Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: LTIknkF7mlOu7QN+ayBEssp3d/oOPYNbsXSd9yGoiN4=
Subject key identifier: 67:81:6F:01:9F:98:ED:1C:12:86:D8:F8:73:E1:3C:B7:72:EA:3C:B4
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 0199FE0FFA1432179F326E1763C9E0423D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 113D
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: TI1+I5ECgGVTNhJVyAHXtRpBEsPV4debPhpn21jdwcM=)
2: wqBO6BWlzfH_2H8niSBLpjOhxuU.roa (hash: 5SSaQkHwuEWAOjr3+WUmjpF1re5YywGBgiTcg/L5BcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:fa:14:32:17:9f:32:6e:17:63:c9:e0:42:3d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=67816f019f98ed1c1286d8f873e13cb772ea3cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:83:b8:26:73:ae:e4:4c:08:2f:a4:ba:59:
17:5e:bf:a0:ce:d4:cc:fe:9d:a7:3b:c4:a4:ed:b6:
f9:1e:91:06:19:3f:22:39:64:dd:2d:ff:dd:c7:08:
1b:4f:62:70:3a:50:03:29:2d:1f:3a:69:43:a2:dc:
16:bf:d8:58:62:28:0e:a1:2d:1f:35:f9:cd:70:79:
0f:28:2e:99:51:93:04:b9:e8:63:00:5a:79:2b:1c:
a1:92:b7:cc:5c:dd:da:3f:cc:f0:fb:40:03:3b:db:
64:f9:c9:26:28:22:77:da:e2:3e:a8:20:e5:18:ff:
bf:7b:6e:d1:6d:a1:7f:7b:de:3d:05:71:25:df:ef:
89:3b:d8:7e:7f:e1:f2:4a:b7:2f:49:2a:39:6f:66:
0b:88:99:40:c5:af:2c:f8:d5:ac:7c:c9:5a:f0:4a:
98:4e:ee:7a:df:6c:72:6e:d4:a4:ba:47:57:95:66:
6c:10:30:df:a3:60:97:b1:7e:9c:e1:34:fd:4a:4a:
46:5d:a7:7f:b5:e5:2e:f5:09:9c:5e:63:0d:3e:40:
fb:fa:37:0a:ac:fe:72:f4:55:c2:c1:8c:71:1a:1e:
d1:ff:f1:c6:54:6e:3f:0c:bd:d6:ab:12:74:97:95:
98:30:70:b3:40:f1:da:0c:ef:59:8b:36:e4:39:b1:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:81:6F:01:9F:98:ED:1C:12:86:D8:F8:73:E1:3C:B7:72:EA:3C:B4
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8a:b1:aa:10:42:8b:3e:9d:49:c4:f5:de:af:73:14:06:68:
2b:b8:fe:90:5d:56:3e:ce:dd:19:e1:f4:86:a0:d8:ee:e9:ee:
76:5e:c0:84:e2:72:8c:f1:ab:25:7d:f0:a1:7b:55:2a:92:84:
9d:db:98:b8:98:42:88:e5:bc:2b:92:10:d6:37:da:dd:10:47:
f0:21:ab:23:1f:b1:95:55:29:44:b5:ac:b0:58:68:17:2d:f5:
b8:97:a9:1f:7c:03:ac:34:c6:3d:2f:37:13:8b:3d:0e:f5:30:
83:c3:a9:7a:12:4b:b9:92:9f:69:6f:1e:bc:aa:ea:cc:8c:87:
c4:94:39:43:32:8c:cd:78:b5:0f:eb:a4:8d:94:7f:4c:2f:ad:
4a:cd:c6:2c:ff:d2:9b:9c:df:58:bb:41:c2:c0:a2:82:cd:1e:
e5:49:88:56:7d:e8:fb:3a:ea:c5:d0:ce:83:4f:d3:ac:b8:4f:
57:c0:46:8b:da:15:10:58:1e:5c:f5:e9:45:01:d4:4a:7a:63:
ae:6d:c4:26:39:00:ab:0e:5e:1f:3c:81:ee:fe:4f:99:b2:54:
b5:2c:0a:18:c0:b9:94:f5:c8:0b:61:b8:b2:31:32:79:68:8b:
d9:e8:ef:a7:7b:1e:04:08:0b:55:b5:e7:6b:de:77:05:b1:c9:
c0:c9:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:10 2025 by rpki-client