
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
File: XiYr5dEt_b4keeOiBxP0V-k_Bps.mft (raw, json)
Hash identifier: dX4WI5fGyUuCbV3gZNdtluNpmoeJKbdHA/uA2uOXVdY=
Subject key identifier: FD:3F:F0:A1:76:49:1D:B8:B2:71:1E:0D:02:44:7D:0D:7E:AC:76:62
Authority key identifier: 5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
Certificate issuer: /CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Certificate serial: 0199FCC6AF39037FA9AF5A3D0C59D3CDDD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
Manifest number: ED
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: XiYr5dEt_b4keeOiBxP0V-k_Bps.crl (hash: X+y+roIQxq1GlUpQ6/lJT/9elgKKWqlIcRPwJ+UTcfs=)
2: w-bn-aCE5W30xtl3JcELkxoTsW8.roa (hash: BpJzwRV75hoQ0T1DnwfQt7T4AohZsZH+92QsoGclyp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:af:39:03:7f:a9:af:5a:3d:0c:59:d3:cd:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=fd3ff0a176491db8b2711e0d02447d0d7eac7662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:2e:31:1f:14:05:bd:d5:9b:de:e5:8f:54:
fa:c1:c7:f3:81:fd:56:70:53:86:c9:e3:47:dd:b4:
4e:b6:b3:8c:f2:ee:a6:92:b9:63:23:b1:4b:85:e8:
08:c2:23:fd:a0:09:3c:9a:cb:5d:76:dd:0d:6c:ba:
81:9a:a3:7b:28:2c:07:36:1c:78:04:bf:9e:68:12:
e6:23:28:76:73:4b:de:89:3f:6d:ff:a7:6a:b1:93:
d2:4d:18:bf:16:18:10:d0:79:d2:ee:cf:ea:3f:ab:
5b:39:55:4c:ce:d6:b8:af:32:f0:80:0c:07:fb:eb:
d0:56:93:68:de:af:8a:d0:d7:e9:a3:70:af:98:42:
7f:54:95:40:51:00:55:41:98:7d:2f:a8:af:17:62:
f5:e7:34:4d:2f:d1:21:b0:db:66:7d:08:7d:20:06:
d0:cf:62:0e:51:46:74:65:54:f9:65:dc:ea:0c:9e:
fc:62:49:cb:08:b4:af:b3:7a:93:8b:77:92:a4:8e:
83:aa:bc:c7:1e:0c:7b:49:3f:bb:8d:22:48:94:3c:
db:bc:0b:ad:e8:54:3c:9c:86:36:2f:8f:ac:ff:93:
c6:22:1f:cb:06:cf:03:b6:b2:9e:5e:3b:94:b3:12:
d5:8c:2c:d8:d7:35:6d:9a:d9:7e:f3:96:f1:a9:2f:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:F0:A1:76:49:1D:B8:B2:71:1E:0D:02:44:7D:0D:7E:AC:76:62
X509v3 Authority Key Identifier:
keyid:5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:86:28:c7:ee:7d:b5:7d:87:9f:be:7c:75:87:28:30:c9:59:
7f:c2:bb:45:5d:9a:d6:30:39:25:af:12:79:80:d4:55:ef:93:
c7:8a:49:d7:de:ad:1f:4d:ef:d5:6e:63:2a:af:16:e8:75:0c:
f8:c2:77:82:3c:63:27:10:27:21:4a:48:d7:fc:0e:7e:46:42:
3d:88:81:dd:2e:1a:12:08:3c:e0:fc:ef:eb:c4:b1:ab:51:a6:
62:49:a6:fb:96:b3:d0:e4:7f:ad:38:80:6d:5f:8a:b3:08:e2:
58:93:39:44:75:ba:2a:dc:3c:96:ce:50:5c:36:c7:3d:5a:28:
4b:2d:98:0e:25:da:f9:0f:5c:bc:82:b6:b9:df:4f:21:d0:b1:
61:ba:44:4f:c5:76:a1:2f:27:b3:69:4a:30:93:ca:26:65:35:
2d:e3:ab:6e:0d:b9:69:4b:e1:9a:d8:31:8e:58:62:41:68:4f:
6a:7e:ed:c4:5c:1c:3c:f8:53:80:1f:ea:81:7f:38:34:46:ab:
5d:fc:23:b2:8d:74:16:20:b0:3b:24:2f:20:ba:73:e4:e3:e6:
80:9f:dc:99:ae:2b:ef:1f:ca:e8:26:f4:85:3b:41:7a:44:6e:
44:56:ec:9e:c8:d1:41:07:01:19:07:ba:48:db:e3:c8:d8:5c:
7a:ac:9a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:49 2025 by rpki-client