Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json)
Hash identifier: HTEdkkC6nwpu0dD61pOWrsnYtKyezOnmrsrp254JFi8=
Subject key identifier: 1B:90:69:7F:EA:1D:C3:5D:FE:87:E1:44:E0:0C:4D:4A:B6:C9:84:E2
Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Certificate serial: 019A00A37A1380F8F08EE7AAF77C9960561E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
Manifest number: 0525
Signing time: Mon 20 Oct 2025 08:01:44 +0000
Manifest this update: Mon 20 Oct 2025 08:01:44 +0000
Manifest next update: Tue 21 Oct 2025 08:01:44 +0000
Files and hashes: 1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=)
2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=)
3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: KrG18A1gtBovc222eYGW/ZQjz8YR5Fq7QaeNflcKlrs=)
4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=)
5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:7a:13:80:f8:f0:8e:e7:aa:f7:7c:99:60:56:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662
Validity
Not Before: Oct 20 08:01:44 2025 GMT
Not After : Oct 21 08:01:44 2025 GMT
Subject: CN=1b90697fea1dc35dfe87e144e00c4d4ab6c984e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:8c:b9:5a:22:c7:2d:96:0a:9f:f2:2b:37:82:
28:a1:df:bb:0a:e9:de:2a:40:ff:8e:74:e5:2c:c9:
30:3a:e1:88:20:75:03:09:e8:0f:e1:95:af:a6:cb:
3c:20:99:2f:da:8a:6c:86:c2:a6:27:4a:9c:90:06:
98:85:2c:0d:4c:dc:9f:7f:68:1f:86:54:f8:05:87:
1a:5b:0c:e2:e9:bb:66:51:46:2b:69:b0:f4:15:dd:
07:0d:05:ec:0f:1b:18:dd:8d:f6:81:4d:28:a1:9d:
61:7b:74:a6:4c:7f:bf:fc:5e:e6:a3:18:26:ac:f9:
66:64:b2:ff:0f:cf:bc:50:9d:40:eb:8d:a8:ad:9b:
c4:ba:98:b4:00:9d:16:25:24:46:24:18:f1:87:2e:
1c:45:a5:05:7f:55:de:2e:e9:63:f2:cf:75:2c:f0:
76:c4:01:16:f2:a8:bc:59:b3:fc:d7:95:0d:74:af:
2f:1a:d9:1c:34:f6:87:d8:f4:40:3c:ab:e3:5b:a1:
8f:8a:4e:d3:7e:74:9a:b9:f6:40:58:b2:e3:df:03:
e3:ed:38:e4:40:5b:a1:e5:ea:91:e3:3f:63:56:7b:
9e:8b:82:9a:bb:f0:77:e6:a4:f0:16:5d:00:55:30:
13:c7:51:da:a2:53:3b:b5:6d:f4:9e:a2:ed:54:3c:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:90:69:7F:EA:1D:C3:5D:FE:87:E1:44:E0:0C:4D:4A:B6:C9:84:E2
X509v3 Authority Key Identifier:
keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b2:b0:6a:95:af:c8:51:d2:d8:6b:1e:0b:8b:c5:c1:82:49:
11:2f:31:12:74:22:7c:a6:f5:03:00:19:f1:64:77:18:3a:f0:
d6:e6:48:99:0a:79:25:0f:13:e6:c4:44:12:2a:7f:7c:9b:23:
85:fb:a9:cc:50:93:25:67:11:d2:d0:fb:49:f7:21:c6:26:e3:
dc:9f:d2:25:e9:f6:ae:90:d1:d1:d0:61:40:11:51:83:2f:74:
eb:07:9d:b3:51:43:4a:3d:82:4c:ce:bc:62:91:d0:e4:06:5f:
8d:61:7d:bb:69:c5:7e:4d:14:1f:4d:6a:80:e4:74:14:3e:23:
0d:53:30:ee:4f:50:c6:5a:d9:11:31:02:54:b5:71:3c:4d:ba:
4c:25:e5:5b:7f:16:b7:cf:38:a8:0a:5a:1c:48:39:9e:3b:cb:
4c:d2:47:96:9e:5c:1f:a4:5e:53:7b:15:0b:93:f1:43:5e:31:
5b:07:bd:96:8b:32:47:7c:82:4a:95:44:4e:18:cd:a9:79:9b:
a0:d5:f9:21:53:4a:b2:f1:aa:b5:41:8b:0d:8f:84:83:7c:b7:
0c:9d:4d:de:36:e3:19:66:22:b5:67:59:99:65:5b:4c:09:2a:
c8:3b:ba:4a:41:e7:e8:69:95:79:d9:69:5a:0f:d5:63:94:14:
f5:34:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:42:06 2025 by rpki-client