Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: 0QOLrVsP5UQxPwrKovju1IuI8kRWXVn/B7imas2cWwA=
Subject key identifier: DD:AF:BE:F8:2B:E0:05:2A:09:9F:60:CA:33:EF:74:C2:D3:62:16:C5
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019A73014864EB422491E42B0B589DCC0935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0B08
Signing time: Tue 11 Nov 2025 13:00:55 +0000
Manifest this update: Tue 11 Nov 2025 13:00:55 +0000
Manifest next update: Wed 12 Nov 2025 13:00:55 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: 1gkWDSrvNIP8s7tlAK3vSJrXMv+Lk6izLAJi2hdPDDA=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:48:64:eb:42:24:91:e4:2b:0b:58:9d:cc:09:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Nov 11 13:00:55 2025 GMT
Not After : Nov 12 13:00:55 2025 GMT
Subject: CN=ddafbef82be0052a099f60ca33ef74c2d36216c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:02:7a:ef:5f:46:0a:84:b2:a2:02:e9:d5:
fb:84:cb:67:b2:54:3a:17:ec:97:f9:11:05:47:63:
71:29:63:51:c6:f0:e7:e1:43:86:27:fc:f1:f3:11:
4d:15:8e:da:ef:0f:b4:0c:af:2d:2a:13:9f:f4:5c:
8e:6c:1d:53:3c:05:dd:18:dd:0c:91:bc:ca:db:a3:
63:d8:2f:30:5e:a3:ab:61:15:18:55:ab:8a:ca:9a:
14:13:ec:56:8b:89:63:62:d1:85:1c:78:90:34:ec:
e1:35:31:80:18:3d:e2:a2:da:a7:62:a3:46:79:52:
30:8d:78:6f:a4:98:47:09:1d:80:0a:22:88:97:9e:
3e:0c:36:5e:1b:40:c9:fb:ae:ef:79:25:6c:9d:a3:
80:f1:59:8d:28:11:aa:06:aa:14:5c:95:d1:c0:77:
8b:26:0f:70:1a:76:fc:64:8c:e3:87:ab:be:48:47:
93:b1:0d:5b:0d:31:29:5f:71:e0:1d:ae:c3:51:b8:
15:13:90:5b:bb:67:ce:ec:79:7b:86:98:37:f2:2b:
f5:ae:87:10:6c:7d:e0:cc:5a:2b:60:1e:73:21:ef:
75:bc:ea:e2:45:99:68:c0:62:d6:76:ea:fc:e5:f5:
40:f6:ae:4a:e3:bd:36:27:51:91:40:97:5e:c3:13:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:BE:F8:2B:E0:05:2A:09:9F:60:CA:33:EF:74:C2:D3:62:16:C5
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2f:2e:b9:3e:d7:a6:61:aa:76:9a:5d:59:8b:4d:7f:3d:71:
0e:f4:d2:34:d5:30:ca:49:95:23:63:53:0d:19:6a:76:17:07:
0c:6d:3b:9a:48:9e:1f:ba:40:ba:6e:5c:07:19:29:a1:71:0d:
2f:06:95:d0:dd:03:01:24:e2:76:11:91:9e:ea:1f:0b:9b:9a:
a9:02:c4:ae:6c:17:01:c1:5c:db:36:6c:b1:90:6e:b1:83:d1:
c4:bc:fa:57:80:18:da:65:bb:e7:8f:61:9e:ac:b4:db:e0:c9:
8b:92:fe:52:2c:a4:7e:3b:c0:48:68:81:6f:ca:c9:eb:4f:c5:
53:dc:49:59:ec:e7:f1:ea:68:5c:03:df:e4:2d:4d:b5:61:23:
72:ae:f0:a6:a3:64:40:f6:cc:93:23:31:62:d3:fe:7d:12:3d:
83:50:9e:c6:5e:48:6c:6b:d9:f3:24:18:2f:84:c5:7c:f8:93:
c5:ee:a8:ec:bd:61:08:d5:8f:20:0b:05:a8:43:86:2a:cb:e1:
49:ac:1f:08:ab:48:de:b2:0d:f3:29:48:74:06:0f:a5:3e:6c:
98:32:36:6f:fe:fd:9d:5d:24:62:78:85:d1:8e:4a:0c:d4:ac:
d8:0c:d7:d3:b8:3a:8a:e7:96:0c:2f:ad:2d:53:fe:b9:a3:b3:
a3:e0:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:33 2025 by rpki-client