Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
File: XiMd-Hvf4ien5eQZNANwurMB4nk.mft (raw, json)
Hash identifier: 0/tI/NH7OOV2QJNLHOCyMWZe5jdAknPuk3pv5ZANqfQ=
Subject key identifier: 1C:B8:5C:7B:73:36:38:56:50:12:17:F2:CD:39:8B:21:36:EB:18:75
Authority key identifier: 5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
Certificate issuer: /CN=5e231df87bdfe227a7e5e419340370bab301e279
Certificate serial: 019A03A438C09ACE135443368DD0BB40CA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
Manifest number: 0CE8
Signing time: Mon 20 Oct 2025 22:01:25 +0000
Manifest this update: Mon 20 Oct 2025 22:01:25 +0000
Manifest next update: Tue 21 Oct 2025 22:01:25 +0000
Files and hashes: 1: XiMd-Hvf4ien5eQZNANwurMB4nk.crl (hash: BvKNbkfmf5jWFkxihn2M2mcDXq9nz7i1CNLliNGxlQ0=)
2: w5D1yX-tZICiSwFR7jL3CytqOn4.roa (hash: 2NNJMvsHwacMFGzvYSwe5becAnCEvkEVPVyFOuRSFjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:38:c0:9a:ce:13:54:43:36:8d:d0:bb:40:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e231df87bdfe227a7e5e419340370bab301e279
Validity
Not Before: Oct 20 22:01:25 2025 GMT
Not After : Oct 21 22:01:25 2025 GMT
Subject: CN=1cb85c7b73363856501217f2cd398b2136eb1875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:0a:34:26:d4:84:59:30:e6:6f:9e:fb:1f:
2c:41:bd:d7:22:52:e5:99:d3:6b:23:42:e7:35:b1:
a1:15:6d:62:03:f7:6e:14:1c:da:c6:1f:63:80:ab:
5d:91:80:99:b0:82:5a:a4:7e:0e:42:84:99:61:54:
b6:45:48:bc:87:a1:4f:93:8b:e5:84:cf:13:2d:a4:
a6:52:35:3d:97:b3:40:bb:c8:3f:79:b3:90:91:7f:
5f:27:41:06:40:8d:4a:3c:5c:c5:2f:3e:83:62:88:
c2:5d:a4:7e:a1:3b:fc:45:ff:94:75:b8:ed:e9:9e:
46:29:79:30:fc:cc:dc:fc:61:92:c9:54:e9:69:98:
6e:1a:40:6f:4e:71:ee:dc:cb:e4:98:dd:dc:4d:49:
24:ed:f1:b1:a2:11:ae:ef:07:fc:1a:1f:41:fc:6f:
3e:e0:d2:89:8d:32:3b:07:56:34:4e:67:fe:2c:fe:
47:30:1d:c9:fa:85:e2:e8:ba:2a:86:88:f8:bc:aa:
c4:98:79:1b:9c:37:07:b4:54:33:c7:32:26:1c:11:
6b:55:ae:3c:a3:5c:87:ef:75:5f:e0:bb:2a:67:6d:
59:46:7a:c7:85:0c:98:c7:d3:62:0e:43:0c:00:30:
e9:02:c0:35:45:32:03:11:90:b7:d3:cf:c7:59:92:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:5C:7B:73:36:38:56:50:12:17:F2:CD:39:8B:21:36:EB:18:75
X509v3 Authority Key Identifier:
keyid:5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cb:43:92:52:bb:91:48:ee:d5:69:98:fe:f4:c3:66:42:35:
f0:b5:42:15:fa:44:ee:c6:e7:0f:51:5d:59:7b:01:37:b4:7b:
ba:9a:f4:4b:c1:3b:e9:5f:cc:9f:dc:5e:e5:54:42:11:f6:9d:
51:30:44:de:17:25:2f:a1:8e:12:05:f7:64:e4:ab:76:1e:a2:
7f:db:60:0e:ee:ad:0c:8c:a1:ff:26:1f:15:63:e6:02:4a:bd:
1e:44:4d:aa:1c:fe:f9:2a:b8:03:e2:1c:da:24:29:df:08:77:
29:08:4b:bf:c1:8e:35:63:61:6d:08:c0:df:2b:a9:f5:53:57:
2c:40:09:5e:24:6b:3f:55:18:5e:38:9a:c4:a1:71:9e:fa:e5:
e9:ff:94:a4:17:36:19:27:c3:3b:66:61:70:70:e5:f8:bc:e2:
6f:54:11:b5:4e:1d:e8:e8:b7:6c:c6:fc:0e:fe:c8:8f:25:bf:
c8:b2:3c:a7:56:c3:96:4e:00:1a:21:fa:58:52:70:14:53:0d:
7c:5c:b6:db:87:a4:67:a6:93:9c:47:b7:2c:74:4f:50:fc:b9:
57:64:20:f7:43:99:28:91:ee:15:af:5c:4a:bd:e7:88:b5:fe:
6b:08:00:a8:70:a8:e1:e4:1c:c9:ae:c9:62:3c:3e:ad:c8:f7:
9d:1b:72:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:30:38 2025 by rpki-client