Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File: X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier: uoEYaHIqpTw1O3iyhYOYfi6nPHL2sGAfqH9dYObm8AA=
Subject key identifier: C5:DD:1E:F1:F8:E7:79:94:C7:E1:31:E2:17:A4:17:98:22:E8:0C:E8
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer: /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial: 0199FDD94200B167F0FB4B5921214CC93460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number: 0BD8
Signing time: Sun 19 Oct 2025 19:01:37 +0000
Manifest this update: Sun 19 Oct 2025 19:01:37 +0000
Manifest next update: Mon 20 Oct 2025 19:01:37 +0000
Files and hashes: 1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: 9k/RJkkebdSdL2Bshuhclj44NmvCRdVxnul2W83jcR8=)
3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:42:00:b1:67:f0:fb:4b:59:21:21:4c:c9:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Validity
Not Before: Oct 19 19:01:37 2025 GMT
Not After : Oct 20 19:01:37 2025 GMT
Subject: CN=c5dd1ef1f8e77994c7e131e217a4179822e80ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:a0:00:f5:7c:52:62:4c:36:e1:52:3a:e7:
93:74:a6:22:4b:71:d9:dd:fa:2f:db:f2:35:12:cc:
ca:01:cb:9a:28:cf:d2:47:e7:da:02:f2:27:7c:78:
2f:b5:24:6c:84:7b:f3:de:7e:19:18:cc:cf:b2:63:
dc:f4:b2:b9:43:0b:cf:19:16:2d:a6:80:c7:7a:bb:
aa:f8:23:46:77:0d:3f:fc:2f:78:a4:61:2d:0b:d1:
a6:ee:d8:8d:0d:b4:4e:a0:f4:9d:59:35:40:d5:50:
6f:d6:64:ac:27:fb:af:d6:0d:04:e6:82:30:ba:a9:
e4:c2:ee:e3:b9:fc:bb:a1:44:2d:73:25:43:db:a8:
a6:62:05:99:14:6b:cf:63:59:2b:3f:f6:ff:e4:df:
1d:7e:88:3c:69:7b:f5:8e:9b:81:b7:b6:b6:b1:8c:
0c:42:4c:bd:4c:63:1e:eb:06:f8:2a:bb:86:0d:75:
37:d3:13:df:d3:87:78:7f:38:a6:90:cf:d9:21:49:
de:18:11:c9:c0:b1:36:f6:0f:3a:f9:e3:e7:1a:03:
74:03:ae:7f:df:18:49:12:54:a9:27:65:3e:45:67:
83:4a:48:80:ff:62:94:4c:b1:23:0b:7f:6f:30:5b:
25:eb:13:c3:79:89:1f:1d:eb:4f:aa:8c:2c:eb:43:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:1E:F1:F8:E7:79:94:C7:E1:31:E2:17:A4:17:98:22:E8:0C:E8
X509v3 Authority Key Identifier:
keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:52:63:93:bb:d7:64:9a:b7:7c:3f:54:f2:48:4b:0a:60:9a:
eb:2b:d7:d6:2a:29:a3:54:c2:f5:92:82:9c:f3:33:95:12:a1:
29:1b:ca:20:c5:b9:31:a0:fc:5f:47:00:f0:11:41:e9:2f:7d:
a7:0e:e6:77:4f:73:b9:0a:47:0c:30:4a:f4:cc:01:91:58:28:
8c:5b:7d:e4:e4:51:f5:0a:f0:28:a6:91:6a:e2:29:56:5b:f8:
1e:40:a7:d7:e7:22:84:14:30:a5:f8:f5:e7:37:40:db:f3:17:
8d:6a:ea:fc:30:db:31:e2:0d:52:d7:3f:00:0d:72:94:f9:2b:
eb:8d:0c:d8:bc:f6:71:cf:9f:d2:b3:29:b1:af:97:da:d5:37:
b5:0e:25:3e:97:43:85:f5:8c:b7:0e:42:d7:22:aa:ae:68:dd:
cc:e0:94:eb:f0:61:bb:4e:e3:d9:63:10:1a:49:d0:f2:96:2e:
df:84:a7:c8:eb:ca:f3:ed:ff:e8:37:5e:ad:b9:b0:56:11:d5:
6b:7c:22:5f:54:a3:a3:23:87:30:ba:00:e1:f3:73:b6:92:2c:
96:a5:ad:92:78:30:0d:fd:51:9c:d1:49:35:55:a7:f0:38:9b:
7f:ad:46:15:bf:f9:5e:cf:26:ed:11:c0:1c:50:af:bd:96:a3:
c8:58:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:05 2025 by rpki-client