Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
File: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json)
Hash identifier: Xe383bqxmZ9B/+gRuPQ9UrjOgO3N07NCJb+1ICfdTsc=
Subject key identifier: 24:FF:92:0A:D8:75:E3:F6:FE:EF:9F:3B:BF:C1:1F:1B:A6:1A:A1:58
Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Certificate serial: 019A006C11DA2E28CB5A0DF06FB878F3645E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
Manifest number: 0E0C
Signing time: Mon 20 Oct 2025 07:01:13 +0000
Manifest this update: Mon 20 Oct 2025 07:01:13 +0000
Manifest next update: Tue 21 Oct 2025 07:01:13 +0000
Files and hashes: 1: FjrlAXrbDvDS2HfDrOYX8s6VeoI.roa (hash: rrLNQtMJaYm4qKAUxLrF7WkgOLeuL0rvTXSBW6y9Fvw=)
2: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: +/5k7Os/jClUrzW2ijjFW3Lf3MJ2FrvWY5pnfaD2R9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:11:da:2e:28:cb:5a:0d:f0:6f:b8:78:f3:64:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5
Validity
Not Before: Oct 20 07:01:13 2025 GMT
Not After : Oct 21 07:01:13 2025 GMT
Subject: CN=24ff920ad875e3f6feef9f3bbfc11f1ba61aa158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:18:27:cc:1c:70:6c:f1:df:df:af:da:6c:
36:73:ef:fd:b6:f2:57:66:83:7d:e8:88:01:75:9e:
e5:80:a8:be:a1:dc:66:64:b3:6a:d6:0b:8c:10:eb:
4f:1f:6e:2c:74:ed:0f:bc:20:3f:d5:32:eb:18:58:
58:f8:af:a7:7f:dd:2e:9f:e3:50:4e:5e:60:e3:98:
bc:ce:98:fb:69:10:2c:46:b3:75:6d:89:91:37:61:
01:d6:c3:96:c2:c4:30:26:a2:37:ec:91:ca:7d:a6:
c4:cc:d1:b8:bf:da:60:18:ac:c5:6e:1e:be:a0:f9:
57:6b:e7:8e:58:35:d8:9f:6d:18:f2:81:b5:3e:05:
a9:7b:d2:84:07:09:72:88:a7:7b:1f:1a:41:c8:c4:
fb:f0:43:14:81:e6:2a:e3:f8:3a:ea:7b:f7:a2:cd:
06:9b:c4:bc:03:f2:39:38:63:16:36:a8:bb:eb:43:
20:3f:11:f6:56:b3:6a:01:c7:66:11:b5:fd:63:ea:
a2:03:14:b6:4b:5c:50:ac:82:d4:75:c7:39:9c:4d:
43:3d:20:94:ee:b0:92:21:e0:fe:c2:0b:88:e6:53:
4b:88:a0:eb:4d:a7:16:8d:df:24:b9:1a:2a:54:44:
ca:56:1d:de:5d:70:51:29:72:c1:3b:62:06:67:c8:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FF:92:0A:D8:75:E3:F6:FE:EF:9F:3B:BF:C1:1F:1B:A6:1A:A1:58
X509v3 Authority Key Identifier:
keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:42:cc:0c:aa:c1:5e:b3:07:89:59:43:1e:b2:55:9d:54:79:
e0:76:8b:5b:e5:b5:b1:97:b7:cd:33:b5:1e:94:57:7e:6a:e1:
fc:6d:69:38:a1:b4:1d:a2:3a:0d:8d:aa:6e:06:ea:0b:f5:b4:
a3:14:3d:f4:08:2b:7c:9c:fa:dc:8e:d1:4b:78:2e:b9:72:7f:
89:54:f6:79:15:02:f0:76:57:c8:20:fa:eb:32:66:f9:55:17:
f6:9d:cc:ba:5c:1b:fe:1f:05:5d:92:d6:90:45:ed:ed:f8:19:
c7:7a:6f:1f:89:b4:4d:ee:d1:9e:fa:3b:bf:67:5a:8e:10:9d:
10:fa:31:48:4c:e5:28:6c:2e:f9:af:80:6b:1e:5a:9e:a2:c6:
1e:ca:40:72:b5:f7:40:d1:80:8c:1e:5d:e9:ac:97:8f:44:ca:
a3:0c:90:74:b3:ed:0e:de:47:b3:c9:62:e0:85:cc:0f:fd:0a:
c9:a0:94:07:82:bf:a3:a4:9a:62:69:e2:c4:86:bc:9c:64:4f:
a4:a8:84:e5:c4:3f:fb:fd:08:79:c7:d1:cd:e1:23:6c:fc:9b:
61:f4:74:6e:dd:34:0b:70:32:ec:14:d5:e8:79:5c:ab:ac:54:
23:1c:1a:24:fa:20:7e:49:73:18:ef:24:0d:a6:75:0b:43:4a:
a8:72:79:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:27:56 2025 by rpki-client