Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: FGBQ5BL/hDMssGQgVYTExO78xVPtfSM3ICb12dD0G6E=
Subject key identifier: E5:81:E3:B7:E1:DD:45:41:E2:7A:B3:23:BD:5B:88:98:DD:04:2B:3A
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 0199FCFD7C44A32E64703297C8947501B453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 0512
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: UZcDopbH5AbxnrZyHkDBWySilO34Msfh9ZRPIMqTxSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7c:44:a3:2e:64:70:32:97:c8:94:75:01:b4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=e581e3b7e1dd4541e27ab323bd5b8898dd042b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:78:2a:05:47:73:3c:72:fe:22:83:e3:37:
18:e8:2e:77:9e:5b:fc:6c:02:a5:21:83:10:aa:15:
c9:f0:63:21:c1:e4:95:22:98:30:4a:e2:83:7c:3b:
49:7e:66:53:c6:2b:be:f6:6e:be:96:1c:43:4c:33:
c6:db:0a:13:8c:cc:b0:13:e0:29:49:40:79:7d:b1:
6f:0a:13:97:d4:53:4c:e7:cd:7f:83:8e:a1:3d:aa:
93:aa:2c:19:d8:f5:f9:76:81:ed:2b:cd:72:0a:8f:
2d:1d:58:39:69:3f:bc:09:65:58:1c:c8:13:d6:3e:
d9:f3:9b:2c:56:3e:50:24:77:30:d8:b3:66:a7:23:
a9:13:84:1b:80:9d:35:73:88:5c:83:35:51:3e:fb:
7b:90:21:ee:c7:bb:ef:92:a1:c8:a2:06:44:94:f5:
1f:be:05:d8:48:9d:fa:31:a1:73:48:33:d9:28:51:
9b:37:cc:a4:8c:01:04:fd:24:90:fe:ac:6f:51:fe:
70:09:f7:e2:7c:10:36:79:cf:57:d8:f9:d4:c6:5e:
88:c1:a3:4e:3b:3f:21:dc:e8:f6:73:39:de:5c:82:
d8:f4:96:7e:95:ce:92:1b:78:8f:dd:1d:e1:fa:20:
3f:df:b6:1c:f9:1c:92:09:57:18:17:0f:67:a8:a3:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:E3:B7:E1:DD:45:41:E2:7A:B3:23:BD:5B:88:98:DD:04:2B:3A
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:18:8f:22:cb:75:46:75:4f:41:cf:af:2a:b1:0d:9e:68:89:
a4:62:75:59:f7:55:21:41:bd:17:ac:22:8d:dc:8b:32:11:b0:
99:a2:26:ce:b0:47:40:a0:45:d1:49:c2:57:b9:0b:08:70:21:
b4:4d:fb:c2:3d:15:f3:10:e4:be:5e:03:2c:b3:82:4e:12:1e:
e7:fa:0c:41:0f:76:d9:aa:93:eb:a0:c0:68:2d:fa:a9:40:aa:
08:12:3c:ac:f8:a6:91:31:48:0e:ec:ae:64:f1:3b:e0:4a:59:
54:e6:54:55:d2:a9:4b:eb:03:27:ca:ab:09:29:da:7d:36:ee:
64:90:dc:58:8a:01:d5:ca:bc:77:24:d0:1b:94:e7:66:87:7c:
2f:33:cc:be:2c:b1:16:d2:0b:61:e5:16:08:4c:5e:35:67:fa:
c3:ba:4b:cf:d5:2f:d5:26:cc:9f:a4:c5:f8:6b:67:65:71:2f:
20:63:d5:de:5c:0f:85:3d:b4:cc:f1:21:a8:bd:2a:61:4b:4e:
8c:1c:c7:14:4c:1a:f2:da:58:41:43:cc:9a:a5:7b:0a:e6:95:
63:c5:61:c2:c8:e7:88:4a:37:7a:8f:2e:2f:19:ca:1b:d5:f0:
52:14:ad:ca:25:50:83:2a:ad:56:ab:32:c5:30:ed:87:2a:d1:
61:ce:55:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:06 2025 by rpki-client