Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: Mh6njVHdcAGI93eWfeM0qTr/4H4ij9lVSaC6EJMi5W8=
Subject key identifier: 9B:52:D3:9C:A9:4D:FE:4A:4C:69:E5:61:A5:5D:F2:4B:85:A7:27:75
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 0199FC21476670B2C423485C2A2DD92CEB48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 15D3
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: HdC41_gg5ZlJREFwcD8B_s_Bra8.roa (hash: GXMzejpdmlRhTsyiOMLzEkSoVbxi2Wz+Z222Mkk/eAI=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: m+g/rgJEWqWyrlgTcNSJGG73sumTYXE1LydqrgIDel8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:47:66:70:b2:c4:23:48:5c:2a:2d:d9:2c:eb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=9b52d39ca94dfe4a4c69e561a55df24b85a72775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:93:7a:7b:4d:64:00:4f:24:8b:8d:2b:e9:
22:31:fe:4d:75:f3:80:ef:25:61:7c:cf:27:aa:e4:
34:ca:a8:0f:00:9e:60:62:87:b7:c9:33:19:40:e3:
fa:9e:c4:26:d3:b0:6f:14:1e:33:6e:61:94:99:3b:
2f:72:90:8e:6e:75:55:d5:ef:c9:c9:70:ad:46:2d:
27:6e:8e:0e:c5:e5:dd:88:04:d5:4d:ba:dc:6f:63:
ac:b3:54:5c:46:c7:49:ef:80:58:be:91:04:03:7f:
e8:34:7d:56:6d:33:7e:44:34:da:2e:a0:8f:af:86:
2f:d4:f4:32:39:fd:c4:86:af:c9:cd:09:12:4c:b1:
50:39:8b:23:1b:cb:e8:13:f0:f6:d3:35:30:3f:42:
c2:73:d4:ad:4b:ca:57:d3:df:9d:27:f6:72:df:e8:
09:00:84:77:a7:2f:b4:c0:68:8c:ef:9c:e8:07:d7:
ed:43:bb:c0:ba:a1:73:2f:be:c6:77:08:2c:0d:8e:
0b:50:30:d0:8f:4b:ee:b2:43:55:37:27:6c:73:ae:
dd:d5:5e:db:1c:a6:e0:60:ee:fe:8b:ee:da:21:a6:
82:56:ff:14:6d:2b:52:79:be:84:29:50:61:81:75:
57:db:91:27:8c:ed:6f:dd:56:9e:86:54:1d:df:f8:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:52:D3:9C:A9:4D:FE:4A:4C:69:E5:61:A5:5D:F2:4B:85:A7:27:75
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:06:4d:e5:5d:8f:e1:6b:7f:40:10:31:30:e3:8a:f0:ce:aa:
b5:f8:68:ad:9f:82:5e:c0:5c:38:40:24:fa:1c:f5:7d:57:55:
ea:a0:67:bc:76:09:06:ab:51:61:ff:5b:26:33:2d:d1:7b:c1:
57:b6:77:44:d5:9b:c7:59:66:c7:ca:74:ae:42:67:37:17:a6:
f9:0b:5b:1a:f7:ad:ec:3e:3c:9d:ad:35:d2:cb:c2:0a:6c:c2:
9b:2d:2f:92:95:64:d0:b2:67:6b:d7:1f:0c:76:93:e0:1c:9a:
8b:28:1d:a2:64:60:22:74:69:79:1f:ed:e6:3b:d0:95:55:d0:
e5:43:db:78:d3:46:e0:36:13:76:a3:58:14:35:74:3e:32:06:
d1:bc:97:63:49:b3:83:d3:bd:ba:c2:b9:bd:e6:eb:ee:77:91:
78:71:1e:05:aa:d3:6d:a1:d1:73:15:06:5c:99:85:0c:26:cc:
b0:8c:b5:b7:be:91:04:5b:6e:8c:36:e9:c8:74:70:2e:8c:01:
e9:8b:43:dd:bf:ef:b7:c7:3e:2f:0a:fb:ae:54:63:20:b8:e4:
f9:41:ca:ae:3c:4b:3a:39:f6:9c:39:9e:16:45:86:a1:4e:28:
e7:fb:c8:4b:23:a2:00:36:eb:18:0e:09:56:ea:33:53:3a:01:
45:56:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:03 2025 by rpki-client