Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: suNKIxsIjAKgPj2bDBnGLVaiuxCluoORJMEq1GKCx6U=
Subject key identifier: 22:A3:3F:6E:DD:6C:0B:62:AA:86:73:54:AF:8D:8E:B3:F7:73:2D:B5
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019A25C18F1256140EC30851387BB56E4411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 073C
Signing time: Mon 27 Oct 2025 13:00:33 +0000
Manifest this update: Mon 27 Oct 2025 13:00:33 +0000
Manifest next update: Tue 28 Oct 2025 13:00:33 +0000
Files and hashes: 1: 16AbDLexWxM7mos0qMmQG31v5Rg.roa (hash: 3u1e4Mqp4DtPhz1Ro9vKRDiTKwkU7uS9FwPKV5J5Ahk=)
2: FnJQovhlbIvUdo0j6O0hr0vUYNM.roa (hash: wBBuOwEzLi1HNHDVjYRKKazRYQG/hq5eug3JUFJ4Ec0=)
3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: YjgWhdi80g+YyuIeRRnXQnSHsko/9gbT4vaF3BWs7OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:8f:12:56:14:0e:c3:08:51:38:7b:b5:6e:44:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Oct 27 13:00:33 2025 GMT
Not After : Oct 28 13:00:33 2025 GMT
Subject: CN=22a33f6edd6c0b62aa867354af8d8eb3f7732db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:62:f8:11:ed:33:fe:8a:12:db:22:7e:4d:
db:88:60:f9:14:c2:ac:f0:25:4f:29:5a:47:28:c5:
07:9d:3c:77:2a:dc:da:2d:ae:b1:a9:85:6b:c2:01:
8b:6f:a3:ab:ac:76:51:e0:56:c8:82:0e:6f:a4:87:
b1:26:e5:9c:82:ab:b8:39:70:4b:03:e1:bd:86:a6:
26:39:6a:13:49:6d:58:6f:61:43:c9:19:63:0d:ff:
fa:93:e9:5d:74:ff:2d:99:59:37:91:aa:01:19:3f:
ce:94:10:df:ad:e5:74:90:62:f4:d5:f8:75:69:fc:
98:3e:73:7d:35:38:da:93:db:90:ba:48:6f:c5:17:
40:3e:df:07:77:7e:e2:db:1e:e7:88:ef:93:6e:a4:
77:c8:1d:40:90:5c:f0:48:54:69:c6:4a:82:62:f0:
d5:c4:20:15:c0:32:9c:cc:cf:a0:52:80:69:5a:8a:
80:43:f9:a5:f6:60:0b:22:cd:39:a0:d2:15:e0:f6:
c8:bb:56:de:6b:db:13:f9:e1:da:54:97:80:d9:8f:
04:da:c8:5a:aa:c9:20:56:cf:2a:9b:a2:fc:a2:8d:
06:30:00:90:6c:31:07:4a:31:3e:78:b5:15:24:15:
f0:66:13:20:06:e2:ec:e1:01:99:5f:bf:ff:f6:71:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A3:3F:6E:DD:6C:0B:62:AA:86:73:54:AF:8D:8E:B3:F7:73:2D:B5
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3c:2e:e5:87:66:e7:60:6a:b6:80:ce:d0:4b:b9:a6:6b:2c:
4b:ea:0c:a9:fc:a5:37:cf:b8:b2:40:73:74:e4:01:3e:1e:81:
d7:f7:34:28:41:7f:94:bf:cc:bd:4d:6b:57:8d:f9:ae:1e:f5:
7a:cb:97:f3:2a:bb:4f:cd:d4:7d:fa:0e:60:71:c3:41:cf:f6:
80:64:d7:bd:91:2a:37:c1:2c:4a:7f:39:e1:8d:28:00:4e:68:
df:af:26:3c:26:c3:38:09:ca:c8:75:2d:8b:ec:5b:f9:4c:e2:
91:aa:f3:74:00:b1:d8:ff:e2:a5:b3:69:60:5d:c9:54:8f:ad:
c7:3d:bd:eb:d3:4b:02:46:f9:26:49:c6:09:4d:c7:c2:07:1a:
42:a6:3c:7f:55:da:10:79:59:7f:8f:e3:e8:37:ad:7c:73:95:
8e:a2:4c:39:5b:07:8e:02:f1:84:04:c6:ef:d2:58:1c:4a:ea:
2d:58:67:6e:b4:ff:c9:43:a1:72:a3:4b:b7:43:94:62:76:cc:
83:38:6f:5b:76:b4:f0:55:9b:17:55:a6:45:d7:e9:a5:1d:d9:
ac:aa:d6:5d:ed:58:05:d0:30:92:7e:fd:98:5f:e7:b4:91:67:
37:f5:73:10:8c:60:38:f8:7e:26:2a:f5:19:a2:43:e4:09:af:
4b:99:0b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:48:55 2025 by rpki-client