Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: NAzXRWQRcuEsd4AL5vOqkfLRDisVZJA/u8sF6wY+B4M=
Subject key identifier: 93:DF:DD:5D:0E:9E:C6:21:2A:A9:C2:4C:B4:F2:63:75:10:07:12:32
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 0199FC8F5E6B9E10867BBCEF4BFBC06FA396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0B0D
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=)
2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: /dB0Ji66LOnqTlqQ8DsdbQyKSv6FzxdtXHlX35RmH/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5e:6b:9e:10:86:7b:bc:ef:4b:fb:c0:6f:a3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=93dfdd5d0e9ec6212aa9c24cb4f2637510071232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:78:a0:57:7d:ff:8b:71:ef:17:c5:92:f8:
6f:2f:7e:a7:c8:6f:95:7b:04:5b:f4:9b:94:ae:49:
4e:e7:49:28:44:45:7a:37:3d:9b:4c:16:b0:09:6e:
58:5a:c0:59:78:ea:1f:5e:fe:6a:81:ec:0f:02:c8:
93:9e:07:eb:24:5b:2d:14:7f:da:c3:6d:f7:e0:bb:
f1:bb:19:22:4d:e3:86:fb:a8:6f:eb:35:4a:95:06:
af:45:4c:4a:3d:b6:cb:93:db:d1:86:69:a1:0a:03:
75:7e:dd:17:d1:8a:48:54:38:ec:22:63:87:19:ab:
df:05:e3:40:94:cb:9d:0d:01:53:0b:98:73:ef:9c:
d3:a7:01:08:88:33:21:38:92:48:96:77:51:67:27:
f8:f5:09:01:04:f6:b8:44:f3:89:0a:4f:05:0e:ec:
c5:8a:04:17:21:42:b6:17:6a:e7:bf:e1:c0:77:a6:
d9:30:af:a5:4d:1f:ec:4b:2e:84:a8:e0:33:ea:46:
e1:27:fb:84:46:b9:c2:8e:0c:1f:64:e8:fb:16:a5:
6e:4b:64:89:e7:af:bf:3c:bc:bb:45:c3:c8:f5:c7:
48:d2:cb:d7:a6:37:e8:61:80:02:c0:50:72:c6:63:
ae:16:b4:0a:32:89:27:ce:16:ca:4b:18:88:5b:47:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:DD:5D:0E:9E:C6:21:2A:A9:C2:4C:B4:F2:63:75:10:07:12:32
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:31:8c:3d:87:2e:87:57:00:99:d6:e3:22:16:4e:74:43:
a8:7e:b2:45:78:7d:b1:4d:88:ab:a7:a1:bb:64:91:8e:3c:95:
93:d6:ef:b0:8b:b4:55:9f:14:29:29:8a:34:b4:bf:51:4b:2f:
f8:2e:e9:8a:7d:97:7c:2b:8f:1c:04:7d:ce:64:27:80:34:53:
03:fc:5f:3a:da:f8:4e:5b:13:f9:76:7b:2f:75:34:d0:61:56:
56:0f:9a:44:6a:49:32:52:88:06:cb:76:54:12:df:c8:bf:5b:
5f:86:bc:7a:34:2e:e3:80:3e:98:c4:33:6a:cb:c4:0a:b1:0e:
7b:c5:79:db:ab:ef:44:fd:4e:cb:0e:62:07:e6:7d:ea:19:ef:
78:4a:f5:28:eb:d8:06:98:c2:98:32:cb:cd:7a:03:60:ca:d8:
c0:1a:5d:3f:82:c2:85:b8:5e:d1:49:0a:d7:f1:a5:3b:07:8d:
e6:43:37:75:b4:4c:ef:51:76:a3:82:16:cd:a3:6f:8f:1c:92:
a0:99:fd:a1:53:f1:48:7e:64:1a:17:44:fc:92:f0:fb:b7:18:
c1:20:a4:69:61:c8:8c:c6:b0:d0:18:22:81:17:92:18:ae:a8:
20:c1:8a:1c:08:66:b2:77:1b:9a:a9:b7:09:ef:c6:41:b3:9f:
5c:13:70:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:42 2025 by rpki-client