Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json)
Hash identifier: 6CHUy2CkZES09x20WtS+6Hue2AW4fVLJvS1csYwXpjU=
Subject key identifier: 91:8B:32:BC:52:50:C2:14:A8:69:CF:7D:90:8D:3B:56:20:51:18:00
Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675
Certificate serial: 019A00A30818218FA6EEC70684A43869DFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
Manifest number: 06EA
Signing time: Mon 20 Oct 2025 08:01:15 +0000
Manifest this update: Mon 20 Oct 2025 08:01:15 +0000
Manifest next update: Tue 21 Oct 2025 08:01:15 +0000
Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: d71ClXzlV/y+ZYMnMMthlpJLsMHZaEBvwd8wsWB9o94=)
2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:08:18:21:8f:a6:ee:c7:06:84:a4:38:69:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675
Validity
Not Before: Oct 20 08:01:15 2025 GMT
Not After : Oct 21 08:01:15 2025 GMT
Subject: CN=918b32bc5250c214a869cf7d908d3b5620511800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:ed:3e:ad:a4:d6:c7:9c:ff:34:6a:4e:e7:
5f:50:e5:1a:da:37:17:27:96:2f:b7:ec:be:f0:84:
df:ad:f0:f1:96:e3:12:a5:07:41:e4:ef:3e:bf:da:
d8:fa:c8:70:e5:24:52:e9:34:bd:9e:63:83:6e:4c:
13:b8:17:4b:d5:09:6c:36:0d:1c:d4:80:cc:78:b7:
6e:70:b7:d4:2b:31:5b:bb:bb:94:8a:36:8f:ab:6e:
6b:b0:d7:03:16:d3:c0:9b:79:31:ea:a8:43:af:f2:
b2:21:fe:9b:1b:0e:6c:de:6d:09:87:63:34:1e:18:
90:de:40:a3:4c:41:56:d5:8a:ed:f4:4e:51:c5:b1:
a8:64:2e:3a:0c:03:7b:5d:8e:2a:05:21:fd:74:6a:
68:da:1e:7c:43:eb:9c:e6:87:06:af:b5:71:5d:ad:
bf:15:1b:da:66:42:bc:59:7f:bd:e1:05:a4:6e:f4:
d8:93:b9:e2:8f:0a:c8:30:3c:5f:e3:55:51:7e:4c:
2c:d8:7c:22:0c:7f:d9:58:6c:bd:06:4f:36:15:da:
eb:55:84:4f:d5:be:57:aa:64:11:ac:49:57:ad:6e:
6f:e2:5e:3a:39:20:4f:61:33:cb:22:46:46:61:f1:
b5:0d:5c:e9:a1:ff:d9:7e:2c:56:85:ce:a7:4f:71:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8B:32:BC:52:50:C2:14:A8:69:CF:7D:90:8D:3B:56:20:51:18:00
X509v3 Authority Key Identifier:
keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c2:85:d2:65:35:ab:2f:f4:97:a6:a6:19:61:ab:58:b6:6f:
3b:f0:02:7a:77:42:00:c8:55:45:4b:5e:e5:2b:3f:64:73:9e:
cc:8a:a7:01:1f:d2:24:4e:e0:c6:fc:cc:fa:20:35:c1:38:ad:
e4:78:95:af:40:d2:26:08:28:2a:48:71:66:c4:26:c5:63:40:
81:73:39:6f:69:30:14:6e:f8:5b:39:53:ab:f3:a1:4d:2e:2b:
78:8b:e7:ba:e8:2f:a1:12:97:44:2c:e2:70:b6:69:6d:2c:a9:
a1:0c:ed:7e:68:70:a0:91:9b:5c:17:6f:9b:23:4c:37:00:dc:
33:dc:45:3e:f2:22:86:48:9d:db:b3:1d:e7:85:da:d5:d9:2d:
b0:cd:0b:a3:28:43:f2:19:47:78:9b:5e:58:61:6a:9d:a6:6d:
ca:d3:40:fb:05:95:96:d6:83:dd:06:24:6f:70:36:ce:f7:92:
9e:ff:d6:3b:76:be:3f:93:94:87:91:8d:a2:1e:b6:82:76:24:
0a:70:08:ff:15:29:5e:dd:56:56:cf:c2:04:07:4a:b6:82:18:
3f:0a:dc:18:c4:fa:58:51:19:bd:91:13:02:56:7c:54:79:ce:
0a:72:26:08:d6:5c:60:e0:ec:01:df:ef:3b:72:3a:e6:e1:0b:
da:ee:9b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:18 2025 by rpki-client