Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: MgiCwGteRx7T/09w09b4mw5aMqyMjmU9oia8vjbYBDk=
Subject key identifier: F0:82:3E:BC:2C:7D:8C:F6:63:70:E0:AF:57:E3:73:F8:46:72:84:FA
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 0199FE7DD33FCDCDFF63786D43D8B8617937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 13F4
Signing time: Sun 19 Oct 2025 22:01:22 +0000
Manifest this update: Sun 19 Oct 2025 22:01:22 +0000
Manifest next update: Mon 20 Oct 2025 22:01:22 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: 9mtbnHwiFwbUx693hWD4UCvBcF9y9iNdPpRfhcqznb4=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d3:3f:cd:cd:ff:63:78:6d:43:d8:b8:61:79:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Oct 19 22:01:22 2025 GMT
Not After : Oct 20 22:01:22 2025 GMT
Subject: CN=f0823ebc2c7d8cf66370e0af57e373f8467284fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:78:32:11:f7:d6:1b:99:71:e9:5e:13:df:
da:6e:71:ab:b2:2d:d0:9c:d5:72:80:3b:47:ca:37:
e3:d7:52:30:73:43:a5:13:d5:36:c6:78:54:b3:3b:
50:d5:65:62:28:b7:c6:51:bb:9f:40:aa:19:22:c0:
b6:2f:09:b0:a2:56:43:2d:01:38:47:04:f7:1f:1c:
dc:fb:3a:db:a8:1b:d2:97:07:40:03:03:da:cf:d8:
af:1b:7e:6d:b4:52:50:dc:66:f1:f3:f8:c7:78:f2:
a2:30:8b:95:fd:d2:4f:e7:6e:e8:2e:57:ea:1f:79:
9a:38:f3:d9:f0:94:a8:18:e8:92:c0:b6:3c:35:57:
31:be:7f:80:06:5a:d9:49:28:1f:45:de:c4:bd:70:
10:1e:6d:c3:e1:c6:2d:6f:a8:c3:47:3f:35:0c:d1:
65:6e:01:50:9f:45:2d:54:6f:ec:28:93:74:29:10:
e1:0b:c6:a1:ba:d2:ff:33:b9:ce:99:d4:b4:98:9f:
0b:d0:68:b7:29:c4:d7:70:d4:48:35:3e:b8:90:31:
2d:60:02:1d:ce:ac:2b:cd:d8:64:93:35:8e:27:15:
4d:3e:65:62:54:22:4b:0d:9b:9f:74:d9:77:ae:e4:
a5:c8:3b:ab:0a:7a:ed:4d:82:be:2d:26:07:cc:8c:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:82:3E:BC:2C:7D:8C:F6:63:70:E0:AF:57:E3:73:F8:46:72:84:FA
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e4:e4:5b:f8:85:6c:4e:7b:4f:62:74:15:a5:56:ea:79:42:
83:55:08:9b:fe:31:32:08:b1:56:37:f6:5b:29:10:58:07:c9:
9a:c6:85:7b:0d:08:78:a8:9d:28:5d:0a:49:9c:c2:a4:e6:82:
ac:1d:d4:02:81:14:90:b4:db:78:0e:71:bd:9f:6c:07:c2:6f:
26:ca:7b:5c:24:f6:9c:9b:bd:18:e9:7a:a4:92:70:14:3a:61:
ad:bd:84:b4:91:13:0b:49:1d:a4:2f:7f:ae:76:d2:65:59:e6:
b3:83:c6:4a:ed:d2:b2:e6:dc:07:e7:39:3f:1e:f8:b8:ae:5d:
b8:60:54:9c:fe:db:c3:53:ce:0e:08:7b:d7:30:8d:98:40:1d:
33:d3:14:22:d1:69:67:0b:80:6f:07:62:56:80:3a:aa:6a:3f:
9b:14:e0:4a:ce:9f:8c:1d:d9:66:be:b0:b9:61:84:8f:8d:b9:
19:3d:84:94:58:f2:47:d3:4c:ca:12:6c:b9:c3:2b:14:38:bd:
5e:bf:bf:ec:4e:29:e5:84:45:65:0c:58:43:03:9f:72:f0:71:
ef:fb:e6:4b:3a:be:23:b4:dc:af:91:b2:d2:27:81:f1:58:3b:
0f:c1:53:ee:d4:b9:74:c5:d2:3c:30:ca:01:d9:36:0b:0b:c3:
65:42:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:59 2025 by rpki-client