Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json)
Hash identifier: 3gx1wE3OEAVT1onjrTKJ7/yqxJFChLHSYe+X9S5Hqlg=
Subject key identifier: 03:9B:67:7C:52:DB:80:74:A8:63:57:4B:34:50:42:8F:98:8B:10:12
Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Certificate serial: 019A0035421031BA253C697F02CB63C068A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
Manifest number: 12A2
Signing time: Mon 20 Oct 2025 06:01:21 +0000
Manifest this update: Mon 20 Oct 2025 06:01:21 +0000
Manifest next update: Tue 21 Oct 2025 06:01:21 +0000
Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=)
2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: vgtTwcszYwJ3CIwlgKhrDqHp9+5mCuI0pG2J0mw/zjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:42:10:31:ba:25:3c:69:7f:02:cb:63:c0:68:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57
Validity
Not Before: Oct 20 06:01:21 2025 GMT
Not After : Oct 21 06:01:21 2025 GMT
Subject: CN=039b677c52db8074a863574b3450428f988b1012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:aa:f8:db:da:aa:db:95:75:3a:64:f2:35:
79:0c:03:b3:b1:24:33:b4:b3:a6:df:50:9f:ef:af:
f4:6c:a3:93:62:67:b9:bb:10:62:2e:d4:72:f7:15:
ec:29:d0:b6:19:00:24:c9:bc:66:a7:f1:a5:83:dd:
e8:2e:41:95:9a:22:ef:ce:e6:39:d6:09:91:f4:43:
fa:1f:02:8b:51:09:ec:9a:49:f4:c3:1a:a0:da:81:
4d:ca:1b:33:df:87:19:ec:23:f9:c3:12:6a:13:46:
9a:00:85:e0:c2:97:11:ca:33:c5:9e:16:09:57:d9:
89:3d:74:69:39:67:00:40:96:a6:50:98:28:73:16:
75:43:b3:54:72:40:63:61:8c:da:12:7e:70:56:ed:
45:4d:59:7f:a7:32:b1:71:ff:bc:df:b2:02:80:52:
3e:17:53:50:eb:24:de:01:39:80:78:89:96:8b:f4:
44:57:d9:52:5f:f5:f9:4d:73:b1:97:5d:c3:80:51:
e3:d9:bd:e9:58:41:9a:57:8d:d1:22:bb:f2:ab:03:
f4:90:e3:25:ba:d7:f7:0c:31:3f:50:21:40:6d:79:
12:e2:e4:9e:b2:e9:6d:a7:84:87:63:24:17:05:8e:
6d:1a:9f:26:a9:86:84:be:5b:eb:1c:85:f8:1c:da:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9B:67:7C:52:DB:80:74:A8:63:57:4B:34:50:42:8F:98:8B:10:12
X509v3 Authority Key Identifier:
keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:07:61:60:40:12:3f:31:9e:bc:b5:45:03:bf:ed:d4:40:f9:
dc:fa:5b:56:47:d9:ab:c0:68:29:27:18:de:d2:59:38:25:28:
c5:51:0b:b0:75:e6:f5:3f:b6:21:6b:57:a9:f9:2b:00:94:aa:
ff:22:62:b3:eb:b1:f8:75:b2:c2:69:ae:22:e7:fd:b3:d4:3c:
26:4e:13:a4:2c:6d:f3:78:2e:50:79:d2:27:72:39:0f:69:ab:
cc:fb:91:3d:17:14:0c:54:20:d5:75:0c:71:cb:1e:28:44:f7:
c3:4b:b0:8c:01:48:64:29:b2:f1:81:32:f6:7b:d5:e4:02:29:
8f:db:0e:aa:2e:3c:66:0c:b5:f1:c0:38:1f:1c:13:40:42:9e:
55:00:35:6d:29:56:31:ea:f3:5f:a3:b5:b3:f0:6a:6d:f6:fe:
bb:2c:24:87:10:ca:b3:2e:bf:8b:13:1b:6d:ba:0b:58:2a:f4:
a6:8f:e1:fb:73:0d:94:4d:0c:b2:be:f8:d2:51:35:0c:fa:f5:
13:ad:36:c1:ae:8d:28:3b:ea:d3:df:23:9b:99:e4:1d:1a:01:
bd:ec:c7:96:39:a9:18:b2:35:59:78:b6:f2:1e:e7:c4:c9:cf:
7e:27:1b:9e:6a:e8:93:6b:db:13:c3:9b:72:58:05:0b:75:ed:
ef:90:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:36 2025 by rpki-client