Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier: 0FbzZyzrWQjvQnt/ViJqT9GSlBP1VQxb0/UmCOVwqbw=
Subject key identifier: 0A:79:01:AD:E3:6E:F8:36:55:86:EB:66:C7:36:03:26:14:4E:C2:8C
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0199FAD84C01B0E2D6F304A9F51A99FB0254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number: 0E5E
Signing time: Sun 19 Oct 2025 05:01:43 +0000
Manifest this update: Sun 19 Oct 2025 05:01:43 +0000
Manifest next update: Mon 20 Oct 2025 05:01:43 +0000
Files and hashes: 1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
3: EtBWv7v42TBRx3xi5if6zm6OAdo.roa (hash: wUjEWMJsxkGqfJP8Q+fyLu6SEzpYpLZd1/pV8n4as7s=)
4: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
5: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: SP9YKVAHNiocRhhYv5dJnS4ZeXuA5uPpcl+6orLW6MI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4c:01:b0:e2:d6:f3:04:a9:f5:1a:99:fb:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 19 05:01:43 2025 GMT
Not After : Oct 20 05:01:43 2025 GMT
Subject: CN=0a7901ade36ef8365586eb66c7360326144ec28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:d4:57:98:c1:0e:1d:33:9e:4f:c7:56:df:
c6:db:ad:61:61:7c:b6:6d:dd:91:70:49:e1:42:2c:
c8:14:1d:44:68:34:cf:ca:f4:86:ae:85:bd:e7:d3:
ba:15:1f:25:35:9b:1a:9d:19:27:61:34:3b:ea:ac:
b0:87:f3:9b:ca:e8:a2:f7:d6:32:22:6e:8c:fa:ad:
00:53:2f:16:6f:a5:4a:fc:56:98:15:1b:11:cf:68:
37:26:aa:9d:d6:e9:fd:95:90:df:92:d4:91:e1:47:
65:64:83:dd:8e:81:ef:19:d4:b6:56:a7:a8:1c:97:
dd:c6:47:d8:d6:a3:c8:f5:c8:b5:8e:50:bf:a9:3d:
38:77:8f:cb:a1:0b:60:3f:59:54:92:1d:20:a8:57:
e7:ee:c5:85:76:f3:ac:74:c0:51:07:6a:fc:82:ca:
de:67:0f:66:ef:a4:ef:90:c6:14:08:d5:4f:3b:1e:
f7:4a:49:d0:ba:18:1d:92:d0:bd:c9:a2:74:f7:ab:
d1:6d:4c:c0:74:c7:c9:8c:9c:dd:2a:a6:56:94:97:
07:ed:f9:59:f1:65:1f:13:4e:40:c2:92:a3:28:47:
f5:81:a2:b3:21:49:d5:b0:3f:15:7d:b4:74:a2:98:
b3:db:e7:a6:a4:4a:2b:35:98:d0:a3:d1:66:75:0a:
20:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:79:01:AD:E3:6E:F8:36:55:86:EB:66:C7:36:03:26:14:4E:C2:8C
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:90:9a:9d:0e:34:42:98:ac:89:c0:5f:00:ac:c3:1d:d4:98:
b4:62:1c:77:8e:d0:c5:a2:d2:57:b9:07:5c:b6:59:de:31:0d:
dd:96:ef:9e:c6:93:ff:fe:90:c1:53:4f:ea:c2:78:6c:de:0b:
e3:2b:7a:5e:aa:96:97:98:2c:6a:14:91:a3:ad:d4:55:d4:27:
e5:0c:62:20:a6:b4:46:37:d1:c0:19:09:ec:34:52:52:60:b2:
6b:a0:bb:b9:cc:b6:9b:f8:aa:e9:f0:b7:dd:ea:bd:13:2b:db:
09:65:f2:59:1d:2e:93:4f:81:b7:bf:e8:87:c6:0e:41:34:fc:
0b:ac:44:3b:c3:ff:52:75:1b:b0:1a:c5:e3:82:ec:2a:d1:54:
98:74:dc:02:fe:bb:41:9f:de:5e:4c:1b:29:58:18:ea:dd:bb:
65:be:1e:d3:d4:75:c1:d7:2d:97:ce:3b:4c:7e:29:54:0b:4e:
d7:cf:f3:9d:fa:c0:d9:f3:89:c7:1a:0d:2d:ee:70:4a:1b:51:
ce:53:4e:b7:94:ad:d5:66:a8:d7:75:f5:51:69:f3:de:e8:cb:
56:1c:22:9e:7c:32:42:ee:64:31:f8:ab:bb:98:53:19:8b:8c:
7f:97:67:15:d8:98:08:45:3f:79:dd:f9:00:01:38:58:ff:c0:
e8:a5:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:26 2025 by rpki-client