Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: o0JbpmkRVjTF4EGJ7moxHR5WCNMEQaQTdCyYQWM2++0=
Subject key identifier: 86:72:5B:4E:C1:F3:06:F0:B0:3C:05:7F:E6:78:B6:B5:64:54:71:EE
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 019A1FF663038E15F22E2831DB422F1BBAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0AC0
Signing time: Sun 26 Oct 2025 10:00:32 +0000
Manifest this update: Sun 26 Oct 2025 10:00:32 +0000
Manifest next update: Mon 27 Oct 2025 10:00:32 +0000
Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: q3B6WmkWYCU2wfn2cE+c/7k73NRUrBqx6PnqAxXoo9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:63:03:8e:15:f2:2e:28:31:db:42:2f:1b:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Oct 26 10:00:32 2025 GMT
Not After : Oct 27 10:00:32 2025 GMT
Subject: CN=86725b4ec1f306f0b03c057fe678b6b5645471ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:00:e2:e1:ba:f7:f5:33:10:74:10:ff:e3:
da:46:db:ba:4c:b5:9b:89:da:fa:d2:4e:ee:01:b0:
b9:61:53:81:62:80:71:87:3f:83:43:bf:39:3e:6f:
fb:6b:25:66:53:7a:de:ac:db:f1:58:07:e5:59:b8:
f9:6e:51:0a:bd:df:27:3d:a0:ac:8d:ca:ba:69:37:
60:42:04:76:4c:05:5a:cc:8f:f5:07:2b:4b:ca:c6:
f1:d1:dc:a4:6b:d0:a5:73:7d:17:ed:7a:e6:b3:13:
38:e9:87:af:4c:f0:14:0e:1a:34:09:5e:ac:16:8b:
b1:4f:eb:6b:3d:24:1c:95:34:a9:8e:36:a4:66:45:
01:cd:e5:0f:06:a5:0c:00:db:4b:da:cf:bd:3c:40:
00:81:55:f4:4e:f4:bb:33:98:5d:e7:6b:71:a9:cd:
7a:0a:2c:2a:d4:26:6d:f9:a3:bc:5b:dc:96:89:56:
d1:69:75:01:18:ef:27:ed:16:23:67:f8:6f:57:31:
5a:75:86:78:da:f5:29:20:56:3f:90:e4:bb:e4:16:
10:eb:a8:16:f4:79:ef:b2:a7:41:08:fd:2a:b4:f8:
22:1d:07:36:37:16:b6:92:1d:e5:2c:2f:25:19:2b:
dc:16:20:23:53:74:4b:ca:8d:20:b3:ee:52:50:a1:
e2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:5B:4E:C1:F3:06:F0:B0:3C:05:7F:E6:78:B6:B5:64:54:71:EE
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a8:66:c8:f8:c2:c4:de:8f:7f:71:6c:fc:18:36:94:43:cf:
ef:15:50:59:dc:43:2a:04:9e:fb:6a:7d:ae:67:1f:b4:66:52:
5f:b9:af:bf:7e:28:2d:98:ac:da:22:f0:83:ee:11:c9:9b:2e:
15:49:d7:0c:7a:5a:f6:25:b0:96:39:c3:2b:35:eb:13:87:29:
67:09:a1:f8:30:e8:a7:99:ee:e5:9f:41:eb:8e:5b:47:ab:64:
73:99:d1:f4:b5:95:8c:40:cf:25:57:0d:52:6e:9c:1c:ed:93:
c9:61:0d:9b:24:c7:ab:30:ae:40:4f:be:f7:5b:ce:3d:a7:9c:
4b:b8:96:a3:5a:b2:01:e6:92:5c:02:c0:83:46:ed:d9:59:25:
eb:cc:c6:90:cd:b9:c4:51:e4:31:7c:f1:fc:05:ff:9e:64:4f:
42:53:ce:a6:f0:4b:90:91:00:5d:bd:8e:18:ad:d0:49:de:11:
90:19:ec:f6:33:53:1e:5d:28:20:9a:df:b7:9e:8d:84:54:2d:
04:6a:15:2f:3f:24:f6:7d:cc:06:00:76:c7:0a:39:99:0e:4f:
e7:0d:90:f2:28:6e:be:6b:1f:8b:3a:d4:eb:f9:d5:88:ab:33:
d5:f1:f6:61:bd:de:5a:81:14:44:d4:ba:4e:1c:9f:32:4d:dd:
27:4c:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:26:18 2025 by rpki-client