Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: tsDTq8+fLgtN4KdWcIPFaRZgSSHZ8p6Rc7Xg85ktuxQ=
Subject key identifier: AA:89:88:8F:4C:E4:79:5F:51:6B:6C:3A:C0:FD:6F:D1:BD:1C:01:48
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 0199FC5912283F64DFD9DA4F7E0349FD6BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 04D4
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: UYDuaxb9/dSLRRWB8FdUe3GAE/AfL/N4UywD9mGlZBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:12:28:3f:64:df:d9:da:4f:7e:03:49:fd:6b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=aa89888f4ce4795f516b6c3ac0fd6fd1bd1c0148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:51:79:cd:45:30:3c:ae:bb:f6:52:58:dd:
9a:4e:f6:ef:d8:1b:22:74:dd:9d:e8:35:3d:69:20:
69:73:be:07:f8:0f:dc:65:86:3c:64:68:46:b9:a0:
88:10:55:9f:01:6a:bb:6d:7c:ca:f1:dc:cd:ef:92:
52:81:36:17:25:a9:03:29:bb:ea:eb:d2:cd:54:21:
5f:11:9b:9c:79:95:2c:56:c4:ad:de:e4:e2:0f:58:
ed:d5:9c:3f:39:b9:4a:9d:e6:43:cd:08:31:dd:24:
3a:31:7d:b1:c1:f0:5c:b1:3d:fa:5c:89:6e:9e:20:
d1:d6:93:05:a8:28:24:ff:a2:69:76:3c:10:c5:48:
f0:91:d2:b8:16:4e:dd:7a:5c:df:68:39:fe:d2:4a:
d2:b5:f4:3a:8e:d0:76:be:98:4d:89:be:9e:90:f4:
28:f1:0d:a7:25:a4:2a:80:57:0a:70:32:a1:b3:b8:
e9:7a:a6:a6:35:09:50:bd:ba:6c:8f:1d:4a:d9:44:
ed:b6:b1:23:dc:38:38:ea:98:20:ba:f9:55:3c:12:
dd:01:d5:59:86:4b:c6:e2:ad:5e:31:e6:63:dd:b0:
5b:80:b5:aa:8b:10:6c:5b:97:03:7b:83:bb:28:b9:
87:30:45:23:fe:65:c4:f6:06:26:20:3f:88:4f:15:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:88:8F:4C:E4:79:5F:51:6B:6C:3A:C0:FD:6F:D1:BD:1C:01:48
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b2:a5:6e:38:98:42:c9:c2:09:9a:42:74:e0:bc:ad:10:94:
0a:ac:c7:ca:c7:38:cc:3f:a3:94:96:47:b1:4c:21:f0:51:b8:
74:6e:fb:41:92:1e:9f:a1:34:17:8f:bb:67:a4:3f:05:4c:4c:
f5:1b:21:59:41:5b:53:46:d7:28:9a:2f:3c:af:75:f8:61:e8:
37:9d:0a:4f:2c:18:ed:8d:e6:e2:1e:d7:87:59:ca:d6:ba:04:
18:23:f3:12:d7:b4:ef:cc:5d:fc:43:27:dc:e6:89:13:9f:2e:
3d:c1:f8:31:3c:4b:16:29:ad:ed:4f:9a:92:f3:99:60:a5:bf:
13:1f:1f:45:76:a3:7a:44:74:02:e4:10:17:72:92:5e:88:6d:
59:15:20:25:fb:d7:e3:d4:71:93:8e:20:e1:63:3c:21:98:a3:
a9:21:b0:85:e2:70:55:d2:68:f3:f2:3c:41:89:46:12:14:04:
bb:0a:43:3d:d9:a4:1f:66:dc:89:da:d7:a3:cb:0e:e7:31:03:
d4:7f:5b:a6:60:58:8b:3c:9e:83:e6:10:c6:ec:fb:ba:b5:58:
43:29:4f:7f:e4:a1:1f:68:c4:45:dc:c7:2a:67:e5:58:ee:30:
46:1e:9e:3e:3a:f8:38:5f:61:46:ba:c6:a3:e1:12:eb:19:75:
b3:be:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:11 2025 by rpki-client