Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: oPNFCQXDWqzCfOvKMST6xnWjFAov0oGilSw8QFmCXVQ=
Subject key identifier: 5C:4A:AF:7C:A2:A4:6A:37:B1:62:9F:F5:B7:21:9F:6B:9C:95:A3:AE
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 0199FF22DFB2CE05BE95265BFB78BEB0E9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 1219
Signing time: Mon 20 Oct 2025 01:01:39 +0000
Manifest this update: Mon 20 Oct 2025 01:01:39 +0000
Manifest next update: Tue 21 Oct 2025 01:01:39 +0000
Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=)
2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: M59pxIAu/6khlg8PUfzBmpaSaVOxy9k0vQfkT2daabw=)
3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=)
4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:df:b2:ce:05:be:95:26:5b:fb:78:be:b0:e9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Oct 20 01:01:39 2025 GMT
Not After : Oct 21 01:01:39 2025 GMT
Subject: CN=5c4aaf7ca2a46a37b1629ff5b7219f6b9c95a3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:2f:43:62:6f:8f:05:84:fb:50:d4:89:20:
c9:2a:fa:09:29:88:2d:38:a2:a7:89:da:36:a6:ce:
5e:d6:cc:fa:d1:80:c5:88:89:f7:5f:9d:3c:c8:e3:
31:14:c4:7d:fb:46:73:47:37:6f:76:b0:c4:a2:11:
a6:03:4b:7b:4c:85:b9:de:57:1f:82:df:a8:4d:3f:
f8:9d:2c:e1:70:5c:00:4e:16:31:03:34:47:14:7c:
29:6d:67:de:72:e1:df:9e:fb:02:5c:6e:5f:4e:d3:
e6:b7:db:c2:88:e0:c5:a8:3f:b9:75:e2:03:d4:55:
55:20:3b:e5:5f:0f:56:99:7c:d0:df:91:07:11:8f:
01:12:45:28:25:5a:39:e2:d2:9e:8c:0e:69:39:b7:
6e:f0:a9:0e:7e:bf:e3:8e:6e:9d:35:a5:ba:24:31:
91:3b:0c:a2:bf:2c:4c:1d:46:13:28:70:dc:6b:bf:
30:7c:6f:1d:53:1e:31:32:4e:34:1c:8c:70:72:94:
f3:21:c8:49:61:b3:a7:be:dc:80:7b:19:89:55:0c:
2f:22:06:49:bc:23:ca:3a:2f:8f:0f:26:3c:1f:43:
08:59:46:2d:2c:25:0a:bd:2a:88:67:02:e4:14:f2:
21:ca:12:f5:10:9c:12:5d:75:69:ff:b5:1f:d6:f6:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:AF:7C:A2:A4:6A:37:B1:62:9F:F5:B7:21:9F:6B:9C:95:A3:AE
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2b:b9:e4:2a:c0:fe:07:64:88:23:e6:65:43:18:a9:e9:8f:
75:5c:98:24:8b:11:ef:7f:5e:80:32:4d:b2:f6:d3:4c:4b:15:
9d:93:a7:57:2e:b9:f7:8c:46:cc:ba:6d:60:17:e6:f6:c8:65:
d1:ca:0b:40:97:cc:61:63:6a:58:a7:38:73:68:9a:60:3d:f0:
65:2f:76:18:f0:15:68:e5:df:58:91:a6:ee:be:b4:92:76:37:
c3:7f:d0:25:37:00:e6:71:6d:3e:bf:db:b3:b7:60:81:d7:95:
7d:2c:35:61:50:35:7e:5c:b3:84:7d:c7:ce:e4:30:0e:aa:b3:
d5:23:5f:20:8a:31:42:e4:b8:cb:4f:3c:46:cf:1e:68:2f:18:
ca:54:4f:6c:e3:50:dd:af:17:1c:bf:99:65:9a:0b:8e:73:8b:
ee:99:a9:b3:df:cc:18:63:b0:77:ea:97:2c:d7:60:9b:d7:7e:
b7:43:cc:3f:ee:3a:e7:e5:62:14:58:7c:b4:3b:22:3d:a0:98:
ca:cd:ec:85:9b:35:f3:57:4e:52:2d:d6:07:1f:ad:d2:0c:1e:
bd:a4:12:80:01:e2:46:3d:26:f1:5a:4c:d9:fe:ee:66:6f:19:
0a:e0:03:70:61:bf:96:e4:42:40:ad:17:33:ef:4e:7b:45:5f:
4a:07:57:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:40:13 2025 by rpki-client