Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: EUMHbZcZhBsyNlrhXS+uRZN1LXysVqsVNDG6SqEeO5g=
Subject key identifier: 89:65:44:92:3F:04:B9:46:75:DF:C3:85:D7:89:DF:FF:15:44:7F:0B
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019A2E56C208F43ED4FBC8F6008EB55740E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 16FF
Signing time: Wed 29 Oct 2025 05:00:28 +0000
Manifest this update: Wed 29 Oct 2025 05:00:28 +0000
Manifest next update: Thu 30 Oct 2025 05:00:28 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: tmbvegE20KTHCNrXQRMtQ4IJBKWqmB1Tj7ykLij4QrY=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:c2:08:f4:3e:d4:fb:c8:f6:00:8e:b5:57:40:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Oct 29 05:00:28 2025 GMT
Not After : Oct 30 05:00:28 2025 GMT
Subject: CN=896544923f04b94675dfc385d789dfff15447f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:77:c9:b5:31:ec:fd:61:32:63:46:38:e8:1e:
d1:bd:4c:76:2b:ac:8a:c5:16:1a:01:1f:62:a1:9f:
f4:fd:f9:c6:2c:02:c5:58:05:a6:99:a9:61:cb:d9:
ed:7d:ac:b0:7c:eb:3d:c4:28:ba:16:5e:17:87:63:
01:56:56:a5:15:b7:f2:79:ae:cd:fe:22:8c:88:54:
d1:23:51:e9:c1:51:0e:6e:75:3e:13:9e:10:82:64:
cc:a7:66:f0:5c:d9:98:6b:36:99:e1:cd:2c:75:fb:
c0:2b:05:a6:ff:ad:e2:d0:6e:62:3b:29:14:09:95:
13:6e:16:b8:d4:a3:09:3f:bc:68:4a:e1:9f:7f:47:
3c:35:bb:48:9f:a2:b4:86:d1:d9:e9:ed:e4:44:c5:
43:97:92:b2:e2:f7:4a:1b:71:91:f9:72:b6:8a:06:
f1:bd:1e:be:fa:57:20:51:32:e9:96:66:e1:b1:19:
8a:9d:06:c3:4c:92:f1:99:60:fd:ea:0b:42:6d:07:
99:15:7c:c4:fe:70:d7:b0:8d:7e:79:79:8b:1e:32:
bf:87:88:3b:47:16:fa:b1:65:9a:e8:67:af:9f:e4:
0a:72:01:e1:0b:c3:05:25:e1:59:77:7a:f3:be:ff:
c9:ed:ac:5f:c7:91:59:d3:d5:04:85:95:78:89:a2:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:44:92:3F:04:B9:46:75:DF:C3:85:D7:89:DF:FF:15:44:7F:0B
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:79:7e:ce:17:0f:c5:12:2c:8c:8b:37:c6:8c:ea:63:00:6c:
92:b7:d7:12:aa:b6:05:69:76:42:7c:85:64:37:32:a1:00:5c:
03:ee:fa:17:84:85:dd:5f:5b:bb:29:1b:80:d9:cc:90:ed:86:
78:17:b5:37:c0:cc:c1:ec:f2:5e:ed:69:ab:93:af:51:09:54:
06:41:95:3d:1c:6b:c5:2d:81:cc:cb:3f:c8:d9:93:c0:e3:2b:
34:d6:7f:aa:9e:d9:78:a5:17:ad:0b:6c:12:cb:ca:b9:c6:aa:
2a:c5:34:ad:5f:4b:dd:19:04:05:75:6a:68:02:82:f8:3f:06:
bc:77:86:24:bc:f6:12:5a:4f:82:3c:24:45:0d:77:a0:f6:f9:
11:62:07:86:96:a6:a2:1d:51:0a:27:4e:c0:23:25:c3:84:3d:
3b:39:6d:69:e9:95:ad:9f:66:3d:63:aa:42:3f:e8:d5:22:34:
26:58:f0:f7:3e:4a:d7:ab:29:f7:4c:b4:63:95:1a:de:09:37:
b8:e7:92:06:21:eb:63:b9:64:ac:b7:51:82:cd:be:ad:b1:ce:
b4:43:a3:85:db:39:8a:61:8a:53:94:bb:7c:4a:d8:fb:40:64:
b5:25:7b:20:c2:7b:06:87:ec:74:ed:6f:05:c4:62:bd:21:35:
59:e2:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:10:57 2025 by rpki-client