Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
File: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft (raw, json)
Hash identifier: VUe6WwpzHtID/fZ/8uHS1QEC9hr4D3qWsXy5Q8SFrsg=
Subject key identifier: B6:AF:3C:32:12:D0:51:CA:EF:AF:88:2F:3E:C3:78:04:B6:3B:8A:76
Authority key identifier: 5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
Certificate issuer: /CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Certificate serial: 0199FB461CDA70755C35946E9F858959C725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
Manifest number: 0EBB
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: 5y30p7raCKJYfbSEuqmSkSYDtZA.roa (hash: Q9POdVDuj+/Z03r+yT0jSMbPBlZ31szcDGTnnw3yZCk=)
2: EEe4kviaoOaRAlXUsQ8khbzXdfM.roa (hash: T+PjLiW7h53Ujf5UZIxn9gd03FjxCMK/yqiKdbNrdog=)
3: X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl (hash: B/JpC2v3un724b6vZPyu4FW5DZgSz11bCg/LgrpDUcs=)
4: ZXym34osr40SiqtbVmd6WmrJ_Uo.roa (hash: nepOQlii7kclA1AEypWpBHB1cQu9+IAcjPq8eDKMcn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1c:da:70:75:5c:35:94:6e:9f:85:89:59:c7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc065098574629d4a7e2d2b2055aa7bf2302fee
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=b6af3c3212d051caefaf882f3ec37804b63b8a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:a3:b7:51:1e:b1:0f:6f:e8:2a:31:34:d0:
81:ba:49:55:3a:a9:27:fb:cb:2c:c4:24:78:62:84:
03:35:13:13:62:1c:ae:40:93:ab:2f:77:ae:89:c2:
b8:b2:3b:8b:41:40:60:e0:b6:f1:65:52:c8:5c:c4:
59:15:d2:27:6c:2e:a3:bf:96:ec:5b:fc:f2:dd:c8:
30:f9:aa:86:cb:a7:e5:45:b4:28:fa:eb:49:9f:f6:
4a:23:bd:73:81:65:70:04:67:c9:cc:58:c8:80:97:
a8:bc:17:b4:dd:28:c0:d1:8b:89:88:b7:f0:c0:2f:
6e:6d:ea:15:7d:5d:4a:27:80:71:a1:46:f2:c8:41:
7f:1f:d4:b8:45:7e:5b:0d:fd:d6:48:ac:05:ac:d3:
f9:ce:f5:87:88:2a:48:16:47:9a:6b:51:af:7a:a8:
fd:66:a8:76:45:d8:0f:63:13:e0:c8:8c:38:ea:cc:
c6:e9:45:ac:04:81:35:96:7e:d8:bb:65:5a:6b:b0:
5e:71:e1:68:fc:e3:d3:cb:aa:52:5d:08:91:c2:2f:
45:65:0b:ab:33:e6:55:9c:9f:ba:ba:63:35:c9:f7:
55:ba:2e:c5:c2:20:d2:19:c9:e4:1f:77:f4:df:dd:
16:37:39:97:6d:1e:d9:9c:e2:0b:05:cf:53:c8:f8:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:3C:32:12:D0:51:CA:EF:AF:88:2F:3E:C3:78:04:B6:3B:8A:76
X509v3 Authority Key Identifier:
keyid:5F:C0:65:09:85:74:62:9D:4A:7E:2D:2B:20:55:AA:7B:F2:30:2F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bffa03-1cd6-4034-a7bd-857599683c3e/1/X8BlCYV0Yp1Kfi0rIFWqe_IwL-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:37:b1:26:ad:2a:81:ec:1a:30:0c:41:a3:27:b5:cf:ff:54:
70:35:69:80:70:10:5a:88:b3:c8:ed:43:1c:bc:a2:1a:18:78:
93:ec:6d:21:a6:92:b4:38:a1:9f:ed:c7:33:da:e2:40:da:54:
0c:63:55:29:cb:ee:af:b1:2f:0a:4f:13:7c:6c:e4:4d:fd:ed:
04:95:ba:08:d4:81:9b:ee:e2:13:88:e7:f0:44:ad:3f:73:1d:
e4:84:a9:0c:8a:9d:fe:f2:e7:a5:c1:53:05:4e:59:87:f4:9c:
02:91:66:7c:7f:39:2f:be:31:76:bc:dd:37:97:72:4d:06:aa:
ea:18:f9:ba:66:17:be:3d:a5:c9:bd:ed:6f:3a:30:f3:72:64:
c3:db:e3:7b:a2:f1:1c:23:63:54:26:d7:65:61:bb:ed:82:a8:
0f:3f:43:e0:ad:c2:30:5a:87:ac:b9:6a:7a:85:e6:66:b4:29:
c6:cb:be:b4:6f:ac:a8:52:fa:17:e2:b6:d3:46:9b:76:55:1a:
da:fb:7f:29:6a:72:e0:3d:74:cf:69:14:95:67:9c:65:41:52:
bc:5e:fa:45:39:86:7a:98:54:cd:ce:4a:e2:65:b0:c4:70:d4:
57:74:be:fd:9c:63:6d:c4:34:d5:ff:06:bc:dd:49:dd:34:1c:
3a:64:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:41 2025 by rpki-client