Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
File: _XF_OrY5RaG-c5wrOiWJvqVd224.mft (raw, json)
Hash identifier: GQ1JMYaggN/ve5wb4xNeziSdKiO6qejBBL0B/2Bl87I=
Subject key identifier: 07:A1:16:76:8F:86:A7:61:17:F9:25:29:53:02:09:D5:CB:2A:70:FC
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 019A19F486DDB231624A0C4FA915CEE86BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
Manifest number: 0CA3
Signing time: Sat 25 Oct 2025 06:00:46 +0000
Manifest this update: Sat 25 Oct 2025 06:00:46 +0000
Manifest next update: Sun 26 Oct 2025 06:00:46 +0000
Files and hashes: 1: _XF_OrY5RaG-c5wrOiWJvqVd224.crl (hash: Iur79YTN4LV06il80STZN3QKsgnhFoiNefrpLWDXjtk=)
2: gzdyy5qInnSa0M6b956pVUzgC-k.roa (hash: 2Ow3V4pucXvBImXLn02gpmIFTSdf3VU+/V7SnyCKOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:f4:86:dd:b2:31:62:4a:0c:4f:a9:15:ce:e8:6b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Oct 25 06:00:46 2025 GMT
Not After : Oct 26 06:00:46 2025 GMT
Subject: CN=07a116768f86a76117f92529530209d5cb2a70fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:4c:9e:bf:38:dd:19:a8:de:bf:d3:64:1c:
ed:4a:c1:76:5d:ba:da:fe:c1:c6:bf:f9:b7:1b:d6:
23:29:b6:95:d2:2b:66:44:64:4f:34:dc:f3:fa:50:
05:90:a6:17:54:41:18:d2:6f:fc:c7:f3:94:bf:82:
ab:b7:42:e7:bd:12:20:40:f2:b3:ab:00:13:bd:d4:
41:60:75:06:51:ac:d1:73:a0:98:89:6f:b3:9b:34:
3a:b3:57:cc:dc:83:50:18:3e:1c:ac:b3:3c:86:a4:
c0:37:39:da:79:15:2e:33:f7:0d:94:49:c8:41:ff:
97:82:9b:11:41:d6:47:19:64:81:07:ed:49:de:d9:
2f:3f:37:81:87:84:b8:40:f7:48:66:2d:97:6b:0f:
89:15:67:9f:21:80:db:05:eb:cd:fb:c7:fe:a1:a0:
68:98:65:cd:fb:9c:c1:28:bc:49:5e:fc:1e:5d:48:
ad:13:a8:e5:19:fd:2a:bb:0d:f6:be:d8:93:28:4a:
ed:48:ee:36:78:48:e1:5e:8f:54:a1:b4:58:e4:00:
6f:1e:9c:7d:03:7b:c6:31:23:59:6c:5e:c5:06:57:
48:31:80:9e:c5:2a:d1:63:6b:26:0a:4e:b4:9a:10:
64:14:36:36:de:53:9e:d3:2b:c0:f9:b6:47:04:27:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:16:76:8F:86:A7:61:17:F9:25:29:53:02:09:D5:CB:2A:70:FC
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:10:d1:6a:3a:98:7e:7c:56:54:f1:5c:ff:cd:e0:af:70:
8c:f0:2f:24:1e:38:89:5d:b2:26:6b:04:e4:4b:86:fe:48:ab:
21:a7:06:9d:d9:98:a6:3b:47:96:ab:11:d9:98:20:56:1c:43:
51:1e:75:65:57:04:23:1d:1c:67:ce:e2:f7:cf:49:4f:94:82:
8b:5c:65:67:b5:18:3e:11:e5:ae:db:28:c5:95:a1:45:33:ca:
d0:dc:f8:ee:f4:56:54:d9:ac:5d:72:f2:4e:49:c6:9e:e5:45:
a3:a6:cc:49:b5:ae:ee:34:34:46:57:04:10:e1:5d:d7:34:3d:
94:c0:d6:a2:33:5a:34:dd:ee:2e:b6:22:0c:97:c9:42:73:2d:
9a:66:36:f6:43:9b:02:2f:e0:0f:08:ca:62:53:da:c8:e3:45:
6c:60:8a:a3:f7:af:4d:98:2a:3b:6f:bf:b2:08:cb:21:cf:a7:
a7:1b:95:5e:e8:3b:c5:a3:19:6a:ef:f9:0d:81:63:c9:07:39:
04:ce:80:06:72:e4:c9:29:4d:d4:94:eb:ab:b2:46:47:31:63:
58:61:b9:67:a7:39:fa:2f:fb:28:44:c3:93:38:41:26:e3:1c:
d6:c9:f9:20:8b:95:c4:fd:23:f9:a4:81:1b:e6:cb:8b:bd:57:
61:b1:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 09:57:04 2025 by rpki-client