
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
File: XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json)
Hash identifier: 8IrqR29oLT9zefYoXQOLivv67DVe0N8xdDhIlvkVgpo=
Subject key identifier: 7B:91:6C:8F:81:E7:AD:50:BA:8F:FA:DE:84:BF:7C:2E:9B:3E:7E:2B
Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
Certificate issuer: /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Certificate serial: 0199FBEB8B46B778E5BCB4503833B09BDB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
Manifest number: 0BEE
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: zp7yN30qqRxi5k4Mx+0JKpFxfKZgXauPkntbJmL6Dv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8b:46:b7:78:e5:bc:b4:50:38:33:b0:9b:db:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=7b916c8f81e7ad50ba8ffade84bf7c2e9b3e7e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:80:77:ba:f0:87:c9:ee:43:40:90:4e:0c:c7:
f3:52:a6:15:d5:f6:6d:6a:bb:22:c8:a0:c3:84:31:
e5:fd:80:ac:72:06:32:a3:39:f0:8d:1a:1a:ca:68:
ca:33:1e:b5:9c:fa:a4:96:10:6d:8e:6f:3b:52:9f:
49:18:c1:cf:80:ee:b6:3f:22:fa:c9:5a:04:37:81:
97:6e:86:91:66:55:b7:26:d6:61:0b:3c:1f:41:0e:
85:8d:64:2a:8d:b1:9c:1d:a4:0e:74:5f:4a:90:30:
f6:e3:74:67:60:48:51:26:5f:be:88:5f:a8:c8:cc:
7f:cc:6a:37:d1:16:99:be:52:2d:c9:4a:a5:8e:ee:
71:88:55:cb:12:da:b1:45:ef:9a:26:46:30:58:a4:
a8:19:9d:24:90:0a:d3:2a:4c:d4:03:3a:52:c8:7c:
39:f8:4b:93:14:c6:6d:0a:7f:47:49:fe:61:39:11:
33:60:2f:37:3b:c4:c3:70:38:2d:e0:36:d3:2e:6e:
89:7f:14:68:81:6e:a8:00:af:61:0f:3f:b0:0e:3d:
2f:ec:15:21:59:ca:18:7e:f1:61:e1:c3:5c:01:a5:
1e:9a:9f:fd:e0:cb:9d:70:e2:bd:9d:15:46:ea:43:
c8:62:c9:96:2a:19:f9:12:eb:01:55:bb:ce:f7:db:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:91:6C:8F:81:E7:AD:50:BA:8F:FA:DE:84:BF:7C:2E:9B:3E:7E:2B
X509v3 Authority Key Identifier:
keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9a:b9:1e:b9:fc:5a:2e:6d:46:34:3d:14:4a:4e:c4:af:ea:
bc:ec:7c:e0:6f:e5:a4:7d:23:27:be:36:a0:4d:4a:e1:5f:77:
34:1d:95:f9:f8:84:ad:c9:3e:d5:a9:3c:57:43:6e:e9:1d:18:
35:fe:02:12:c3:1a:2a:ed:a7:8c:8d:75:3c:b0:95:d3:59:36:
b2:dc:05:0e:0c:5b:da:b5:ad:26:04:cb:5e:43:2d:de:fe:61:
74:4f:c4:40:7e:a8:f0:0f:27:1f:29:a1:b9:8e:f8:b2:e6:97:
29:22:a8:b2:06:32:57:bb:8a:cb:52:43:93:d5:75:45:aa:98:
fe:2e:16:61:81:aa:e5:20:d8:bf:3f:f2:3b:50:f7:98:ba:58:
9a:5a:05:4d:49:f2:a2:32:ad:16:84:c1:fc:f2:64:72:06:b1:
72:6d:ea:bf:73:e2:e5:cf:f9:ec:da:b7:bc:cf:83:90:ca:20:
87:5b:6c:8a:79:62:ed:23:a3:37:51:fb:3a:08:7e:98:31:31:
1b:b2:c5:6c:7f:27:33:27:7a:2d:7c:bc:7b:c5:f5:de:ae:0c:
11:05:b9:0c:3c:d9:09:03:24:5d:76:00:f2:2b:1b:02:b8:19:
b4:bd:db:3d:f0:ca:a4:09:93:51:35:0f:23:2b:9b:43:ef:18:
2a:33:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:15 2025 by rpki-client