Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: RAPpseFiNL6wjtRIcEVlEN/p7fji/yFmh2+RDZS/vys=
Subject key identifier: F7:D0:D5:4B:03:BC:91:60:74:17:B1:80:8B:03:BE:BB:F7:D3:B1:48
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 019A714A1758D86D201780FB73CD19FFD856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 05E7
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: bOZr2NkqHSBJyi8Xjhjj4hqQDIpfI+yOsD5FuDVdsdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:17:58:d8:6d:20:17:80:fb:73:cd:19:ff:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=f7d0d54b03bc91607417b1808b03bebbf7d3b148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:dc:22:94:17:39:90:3a:74:33:4c:b8:70:
54:63:d7:b7:21:3d:2d:7a:9d:f7:34:96:37:7e:3b:
a7:dd:99:37:59:e5:32:93:2e:c2:20:0f:83:d7:1b:
2c:33:f0:f9:84:a7:55:88:c6:db:70:2f:7a:ac:77:
ed:57:60:fe:e5:c1:24:ef:aa:94:9f:39:66:2a:7f:
c0:b9:2e:12:d9:db:96:df:1c:09:58:66:5f:36:d9:
25:83:53:30:63:60:35:71:fb:60:2c:08:a3:43:19:
de:4c:8c:27:98:04:f2:77:d8:fc:21:04:01:87:10:
29:49:af:01:48:bb:bd:36:5f:39:42:b8:60:66:13:
bf:7e:fb:c9:eb:17:36:4d:d2:61:0c:4d:77:ff:70:
fd:c7:d8:d4:e2:55:f4:78:bd:43:e5:5d:f7:67:ba:
e6:50:e3:82:fd:4b:39:10:31:4d:e2:3a:2a:fd:12:
70:24:d0:ff:30:ec:a4:2a:2b:0d:de:a5:f6:40:9a:
44:df:e4:fd:0d:87:37:25:10:12:6a:99:af:86:f7:
f2:06:1c:c0:f2:fc:eb:2d:67:84:c6:84:38:20:ef:
d3:13:30:08:9f:ed:b7:78:19:2d:cf:e0:2d:af:3a:
ea:6e:ac:3c:80:8c:ea:5a:5e:b6:fd:a5:c1:93:16:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D0:D5:4B:03:BC:91:60:74:17:B1:80:8B:03:BE:BB:F7:D3:B1:48
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7a:74:a5:6e:4d:7d:73:5c:83:73:5a:bf:de:b5:97:e9:e3:
9f:82:be:5e:0a:57:ad:5c:0b:45:4a:8f:86:f3:b1:7c:43:1a:
bc:9d:e8:a6:2a:ec:3f:b0:3d:cf:70:9e:df:8d:23:fb:b0:fb:
b1:45:44:de:a4:4d:56:eb:9e:23:f1:93:18:8d:5b:46:01:a3:
34:f6:59:b4:42:e5:93:86:f5:f8:ed:72:4f:10:be:fb:54:80:
db:1d:8e:b8:59:cb:e9:1d:b1:13:8a:77:38:78:99:3e:70:36:
34:81:1f:01:0f:c4:1c:33:24:4d:15:7a:73:5d:92:23:3e:5e:
1d:6a:8f:7b:0c:77:c9:cf:04:a8:14:52:45:f0:5e:84:f7:85:
4a:f1:60:41:60:30:f8:04:f4:d0:9e:2c:80:0b:55:11:13:51:
4b:67:1c:93:52:67:d4:74:a8:32:4a:c4:d6:ce:da:c9:45:55:
5a:0a:18:9d:51:06:58:fa:12:42:6e:e7:1b:46:25:d3:da:dc:
ee:37:0e:2a:e0:17:72:2d:3a:65:d3:7d:4a:e1:99:fd:6a:ee:
23:47:d0:5c:28:18:08:72:6d:64:14:ac:b8:7a:2e:e7:49:98:
69:ae:10:b8:a7:50:ac:fe:a9:51:92:03:0b:7d:3a:f4:df:1f:
24:a4:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:46 2025 by rpki-client