Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: vE1VoFPCos6/UkevH3i0FGk+msIdVgi/MH8PERWnH3I=
Subject key identifier: F0:B7:1D:9A:E1:BD:30:E8:CB:1F:20:49:AA:4C:67:C5:C6:22:29:30
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 0199FD3498485C131A7C59411B7EB74A2E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: Jomgnz0m83lccNnJA/0nQLiw0HM1P28DEHpUVCtqeRc=)
2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:98:48:5c:13:1a:7c:59:41:1b:7e:b7:4a:2e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=f0b71d9ae1bd30e8cb1f2049aa4c67c5c6222930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:9e:54:c0:7d:6f:9a:8d:f7:0f:cb:19:0e:
cd:53:ef:47:38:01:e5:16:f7:71:d1:b1:f4:b3:56:
4d:4b:b6:ba:ee:50:39:b4:61:c9:4a:91:01:f9:81:
f4:00:75:0c:cf:2a:ad:d6:8c:64:b7:09:a9:24:4f:
f8:75:b6:03:42:2a:d6:04:43:1d:8a:a1:4f:55:4a:
30:fd:7f:ed:62:10:cd:a8:3d:06:6c:65:a6:2a:69:
db:33:e7:1a:19:29:c0:18:9f:9b:a0:b5:55:dc:2d:
62:85:8b:dc:97:b6:69:6e:d6:f8:b4:df:91:66:03:
23:34:c1:db:92:ef:6c:6a:3d:a1:48:6c:01:e2:54:
0f:e8:e9:9a:17:3b:88:44:f3:fe:8f:60:04:86:62:
d9:22:7d:17:7b:5a:1a:9f:17:4a:e7:d9:22:3c:13:
12:57:1d:2b:27:a1:9b:a9:97:ab:1a:5f:45:43:af:
e5:39:7f:4f:1e:60:26:31:ab:6b:fb:85:eb:8d:72:
67:8b:57:80:61:55:4b:f2:84:84:4c:fa:03:a4:4f:
dc:6a:05:ed:9a:f1:3c:07:83:17:9f:06:10:b7:81:
88:04:00:69:fb:fc:01:19:19:46:4d:4d:1e:c7:6a:
76:db:da:73:04:3b:28:80:c6:3e:63:81:88:89:78:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B7:1D:9A:E1:BD:30:E8:CB:1F:20:49:AA:4C:67:C5:C6:22:29:30
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:54:db:de:62:c3:38:fe:8f:ed:eb:d7:09:72:44:b1:20:db:
5d:52:7d:c1:df:18:0a:ae:2c:23:4a:af:6c:7d:9b:be:44:9f:
64:eb:17:c2:e3:da:2b:e7:92:50:ad:e7:36:a8:7a:f6:92:00:
7d:4a:1e:a9:40:55:47:cd:c1:5a:bf:a0:71:1c:60:42:9f:2f:
98:cd:68:20:60:1c:16:b3:e4:9d:07:4b:f9:98:33:52:c9:7f:
19:ee:37:8b:20:b3:b9:a0:37:dc:83:40:f3:ee:ca:f6:f4:50:
9a:be:8e:8a:fe:c7:88:ea:33:c0:1d:b7:3c:66:90:9e:d9:b3:
01:0f:6d:1c:43:00:04:47:58:65:d9:1b:a8:bb:23:e6:b5:89:
c8:98:5d:49:7c:da:f3:aa:a3:87:3a:94:84:0f:ec:59:c9:05:
78:77:7d:78:4f:26:e9:72:3c:78:86:de:b5:36:51:29:47:11:
e3:3f:8c:72:25:89:d7:e1:70:19:a7:03:54:8a:18:f6:63:d2:
24:2e:40:ea:e1:7f:9d:2d:15:73:72:a8:f0:3c:22:0f:76:53:
b8:de:77:7a:08:11:58:b1:0b:5d:da:64:ef:71:92:9e:cd:5d:
51:20:2d:c8:32:34:de:99:77:12:3a:3d:e1:cd:ab:b6:94:e8:
61:02:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:50 2025 by rpki-client