Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: a5bWaICJ2t68PBtOhpdreGnRZnKF+Hyms+ilLDwpvZE=
Subject key identifier: 62:2B:FF:AB:86:88:A0:3D:96:76:C1:EF:66:F6:D8:95:B6:B5:C1:76
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 019A0034EEF19A93CFB05C3E2901B5024E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 06:01:00 +0000
Manifest this update: Mon 20 Oct 2025 06:01:00 +0000
Manifest next update: Tue 21 Oct 2025 06:01:00 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: 18vt0Arr2tm83DZJ8+yPWFqv4rn2GoaNDVh3nRoeGlw=)
2: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (hash: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:34:ee:f1:9a:93:cf:b0:5c:3e:29:01:b5:02:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Oct 20 06:01:00 2025 GMT
Not After : Oct 21 06:01:00 2025 GMT
Subject: CN=622bffab8688a03d9676c1ef66f6d895b6b5c176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:6d:93:99:a1:63:be:74:df:b2:51:7b:db:
50:85:c4:a9:cc:5e:20:c7:30:d7:2f:c9:de:fb:10:
7a:8e:df:0d:08:ea:ba:94:ad:67:e2:32:6b:87:07:
a8:32:96:07:82:41:9b:8d:ca:a9:06:e0:32:ef:ac:
ca:1b:34:e1:29:64:ac:d6:3c:73:bd:c9:ea:d8:88:
0e:3d:36:33:3c:81:30:a5:68:b3:bc:c5:b2:94:f5:
88:a0:99:a6:a4:21:82:a3:16:a1:65:7f:b1:57:fa:
4e:bd:c9:a3:10:25:a4:8a:62:c7:1b:52:95:fc:ef:
37:ec:a3:4d:48:b7:84:19:93:dc:a0:71:4e:62:1e:
37:67:83:fc:67:9f:83:f0:98:e5:64:1e:7d:3b:09:
a9:95:92:e3:e0:c7:9c:e7:c6:3c:2f:9e:ae:a2:56:
e8:84:12:14:17:93:4a:9c:c1:fa:a0:b3:ed:c2:8d:
1d:4e:ed:9b:76:eb:fe:e3:0e:4a:f7:21:36:c0:27:
9d:9d:6d:c7:3c:82:78:5f:32:ba:54:72:c0:09:7c:
ab:01:b1:5c:b0:c1:e1:e2:83:6d:e9:97:00:68:be:
e5:5b:af:21:e7:be:16:37:79:11:d2:f7:36:b9:bb:
50:67:5a:20:9e:35:45:64:16:a3:9a:82:34:1c:01:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2B:FF:AB:86:88:A0:3D:96:76:C1:EF:66:F6:D8:95:B6:B5:C1:76
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e4:c7:2a:6f:d7:f7:e0:e5:49:fc:2e:fe:7f:86:df:e6:2f:
26:d5:cc:64:dd:51:80:51:64:e5:e1:23:c3:74:d8:46:5c:6e:
a7:28:c8:5e:aa:bb:1b:62:36:13:ab:b1:a6:fb:c2:23:ca:b7:
6d:db:5b:23:c2:9f:fb:88:08:a8:99:c0:e2:ca:8f:2a:64:cf:
5a:a3:58:4d:f6:24:15:56:b4:e4:df:fb:7f:40:b7:d7:26:52:
b1:62:9c:4c:8c:de:33:ef:66:6e:01:d0:bd:1b:fd:36:ea:11:
95:29:da:60:0f:06:b5:b7:1e:f8:5b:f9:c1:c0:6f:e2:a9:45:
37:62:fb:d7:d8:23:6b:e4:3f:a8:06:92:69:71:a1:50:71:83:
c1:b1:26:55:cf:79:a0:cb:95:2c:bd:fe:b1:b5:3e:6e:e2:a7:
7a:77:33:f5:e7:33:66:d4:70:f4:cf:a0:64:97:de:b1:bb:16:
ab:89:6c:61:3b:0b:be:f0:76:52:97:5c:f2:d3:f6:21:d4:c3:
1e:77:e6:e4:12:0f:f9:88:67:33:64:1f:f9:14:49:ea:6f:82:
6f:70:aa:fe:82:78:d3:fe:b6:3d:17:34:ab:b7:1f:14:16:a5:
55:73:02:8b:4f:eb:10:85:43:ec:97:6f:a2:98:bb:5a:af:3b:
30:9a:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:13 2025 by rpki-client