Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: Wz0430PYYUoVd/DwI6LUMznvimEtRfC8xFlAmJA1uxQ=
Subject key identifier: 6C:8F:34:EB:C4:A4:33:B3:61:01:B5:3E:E2:82:79:BA:DF:6C:CB:66
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 0199FC8F1FB68C282B4708570054D49932FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 0FBB
Signing time: Sun 19 Oct 2025 13:01:02 +0000
Manifest this update: Sun 19 Oct 2025 13:01:02 +0000
Manifest next update: Mon 20 Oct 2025 13:01:02 +0000
Files and hashes: 1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: dZhreXIefE22nqptvQUQnKd2LMnJ396/iQd/8syRAGA=)
3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1f:b6:8c:28:2b:47:08:57:00:54:d4:99:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Oct 19 13:01:02 2025 GMT
Not After : Oct 20 13:01:02 2025 GMT
Subject: CN=6c8f34ebc4a433b36101b53ee28279badf6ccb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:b0:b8:4c:f3:09:d4:69:a2:f7:64:ac:cd:
34:fd:af:5d:98:5c:dd:30:e2:34:3d:1f:4e:25:00:
0e:2a:03:71:bb:3d:a3:3e:8a:98:f2:a5:11:ac:22:
63:32:36:19:a3:fc:c7:36:d6:0e:72:81:d3:4e:7a:
ba:f3:6a:51:87:de:c6:40:a0:cc:27:64:dd:c3:c5:
41:27:0f:bf:e0:ae:86:85:29:29:41:ca:1b:80:cb:
2a:5d:1e:3d:6a:88:5c:41:a9:da:90:da:e2:c2:90:
54:c2:30:0f:b7:42:a9:97:2b:8d:81:c3:ae:3a:a2:
54:59:0d:bc:bd:f2:4f:b3:71:1a:a9:37:57:da:e8:
81:d3:02:68:0a:fd:bb:ab:ad:85:2f:bd:4e:dd:e0:
38:1d:12:2b:b1:43:3b:9f:e6:67:21:45:29:cf:19:
62:92:33:5c:8d:bc:56:c6:ef:48:58:d1:d7:52:83:
c7:1c:ae:32:ae:60:30:ca:f5:b4:43:c7:61:d0:52:
81:32:78:99:7e:ee:6a:c9:e3:71:57:4e:2f:d1:b0:
7e:3f:b8:04:3d:e1:d0:c8:09:2c:16:9a:38:4f:7a:
c0:56:8d:c0:73:58:9b:e5:08:f6:d3:6e:47:33:2a:
a5:36:00:bb:20:2d:8c:75:26:6f:25:5f:13:7e:0c:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8F:34:EB:C4:A4:33:B3:61:01:B5:3E:E2:82:79:BA:DF:6C:CB:66
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:8e:e5:c4:22:f2:9f:29:9f:93:db:ca:b4:80:63:10:6d:f7:
8e:74:28:f7:ae:80:63:77:9d:ba:5a:2f:22:84:71:c8:0f:a9:
d8:3c:84:c4:93:2d:74:04:7b:2c:bd:4f:cd:37:d6:da:41:54:
cd:73:a9:a1:4b:bc:9d:47:51:8f:d6:68:a5:0a:0f:da:74:7e:
05:5c:70:14:fa:93:d0:5e:4a:4d:d0:49:2f:88:12:b6:df:c0:
7f:bb:6c:a2:1b:1c:3b:86:32:9b:08:59:c3:4c:df:c8:37:b1:
19:9c:1f:e0:d3:54:6b:bb:6e:42:dc:e5:5b:ad:15:5d:71:23:
32:87:5b:b7:90:ec:8f:67:c7:2e:0b:5c:35:45:e6:9d:96:f4:
cd:e2:f9:cf:d7:83:3c:5c:4d:8b:9c:59:59:df:4b:ba:90:a3:
a9:77:a9:98:7d:ea:4a:4c:39:40:5a:c8:45:ee:54:aa:0f:21:
44:16:7a:11:e9:78:5c:a8:3d:66:55:2f:5a:39:64:66:ab:dd:
e7:b4:07:ee:60:96:e8:f4:00:eb:5d:41:0a:14:1b:e9:3c:54:
15:4f:2c:9d:65:94:ac:9c:ba:9e:2a:e6:4a:57:a1:be:89:5d:
e9:6e:f6:51:bd:eb:05:93:45:c4:b2:8d:4d:46:2e:c9:ed:43:
a6:fa:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:42 2025 by rpki-client