Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: weC5+IFQ/9JKMC/Bu8a6wOoA48dNo4N4IX+foCrPtwY=
Subject key identifier: E6:5B:85:1E:BE:60:3C:94:31:B3:7B:29:51:F8:23:AC:53:39:AB:D8
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0199FC58FA12FBA4A24067F99E9DE158DED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0A04
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: 85kuAyXaWXdzN85acr+wW0m8lnV+KrVLP7T8AbiiMiA=)
2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fa:12:fb:a4:a2:40:67:f9:9e:9d:e1:58:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=e65b851ebe603c9431b37b2951f823ac5339abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:36:8c:b5:8d:b8:c2:9d:04:a3:f9:02:27:
ea:e5:cb:40:e4:53:ef:bd:5a:f4:a2:28:70:4f:27:
de:ce:57:be:c1:13:ca:22:a8:20:83:05:a5:6f:40:
c4:33:b5:a7:ad:30:1c:57:83:74:d2:3a:2a:0a:40:
a8:6a:25:a1:08:d0:8b:86:3a:a4:80:96:a9:ef:d1:
80:23:27:16:21:ab:51:f2:d2:5d:c0:71:d9:91:ef:
1d:37:97:ce:97:e4:cf:1b:ef:18:1c:68:b9:8e:9c:
32:23:42:dd:35:7b:a9:86:81:7c:30:e0:2f:00:8c:
5d:58:64:75:32:6a:02:c5:62:40:6d:9f:57:c7:90:
b9:40:e6:26:1c:0a:59:93:bd:db:13:4c:f7:3d:01:
47:df:05:f4:63:1f:44:3d:86:74:78:64:49:4d:2c:
72:a0:e1:9d:1d:6c:d5:33:8c:be:07:7a:0e:f3:b3:
73:ed:83:45:9f:95:32:c2:f5:a1:41:d1:5f:1f:c9:
c9:47:74:27:70:a7:9a:66:81:81:0a:62:15:0c:99:
c9:57:44:46:6d:84:03:ea:ce:43:c5:67:49:d8:35:
2d:1a:1a:4c:d0:ed:b6:81:b0:6d:a6:c6:f7:6c:12:
24:69:c9:18:53:f0:ea:fb:ee:cc:97:4b:54:c6:8e:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5B:85:1E:BE:60:3C:94:31:B3:7B:29:51:F8:23:AC:53:39:AB:D8
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:85:b7:b0:82:68:eb:4b:9c:23:83:2c:db:98:53:ef:d5:e9:
c3:92:25:56:e1:98:ae:e6:87:f9:c5:c0:6e:1f:a6:81:6b:a3:
95:7f:a1:ef:14:a4:0d:ac:19:ae:2a:88:f1:9a:96:92:3a:26:
df:d7:43:bf:10:de:f7:fd:45:a9:44:78:87:96:e1:46:fc:7d:
b6:e7:03:28:de:9b:ce:c1:d0:3f:39:8f:56:77:ed:a1:a5:3f:
fd:e5:53:ce:c7:c3:a9:6a:52:85:26:ef:2c:0e:39:51:e5:80:
25:61:dd:68:68:3c:9c:4c:16:27:a1:79:60:16:32:cb:39:8d:
ed:50:81:6e:d5:d2:e7:b4:5e:c0:4f:1b:52:f5:cb:af:d5:6c:
38:d2:57:fc:96:eb:0c:e2:7e:b6:e1:fb:3a:eb:e9:b9:05:77:
75:0f:a4:f4:29:b0:26:b4:ad:b8:bf:9f:62:71:4c:35:ff:f5:
57:37:97:88:b6:01:15:7c:e6:42:24:60:47:36:9c:20:43:20:
a0:2b:ca:26:fb:e9:ab:e9:4a:24:1d:78:98:6f:a2:22:34:11:
96:a9:7d:3d:6c:88:78:ea:9b:47:de:5b:74:97:12:a0:94:3b:
9e:6a:e3:16:a0:41:ab:fd:45:83:31:9d:f2:36:c3:72:d8:a8:
08:23:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:17 2025 by rpki-client