Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: L4OvrqV4JczCUaMvzmkheOgzHCqO4Q9GGCTwp6p/9mU=
Subject key identifier: 68:4B:BE:DB:1F:12:B4:2C:0B:B1:8B:DE:46:CB:5A:80:4A:10:45:D4
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 0199FC219426DE97C94F458D7980FE2EF33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0E98
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: auXNSQRsqAGFyrSgidNriI9JYdFHnWx6ln4KwIkWxmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:94:26:de:97:c9:4f:45:8d:79:80:fe:2e:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=684bbedb1f12b42c0bb18bde46cb5a804a1045d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:1c:37:26:0e:a8:31:2b:c6:06:8c:f5:b7:
ac:48:42:89:6e:eb:76:ae:ad:0f:e4:3b:87:33:66:
fe:cf:9a:05:12:2a:f0:f4:3d:4a:57:24:f5:ee:c9:
11:02:3c:9a:cf:b4:38:31:48:5d:25:5e:49:16:3e:
76:e9:74:bd:6a:28:6e:df:2e:e2:6e:6f:cf:20:a4:
57:10:1a:f5:32:dd:c4:cc:a8:bc:47:bf:f5:d5:fb:
8e:b5:74:d3:ba:2c:d6:03:15:97:a3:d3:42:12:bf:
82:28:76:57:b4:33:ff:54:1b:ef:96:d9:7e:90:d6:
57:9e:7d:dd:7c:d8:ea:d5:1c:06:4a:ad:2d:e0:25:
2c:2e:5c:6c:a7:07:42:46:9f:0d:bb:d7:da:e0:eb:
a7:fa:39:3a:5b:f4:67:34:da:63:c4:0f:57:87:77:
ff:b1:b5:a9:28:38:89:1a:86:84:df:20:30:46:b9:
4e:fd:ce:10:68:fc:e3:6d:47:7e:02:c9:76:03:76:
b7:2b:e6:03:b0:c5:30:e7:65:60:b5:f5:0e:26:34:
99:f7:9e:ae:f0:f9:8f:a3:08:ec:7e:a6:ed:e1:21:
e9:8c:71:eb:1c:9e:0b:95:b6:25:09:f4:b3:12:30:
f9:a5:8a:70:e1:c4:e0:f4:6f:51:ae:a9:93:e7:4a:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:BE:DB:1F:12:B4:2C:0B:B1:8B:DE:46:CB:5A:80:4A:10:45:D4
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:32:e1:4d:b0:a6:cc:ac:60:85:27:56:80:52:95:ab:66:c7:
75:db:d6:ca:97:38:f8:dd:28:1d:0b:2f:bb:2c:63:78:20:b0:
86:fb:48:83:a5:3f:82:31:e9:e6:74:ce:01:ff:d5:c7:51:4f:
18:d8:df:c6:6b:eb:3c:9f:3f:26:b7:e7:1c:47:63:c5:b6:ae:
44:e6:e8:99:de:1d:71:db:8e:34:a7:93:9c:4d:a3:e0:c6:8f:
06:73:09:69:37:da:5c:1e:43:63:78:85:80:9c:9b:72:80:3b:
9f:30:a0:f2:03:8f:cb:5d:44:00:3c:c7:f6:42:25:82:4b:17:
9b:0c:ee:91:e2:45:ec:5a:1c:07:ef:7b:5b:02:cd:02:74:12:
74:c1:49:e5:50:1c:9f:39:76:7f:2a:1c:b0:b9:f1:1f:ac:c3:
c3:18:d9:72:e2:6b:2c:f3:f6:c2:bb:8a:2c:ca:42:22:87:46:
e1:37:3c:58:d8:9e:7f:fa:3a:dd:80:3d:88:65:49:43:5c:40:
f5:94:9a:68:59:59:ec:83:6b:d2:5f:e2:a3:e7:28:c5:e8:98:
84:8f:3d:33:c9:aa:27:60:e2:87:25:12:5b:af:19:04:bb:89:
ad:b3:af:40:f1:07:04:66:32:2b:d3:e4:a4:28:46:61:ca:d9:
67:7f:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:55 2025 by rpki-client