Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: jjrzWoBBtzgNQdHXgv7JtLLgIxe7rKLo31Td2tp/53I=
Subject key identifier: AC:6D:3E:88:22:E6:50:AA:3A:4E:A7:D5:8A:F2:D0:5A:C8:DD:3A:E8
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 019A23D3811F9A0CAE068D62F5FA7DC56D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 08BB
Signing time: Mon 27 Oct 2025 04:00:54 +0000
Manifest this update: Mon 27 Oct 2025 04:00:54 +0000
Manifest next update: Tue 28 Oct 2025 04:00:54 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: yWu4DKVjU59Ccq9Bo1Nk5bEtLlFVVK2XwhBsrnGFXGk=)
2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:81:1f:9a:0c:ae:06:8d:62:f5:fa:7d:c5:6d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Oct 27 04:00:54 2025 GMT
Not After : Oct 28 04:00:54 2025 GMT
Subject: CN=ac6d3e8822e650aa3a4ea7d58af2d05ac8dd3ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:5f:27:3d:0f:6e:4b:c6:ab:a9:e1:74:fd:
2d:fd:20:3d:71:d9:2d:c1:87:5d:8c:48:1a:ec:22:
5c:cf:f7:d7:fb:3e:9e:73:30:27:da:b2:24:3a:43:
65:43:fd:0a:f4:fe:74:2f:ac:00:47:3d:b7:07:16:
39:fd:5d:60:01:f2:6e:57:c5:8a:f8:b7:5b:cc:60:
39:31:f9:93:4e:c7:91:e6:b7:b8:6b:d3:81:d7:c3:
bc:ef:92:12:33:dd:24:66:7d:74:99:be:19:b9:50:
c4:37:6a:ae:0e:2f:ac:c9:f9:c1:c3:4e:2e:1f:6b:
aa:66:ad:4c:e3:8a:da:c9:26:77:0f:96:42:b2:09:
c2:63:4d:e2:22:d8:0d:93:79:1b:c6:6a:0f:9b:f4:
03:f4:f7:d2:b1:ef:19:fd:12:76:37:25:b6:a7:5f:
7d:39:01:fb:c9:29:51:e1:05:84:15:34:31:22:97:
9b:dc:94:2e:bd:f0:a7:54:56:a6:89:7a:15:67:85:
58:e2:31:58:06:3f:95:ea:ae:b3:ec:57:d7:80:dd:
0e:7d:ae:7d:f2:5b:54:f9:19:16:00:20:9e:e7:53:
ed:a7:c6:51:90:79:43:67:3c:e2:22:0b:34:d2:e4:
30:27:c2:c1:67:03:a7:17:cd:29:16:38:09:e1:bb:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:3E:88:22:E6:50:AA:3A:4E:A7:D5:8A:F2:D0:5A:C8:DD:3A:E8
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:e0:31:d2:54:91:9f:60:40:e3:e0:48:7c:7e:2f:db:ed:
65:4d:0c:c1:01:02:14:67:87:c8:7a:e7:dc:5e:8f:85:5d:c6:
61:d6:77:66:38:0a:98:4c:92:7d:93:3d:3e:41:9d:b4:8a:09:
f4:f1:ab:34:d0:ba:bf:bf:25:fc:98:f5:db:d4:1e:8a:b2:61:
67:be:1d:e9:4a:7c:ea:34:9e:4a:39:3c:67:cc:50:8d:33:22:
18:69:2c:03:c5:1e:2f:e2:c4:d0:77:2a:b5:e8:a6:fa:c7:30:
ea:64:56:d3:e5:b7:52:3a:ba:cd:b0:39:f6:37:24:be:5c:c9:
93:8b:a9:c6:5e:86:e2:0c:b4:cf:1a:f5:27:04:9e:d9:14:57:
7a:82:58:d0:0b:82:98:23:1d:4c:65:5b:b6:fc:9c:e2:49:1c:
d8:1a:d2:6d:96:61:3f:bc:a8:f3:9f:8a:80:6d:c8:d7:1c:66:
18:49:82:91:b6:ad:2f:ca:a1:c0:1e:38:44:05:64:28:b3:b8:
f8:4e:b7:24:0d:5c:13:7d:f1:88:79:de:4d:ab:f4:31:00:46:
92:87:a8:62:2a:a7:fe:b1:e6:78:c8:d4:1a:5c:93:85:14:4d:
3f:e8:38:25:1b:6f:f8:5e:61:20:fe:2e:e0:9d:f4:4e:15:ec:
3a:18:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:16:05 2025 by rpki-client