Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier: e5MI02VcgID0FkyrdyzKIS2NWJf+9qFZbWQsjue+ns4=
Subject key identifier: EF:89:08:68:4E:50:F9:0C:D3:B7:E8:5C:52:3F:1E:92:80:40:28:79
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial: 0199FB7C95903969C06CC8035826C3E48D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number: 03DA
Signing time: Sun 19 Oct 2025 08:01:09 +0000
Manifest this update: Sun 19 Oct 2025 08:01:09 +0000
Manifest next update: Mon 20 Oct 2025 08:01:09 +0000
Files and hashes: 1: VYOhWlm2y2YZ6EHcFnibmzsOVGY.roa (hash: GJjtJqaW4pHP1Y4i0oHxZvwkAfFAfi2jd3zkxgKT3N8=)
2: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: 0uT7QDq57qcmyoaRpRBJfApSeMEylV2Kuk2R8EFI66g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:95:90:39:69:c0:6c:c8:03:58:26:c3:e4:8d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Validity
Not Before: Oct 19 08:01:09 2025 GMT
Not After : Oct 20 08:01:09 2025 GMT
Subject: CN=ef8908684e50f90cd3b7e85c523f1e9280402879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:b2:88:83:8e:49:b7:c2:28:18:d6:9c:32:
cc:8f:2d:4b:6b:eb:95:86:b5:80:6f:33:0c:a7:5f:
a6:0b:6d:ba:77:c9:1c:e9:df:40:90:29:7f:d8:10:
d8:be:98:b0:e3:76:fd:45:a9:fe:1c:a9:6a:e7:da:
81:64:77:d9:c8:d9:33:37:46:fe:0f:bd:7a:69:73:
18:94:6d:0a:a7:8b:8e:a5:cf:79:2b:74:2f:fb:c5:
d5:98:18:8b:a3:b9:c6:e3:73:6e:9f:a5:75:b8:54:
85:04:c5:6b:05:36:ad:c3:9b:de:c3:b1:ce:87:d5:
bc:7c:d1:c3:e2:e8:58:c4:7a:f3:8c:86:d8:c4:86:
50:28:df:05:82:d2:0d:44:41:4f:11:47:41:90:c5:
4e:a8:e1:12:1d:1b:04:11:e3:27:61:ea:74:ad:16:
0d:e1:7e:fa:81:01:52:76:44:00:11:d3:1d:f0:47:
98:81:c7:47:d2:ef:be:cc:1a:65:91:cd:43:4e:4f:
c9:c3:6c:e8:cd:e8:65:cb:bf:20:31:b5:69:88:61:
c7:11:9a:a2:82:72:79:ce:8f:fc:67:a7:94:d5:38:
81:ce:c9:27:35:07:95:af:ca:7b:0f:e8:32:69:81:
db:b1:92:d4:ef:96:06:eb:58:4b:d2:04:71:44:05:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:08:68:4E:50:F9:0C:D3:B7:E8:5C:52:3F:1E:92:80:40:28:79
X509v3 Authority Key Identifier:
keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7c:d2:c3:68:d2:0d:0a:72:29:9b:e8:3e:cc:fe:56:28:7d:
04:37:66:57:ca:29:4f:64:2a:82:47:82:f4:49:8f:a4:5b:79:
29:7b:64:f4:94:e9:d7:b6:a6:8b:ae:26:cc:35:dd:7b:81:06:
3e:a7:b4:6c:05:5d:87:e3:af:c5:68:43:b4:1e:4c:5d:11:2d:
f9:42:e7:ba:dc:f4:8e:84:ff:00:b8:ef:79:ac:4f:9f:22:dd:
0a:75:47:61:65:1b:a2:8e:59:aa:7e:ae:23:17:c8:8d:41:f9:
b8:46:15:34:74:5b:12:1b:b5:60:66:5f:a2:c5:40:71:e2:2b:
be:b0:0e:ca:18:89:72:0b:01:50:10:81:65:19:32:cb:e8:cc:
4d:b1:f7:f7:e3:3a:b0:85:d8:78:75:c0:a1:80:47:5a:89:5f:
a6:72:4b:45:dc:4a:85:0a:fe:fe:42:1e:9e:8c:54:ba:d4:45:
dd:cd:57:c8:a5:a5:d4:e9:e0:14:70:00:da:61:8f:25:8a:44:
7a:db:31:bc:c0:eb:7f:8e:fc:c9:59:cf:2c:c3:10:6e:14:c2:
c2:4e:19:e5:e8:76:52:99:be:73:16:03:cd:8d:c3:e7:ff:53:
d3:f1:87:6d:2c:ca:ce:79:41:b5:86:fd:e2:ce:96:9b:a7:7d:
bb:87:05:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:32 2025 by rpki-client