Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier: 9Gr61AMhVr+5ARqBTDcuzSbK44Y11rFqYTPAUNSd5vQ=
Subject key identifier: 57:6C:08:FE:68:D3:1B:E8:2A:9F:09:06:BF:38:E5:D6:FC:24:E2:04
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 0199FBEC4B8FF71BDF321B925A990C3043DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number: 0C9D
Signing time: Sun 19 Oct 2025 10:03:10 +0000
Manifest this update: Sun 19 Oct 2025 10:03:10 +0000
Manifest next update: Mon 20 Oct 2025 10:03:10 +0000
Files and hashes: 1: XFE7vlLQBmzJZc1l5vHs4bwPMqc.roa (hash: qLSFKwb/lB7qwkyIoSUv9XJpnCetif9CbXA/zmT2Trc=)
2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: Xsh1xxC4o8wwOlbPQDxXSAN2kesbun3hlvdZKzrJBjI=)
3: eg48StlWCUn7X3RwRMM9IyTvRbk.roa (hash: GtElILT2eBg2EORjHkOJ3T4qKsc3NbDsadrpgQ1LlKY=)
4: wg5YIR4Y9RixLNkQqF7w7wmBrEw.roa (hash: 1MuzEvANE56SuPGyGU0hUCAeP9aNoicfYJymGmBNFKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4b:8f:f7:1b:df:32:1b:92:5a:99:0c:30:43:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Oct 19 10:03:10 2025 GMT
Not After : Oct 20 10:03:10 2025 GMT
Subject: CN=576c08fe68d31be82a9f0906bf38e5d6fc24e204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:96:26:a7:7d:96:c2:05:63:c0:bc:e2:18:
e3:67:60:f1:49:a5:ad:1e:7c:0f:f7:bd:30:44:61:
10:41:52:09:c2:59:46:19:cc:fb:3b:aa:f2:79:b0:
eb:10:25:a7:78:b6:c3:6c:b2:d5:37:72:67:e0:b7:
63:6e:1f:40:30:cc:dc:7f:4e:a4:6e:12:89:4d:47:
19:da:81:02:c1:a0:a4:47:2d:ec:1c:45:0e:ac:fd:
4c:76:6d:78:66:3b:a7:d0:7d:dd:e9:3b:94:48:8c:
db:4a:b4:e0:cb:ad:b9:5b:c2:90:7b:5f:e2:ac:42:
f6:1d:07:30:5d:76:af:b8:12:02:66:00:c4:39:ad:
4f:05:9c:5e:71:82:ce:de:01:10:1c:34:7a:a9:77:
a2:5a:0b:84:b2:dd:b3:f0:2f:b3:75:29:ce:54:f7:
64:85:27:3e:24:49:79:43:27:66:a0:5c:f9:ad:5d:
95:b8:e9:df:08:f3:18:f1:b4:0c:58:9a:15:70:54:
06:61:f2:65:dd:37:29:19:89:11:91:d2:2a:2d:01:
7b:65:e1:db:ef:fa:17:a5:df:4f:ec:51:fc:ff:96:
53:81:99:18:bf:be:d9:3b:65:06:82:bd:6b:9a:9f:
c0:97:83:94:ad:83:63:29:f6:86:15:70:b2:89:d8:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6C:08:FE:68:D3:1B:E8:2A:9F:09:06:BF:38:E5:D6:FC:24:E2:04
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9e:e2:20:63:12:64:d1:11:78:1e:53:c0:8f:b0:4f:90:56:
8e:56:3f:ba:d0:f2:ad:00:28:0a:f7:61:4a:34:fa:dd:fb:cf:
0d:fa:fc:a4:3c:53:11:e4:13:e5:05:a8:ce:2a:df:98:a7:a9:
d3:71:c6:f2:9d:1a:9a:2a:de:1a:47:79:c2:f2:4a:76:a1:c8:
f1:f4:7e:ef:72:a4:40:50:d7:a1:49:85:cc:50:ab:cf:f3:66:
f6:f2:a6:c1:7c:dc:b6:22:83:68:f3:7c:17:b2:58:e1:22:ba:
4d:b9:ee:ba:88:f9:7a:12:0b:c9:18:fd:22:9e:9d:a7:06:61:
f4:50:f1:c5:72:49:11:db:6e:bd:ca:23:4b:a9:26:33:39:a8:
46:d1:59:3b:78:e3:60:bb:1b:ad:e5:85:56:39:d9:34:a1:21:
f7:5f:9b:aa:02:57:68:25:b4:51:f4:f6:a0:bb:10:b9:53:1e:
bd:59:76:e8:8e:c6:a5:5b:7d:86:6c:fe:42:71:ee:07:c2:e9:
53:39:a7:56:d4:c9:c1:e8:25:2a:3d:2a:ed:11:95:bf:39:7c:
31:f4:77:0d:f7:34:35:b1:4f:b9:c2:d1:00:0f:f0:67:20:fc:
26:8b:9d:26:99:d1:a8:11:a5:63:2d:47:c5:af:21:47:e4:4a:
01:e4:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:56 2025 by rpki-client