
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
File: XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json)
Hash identifier: 6yQzX6oD5oD6FAx+vHs+JnQtb3o38f9NhkV8GzhZLzs=
Subject key identifier: 60:EF:CF:06:BE:DA:F9:FC:D6:21:59:E4:96:97:D4:84:6F:9E:52:D6
Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
Certificate issuer: /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Certificate serial: 0199FAD8108D379AD92F741025CF609DF006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
Manifest number: 0AC7
Signing time: Sun 19 Oct 2025 05:01:27 +0000
Manifest this update: Sun 19 Oct 2025 05:01:27 +0000
Manifest next update: Mon 20 Oct 2025 05:01:27 +0000
Files and hashes: 1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: Iz7g5f7Gni7/LWwQxOEwKLB/kl6lrNhmBMlzABW8r0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:10:8d:37:9a:d9:2f:74:10:25:cf:60:9d:f0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Validity
Not Before: Oct 19 05:01:27 2025 GMT
Not After : Oct 20 05:01:27 2025 GMT
Subject: CN=60efcf06bedaf9fcd62159e49697d4846f9e52d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d4:3a:a3:5e:91:88:84:c4:08:ce:5f:cc:20:
d4:85:4e:d0:a2:0b:c3:39:97:9e:39:fb:12:03:1e:
04:b3:b8:a4:79:e1:f4:c9:b0:c1:63:3b:2e:a3:2d:
6f:0b:24:98:31:94:e7:94:67:33:e5:82:98:97:79:
19:5e:87:88:38:7a:b7:8e:23:5a:f4:27:d5:ea:c4:
9d:8f:30:25:7f:5d:a4:1c:71:33:49:f9:7f:5e:db:
13:71:19:c4:2a:6f:c5:38:36:86:f8:1e:b2:5c:44:
6f:a7:b5:8f:b2:18:cb:88:b9:b3:56:da:fe:56:bd:
3a:f6:53:0a:69:10:ce:db:c3:e6:08:91:c4:64:b8:
cb:2a:db:92:56:bc:0f:52:9a:a6:84:2b:ea:fd:1e:
ea:4a:7d:73:0f:3d:97:23:85:c0:18:7b:5c:a1:62:
e4:71:af:3b:b4:5c:da:73:fe:eb:2f:64:b2:38:9d:
c5:cc:ee:c2:c5:09:9a:02:ec:7b:3e:91:8c:98:bf:
7a:f2:19:a8:4f:2d:a6:1d:89:56:79:50:d2:02:ed:
ca:8e:df:f9:9b:d2:ba:fb:7a:c4:4c:b6:f8:ff:66:
cf:ff:4b:16:6a:6f:71:81:8f:b9:78:6a:2b:26:1d:
1d:7b:91:26:e3:a1:39:c4:59:7e:82:72:2e:df:9a:
68:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EF:CF:06:BE:DA:F9:FC:D6:21:59:E4:96:97:D4:84:6F:9E:52:D6
X509v3 Authority Key Identifier:
keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:7f:48:36:f5:37:65:99:de:86:08:dc:0e:d8:c3:13:16:68:
8d:05:5b:02:ab:ac:36:9c:3d:ed:83:e4:6f:f1:ef:6a:fc:bb:
a9:d8:28:71:9a:42:34:11:85:c4:3a:42:f5:49:74:0b:6e:1f:
76:31:61:aa:f2:6b:17:30:db:23:45:e3:d8:43:20:44:58:72:
6e:09:e4:5e:85:b4:2a:8a:29:72:6b:7c:fb:14:fc:be:d4:5a:
67:99:b3:c4:0c:0e:51:78:a9:b9:8e:d8:60:d3:c3:80:3d:2e:
52:3b:b5:eb:fc:69:39:ed:df:cf:be:94:d6:4c:8e:0b:80:97:
3a:11:9f:c8:3a:6f:05:e5:1d:5a:d2:18:95:74:80:d6:a4:0a:
32:74:56:90:dd:59:9e:13:43:d2:50:d8:b8:bc:c8:7d:5e:38:
37:1b:5f:50:f0:76:d2:5a:59:0a:5d:51:56:a3:66:d0:3e:13:
09:69:4a:7f:e0:93:5a:3e:2d:43:34:69:a4:71:02:be:6f:67:
13:23:98:ba:27:8f:4f:6f:6f:f3:03:bd:79:2b:e8:f8:24:33:
3f:8f:67:65:49:94:a9:c8:66:79:fc:0c:0c:38:d3:21:25:d4:
e3:68:43:8b:89:9d:1a:0d:38:4e:62:d8:32:cf:08:e9:d9:40:
1e:f6:c9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:02 2025 by rpki-client