Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: G6nbQtA4qsM7ORRbVTkLdPh53tbb90N68yY8WDfSxOw=
Subject key identifier: 5B:78:CC:7C:9A:E9:85:94:3D:52:80:04:81:98:88:2C:8B:E2:B6:94
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019A0290F358330AED5A72DEBE36EA526942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 15E3
Signing time: Mon 20 Oct 2025 17:00:45 +0000
Manifest this update: Mon 20 Oct 2025 17:00:45 +0000
Manifest next update: Tue 21 Oct 2025 17:00:45 +0000
Files and hashes: 1: 7mkqMSDi-HCLbWFxZVVqp4oDZV4.roa (hash: AgQ4cj261uo6E9KSd61RuHIpkNasVN9RKxcJv5djL7w=)
2: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: A5QsjG0TkRDuR6HFPDIbTk5g1UpeXgOwOOrk+h19nNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:f3:58:33:0a:ed:5a:72:de:be:36:ea:52:69:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Oct 20 17:00:45 2025 GMT
Not After : Oct 21 17:00:45 2025 GMT
Subject: CN=5b78cc7c9ae985943d5280048198882c8be2b694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:c9:9a:6f:00:75:5a:a7:0f:af:da:f3:21:
29:64:89:9e:0e:1c:98:1c:65:8a:ad:4e:84:a2:4c:
18:91:3d:c8:eb:6b:74:ac:8d:97:62:25:94:e3:2b:
a0:68:f7:eb:d3:fc:37:a3:fa:06:2d:67:33:76:94:
86:97:61:ac:5f:a6:2f:11:0b:f6:92:76:af:07:01:
53:97:57:0b:d2:4b:0b:c8:21:61:15:e2:da:44:99:
8f:a4:ec:01:56:90:64:4a:2e:cf:09:78:6b:97:a8:
b3:1f:86:0c:e3:32:a9:7d:9b:df:be:81:6f:21:52:
ea:f6:f4:a2:d2:51:4c:96:94:a7:d5:70:cf:f8:f3:
c8:c9:a2:59:79:0f:ce:43:2c:83:68:30:bc:81:08:
de:f3:3f:2f:64:a8:cc:be:a5:a6:4a:93:cf:a8:21:
b0:5d:7a:29:74:95:80:69:4f:05:49:ab:c2:13:d8:
76:ce:b2:59:6d:2f:d6:50:e5:0b:75:2b:2c:7b:60:
57:bd:58:b2:87:87:d4:cf:50:c7:56:e5:e8:89:79:
a7:60:f6:57:1b:5c:43:85:d7:b4:4a:3a:bd:1d:d7:
5a:df:9a:bc:ba:2e:a9:ff:f3:72:11:2a:58:42:5a:
bd:d8:17:ee:61:b6:14:24:cf:23:64:3a:e4:87:6f:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:CC:7C:9A:E9:85:94:3D:52:80:04:81:98:88:2C:8B:E2:B6:94
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:eb:7d:5c:a7:be:c4:ee:26:f4:04:88:6c:81:66:e2:9e:de:
f2:8e:fe:eb:27:cb:42:5a:c1:76:29:38:75:ec:6d:9c:46:6f:
51:69:eb:74:18:cd:83:42:eb:c2:59:67:12:7e:24:17:21:58:
d2:b4:fd:e7:5e:cb:e4:75:ff:9f:d6:ed:01:27:c1:d4:9a:9d:
b1:a2:9a:d9:df:20:58:35:55:d5:78:40:77:7b:c6:55:fa:f2:
e8:12:ec:b7:ea:71:88:87:d6:ce:80:db:2a:55:cb:50:ba:7f:
08:c2:39:a1:ef:1e:79:b6:c0:86:0a:0f:a4:c4:90:1a:25:6d:
51:53:3f:f4:12:93:8b:94:e1:af:81:7e:85:d7:a6:92:79:5b:
41:33:aa:f4:23:e4:a8:26:ff:05:79:38:3f:3e:06:3f:22:ae:
e3:ca:a1:32:7e:af:c5:2b:a1:04:c4:0f:ae:d4:ee:42:c7:db:
ba:91:e2:8a:df:47:08:35:21:4f:45:1f:b4:c4:92:23:cc:fa:
e2:b8:c3:b4:be:d5:72:44:c1:83:1c:93:7d:63:2a:83:5f:49:
09:c2:4c:8e:3e:1e:46:6d:83:83:f3:75:1c:1f:6d:f5:76:c9:
a6:b7:fb:10:ac:42:63:ff:e5:e4:ad:c8:38:61:41:49:ab:f9:
47:9c:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:16:31 2025 by rpki-client