Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: hzcPlXlNznzq4BbFo6JI6Us/Wyrf05b03rAjsKcjvXg=
Subject key identifier: A8:7D:27:97:F9:6B:C9:F2:68:CD:7F:D0:01:FB:50:58:C5:75:A4:52
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 019A0222CD83ABB220CA21A7E1EE865A9D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 10E0
Signing time: Mon 20 Oct 2025 15:00:26 +0000
Manifest this update: Mon 20 Oct 2025 15:00:26 +0000
Manifest next update: Tue 21 Oct 2025 15:00:26 +0000
Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=)
2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: uTa0UCP8gac0hUO73be5n/U7UqxG1ZDIBjZuTEXhUFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:cd:83:ab:b2:20:ca:21:a7:e1:ee:86:5a:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Oct 20 15:00:26 2025 GMT
Not After : Oct 21 15:00:26 2025 GMT
Subject: CN=a87d2797f96bc9f268cd7fd001fb5058c575a452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fb:e4:8b:65:78:0d:ef:2e:ee:81:82:41:f6:
d9:42:27:6e:0b:1e:04:da:92:c4:3a:f5:49:b5:3f:
60:00:39:cb:54:fc:ea:84:24:49:55:d6:8e:6f:d5:
4d:d5:77:01:67:58:fe:81:0f:c4:9a:69:76:f1:21:
cf:56:6b:2c:3d:49:50:4a:5b:c3:36:64:95:43:b6:
d6:7e:4e:06:40:ce:ff:41:48:07:c9:f9:ce:8a:d1:
b9:e3:98:2f:d8:d1:99:7b:f2:20:57:27:e6:60:4c:
79:32:57:c1:88:3a:d8:29:1c:62:bc:6c:13:2c:36:
f9:8f:d0:29:89:c0:9f:b2:10:bd:f2:66:aa:27:be:
bf:5f:14:e1:26:b0:fb:35:94:80:dc:c6:51:21:11:
9a:7c:de:95:d4:53:c8:5a:d4:10:ef:89:95:a1:40:
90:c9:2e:70:86:08:aa:40:fa:25:a8:74:fe:6b:b1:
69:66:56:4f:d4:6d:c2:ba:7b:ae:ea:b4:50:7d:77:
22:f3:7a:85:75:1b:68:9c:a7:59:86:47:bf:16:ca:
c1:0e:24:2c:ad:b6:9e:65:c1:84:f2:d1:0a:e7:ce:
09:c2:65:29:33:cc:8a:ff:e8:26:c0:7a:4b:54:28:
38:78:43:56:51:f9:a9:e0:c4:83:3a:ed:ec:ef:67:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:27:97:F9:6B:C9:F2:68:CD:7F:D0:01:FB:50:58:C5:75:A4:52
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b8:8d:87:06:4b:4d:e2:54:6e:7c:6b:42:be:43:98:e3:72:
85:c0:a4:83:c1:bf:32:2f:b4:8c:8a:13:c5:91:e5:6e:0c:1a:
bd:d9:b6:66:1b:04:51:7b:1d:44:e0:9e:3c:33:9a:18:3e:fa:
3a:f7:d4:26:fb:b8:77:52:b2:d0:df:f3:2e:32:a6:a2:76:c4:
b7:de:21:29:e4:12:27:12:44:03:5e:0b:34:b6:4b:64:24:8f:
87:d3:4c:63:d3:a8:c1:ff:96:0b:d4:6b:e4:84:12:a1:0d:14:
27:f6:90:7e:9e:eb:ee:d2:92:b4:e2:c8:b0:79:c3:04:60:c3:
fe:e1:69:76:08:dc:0a:c4:74:84:07:b0:82:c7:e9:0e:6f:b5:
6a:75:0f:17:7e:59:ba:4f:40:50:7b:dc:d4:c8:24:91:1b:69:
5f:4a:86:41:5c:a5:4c:bc:63:70:52:18:c6:19:46:69:3f:ac:
cd:2d:69:69:a3:2c:cd:06:66:b1:e2:a6:6f:68:29:c6:55:09:
ca:63:f3:cc:26:a8:03:93:fc:f3:dd:06:16:f3:ea:26:bd:6b:
da:61:9a:75:67:98:af:01:63:0a:7b:8d:8d:1d:c3:e1:51:b7:
22:f2:19:7a:f6:0d:58:a5:27:e2:65:1d:4d:e7:95:ce:fc:1b:
36:a4:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:12:01 2025 by rpki-client