Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: gu+qHS49bkaq4rj7RMNLUt9I+cb2BCXIZveWkuuSjm8=
Subject key identifier: F3:B7:02:69:F9:51:55:60:18:B5:95:1F:91:38:36:37:D8:CF:71:89
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 0199FC215C669885311B95281B44383451A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0C56
Signing time: Sun 19 Oct 2025 11:01:08 +0000
Manifest this update: Sun 19 Oct 2025 11:01:08 +0000
Manifest next update: Mon 20 Oct 2025 11:01:08 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: Z0Fd0paDdEhrOJiCpbGR4baYUhp+wAQHN676SsDtnCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:5c:66:98:85:31:1b:95:28:1b:44:38:34:51:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Oct 19 11:01:08 2025 GMT
Not After : Oct 20 11:01:08 2025 GMT
Subject: CN=f3b70269f951556018b5951f91383637d8cf7189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:29:e4:47:da:33:1c:50:1b:1b:d7:46:32:
3f:3a:b5:b1:17:14:14:49:e6:77:f4:8c:b2:82:50:
84:bc:57:33:14:62:29:8c:d8:3d:f6:c8:df:f9:7e:
a8:be:f5:4b:10:49:37:ab:cc:a8:28:51:23:4e:9e:
f8:55:31:19:50:69:59:5e:cd:a6:3f:47:94:ed:cb:
64:b2:a0:47:ea:19:ef:d4:06:cb:db:29:e6:a8:c2:
17:b0:a7:89:7e:35:1c:0e:53:64:c9:25:60:cb:46:
2e:62:37:43:00:d9:ed:06:a6:7d:e8:45:12:08:9f:
cc:a7:01:fb:b7:a4:17:3f:e6:e5:60:7b:53:d7:6a:
9a:78:f2:22:0e:13:57:ff:be:9c:12:4a:2e:86:b0:
a2:42:14:b7:43:a5:11:8c:6a:a4:e4:78:2d:64:6e:
0e:3b:20:ad:57:60:c1:64:b3:3c:a9:1b:dd:f3:f5:
ae:98:94:a7:51:3e:5c:a3:45:7b:1f:40:b8:45:1e:
10:bf:8c:7c:c0:a0:c9:70:fe:5f:ce:36:a3:fe:b1:
09:6c:73:3f:32:52:4c:20:c6:c8:cf:d6:10:5e:78:
e6:d9:ee:b5:c9:f9:f8:84:79:eb:9c:38:57:1f:f4:
7a:60:f2:c5:02:58:b3:4f:ad:62:5e:6a:89:90:bb:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B7:02:69:F9:51:55:60:18:B5:95:1F:91:38:36:37:D8:CF:71:89
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:f4:dc:bf:b6:4e:96:02:0d:a2:1e:e4:b2:b7:ac:2d:51:
26:37:04:ab:5f:86:aa:31:d0:d2:f6:0d:cc:e6:43:2e:41:53:
b1:b7:9d:e8:1c:03:96:67:27:19:7d:bb:aa:b5:a0:2b:f3:24:
10:64:77:cb:76:6f:7d:6e:bb:6c:76:8d:14:86:97:f8:27:2c:
ed:2c:15:50:f0:be:b6:db:ee:b0:63:73:c3:b2:42:33:b4:47:
56:f8:9f:0c:51:58:4c:b3:78:93:a1:97:a4:cc:f9:03:18:96:
ab:51:60:93:94:94:46:a0:7f:73:69:00:35:4b:ab:b4:bd:bf:
13:57:b1:7a:48:d2:2b:45:ff:30:7a:8b:26:98:c2:76:1e:b5:
de:2f:4c:86:42:ae:53:ce:74:79:9a:13:7a:d6:8a:ce:45:6b:
de:20:75:3f:f2:45:de:78:c3:bb:a4:a8:00:57:e4:12:3f:70:
62:f9:91:00:02:80:46:ce:df:73:2f:3d:cf:d5:cd:b2:3f:12:
73:f0:8a:61:aa:99:d7:b8:37:73:1c:cc:55:89:58:51:4f:3d:
ce:7c:ea:7f:6f:a5:94:ef:0d:bd:a8:95:f3:69:eb:74:7d:c1:
95:37:98:34:8b:ba:80:4b:19:94:d6:8e:af:12:98:ce:5c:1e:
ec:d5:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:28 2025 by rpki-client