:96:0c:c5:19:15:a9:4a:8f:0e:
2a:5d:57:93:ed:7f:d7:e9:22:af:e7:92:96:38:eb:
da:b0:90:a0:fa:73:f4:bc:5c:ae:64:f6:0b:4a:c4:
ee:e3:0e:3d:1a:26:03:de:46:90:22:e1:a4:f5:6a:
8f:ca:ac:00:91:d6:12:e1:49:eb:d1:5b:64:5b:af:
18:fc:0f:c5:22:d7:a7:4a:dd:c8:26:2e:99:a1:5a:
2e:0b:d7:15:f0:f0:36:c4:20:0a:64:26:76:fd:f5:
13:e4:c1:9f:b5:8d:e0:3d:6b:50:90:f0:68:d0:02:
0e:fe:50:81:6e:d8:90:33:6d:a2:f7:c2:cb:18:56:
34:b9:c6:07:23:59:b5:7f:04:c9:5f:a4:cc:a0:60:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:D3:74:C5:FC:61:52:82:3D:A4:CA:63:25:25:75:69:3C:87:26
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:f0:9b:8d:1f:bf:a5:22:6c:45:e2:cc:00:d8:f2:19:dd:
32:76:97:45:27:89:6b:78:cf:8c:d7:2b:43:3a:e4:0f:7a:e4:
f4:74:73:ba:06:4a:ed:f0:9c:ea:ba:ad:d3:b5:20:f4:8d:57:
df:74:06:02:65:71:6d:5e:89:b3:6a:20:16:22:ac:2a:03:74:
f0:56:ee:f0:12:d7:76:b5:5a:5f:26:c5:c7:07:19:1f:8b:f3:
ef:5e:d4:88:a4:d7:85:b0:aa:3b:92:e9:e2:9c:00:a1:94:b8:
1c:17:2a:4a:f3:20:8b:a4:41:a3:21:b4:ba:b9:99:71:9e:02:
a3:77:9f:e6:04:9f:f0:0e:1c:c8:45:d8:72:1b:a3:96:35:f9:
b3:82:7d:85:6c:4c:27:94:96:14:74:2f:24:6a:9d:16:62:62:
10:93:97:4d:63:e8:08:be:bb:38:94:81:ea:d9:85:dc:c5:34:
d8:f3:67:bc:2b:f4:69:dc:02:9d:42:46:bd:47:00:00:5d:1a:
70:c0:27:73:d6:a1:72:04:4f:7d:38:d0:d7:8f:b7:85:c9:17:
b3:1c:ee:25:af:5d:38:38:ef:ca:f6:64:d1:91:9e:21:17:24:
a9:65:df:cf:c0:df:cb:90:d4:bb:7a:00:a6:e1:e4:d3:b0:02:
a9:f4:ce:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:59:32 2025 by rpki-client