Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier: KnIuJfJ7FUatJdI+jM/AeK/YqOwsjcEBfiO/47x8LU8=
Subject key identifier: C6:B3:A5:E0:64:34:25:67:57:C1:FD:AA:A2:19:31:11:77:AD:45:EC
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 0199FB0F21769B991310393FD4E4F7871290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number: 0517
Signing time: Sun 19 Oct 2025 06:01:36 +0000
Manifest this update: Sun 19 Oct 2025 06:01:36 +0000
Manifest next update: Mon 20 Oct 2025 06:01:36 +0000
Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=)
2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: zg42rnURazracKPMuxVO5REyYV9y6MAR+NkyH96B0kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:21:76:9b:99:13:10:39:3f:d4:e4:f7:87:12:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Oct 19 06:01:36 2025 GMT
Not After : Oct 20 06:01:36 2025 GMT
Subject: CN=c6b3a5e06434256757c1fdaaa219311177ad45ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:16:e8:e5:55:af:e5:56:63:0d:80:c2:7e:
9c:b2:e1:cb:88:c1:bc:3f:9f:ad:29:6c:96:52:de:
97:b0:95:d5:4e:84:89:32:8f:6b:a2:37:8f:48:d1:
04:ff:7b:31:a4:4e:36:73:c0:0e:cb:f3:91:e4:26:
9e:ac:07:40:0e:cc:80:93:5d:28:7b:07:d6:3f:39:
3d:96:e5:96:79:1f:7a:09:38:7b:bf:4a:30:06:c2:
29:36:76:c9:b4:6f:f6:8a:a3:67:10:15:73:3e:8a:
34:21:81:41:f1:69:c0:5c:cc:2c:53:87:87:86:87:
8b:ac:e6:19:32:0f:30:33:65:c8:c8:48:75:fc:5c:
dd:d5:04:4a:ba:30:e3:c5:42:b6:19:2a:c1:ee:00:
b4:73:44:54:fb:93:d2:1e:33:04:ce:cd:03:da:84:
f0:82:4e:b0:c7:7d:93:87:7e:bc:89:cb:6e:cf:37:
cf:41:c0:48:6d:41:0a:c1:5f:15:cb:09:2b:24:13:
11:59:50:09:1f:07:0c:7d:5d:27:80:83:b6:19:1e:
b9:d6:2c:24:61:b7:f3:15:c9:37:df:89:2c:9c:47:
ee:b0:9a:1d:56:5d:93:29:f3:9b:66:50:d3:b3:11:
f8:34:1a:73:f6:53:00:d3:2a:5e:36:0e:81:3a:e2:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B3:A5:E0:64:34:25:67:57:C1:FD:AA:A2:19:31:11:77:AD:45:EC
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:68:b2:39:64:71:8d:b9:c8:a1:46:44:29:7f:e3:af:1a:af:
8c:e3:6a:3c:d0:8c:04:42:98:a8:29:47:98:0c:fa:0a:6f:12:
32:6b:21:0c:05:52:7c:1b:91:9f:50:ce:0f:41:03:0d:ea:38:
fe:d7:42:d6:69:f8:71:cf:d5:a9:c9:5e:ac:b1:2a:b2:02:74:
15:b5:cd:f7:c8:60:cd:02:23:54:ff:25:cf:9e:37:af:bc:68:
85:a9:48:58:a4:eb:2b:99:f6:43:61:35:26:98:8f:a9:de:d4:
38:e9:49:56:2e:27:e7:b5:96:87:04:fa:8b:b7:2f:9a:57:ce:
29:8b:34:a7:53:50:b7:ad:11:08:e9:d2:09:c1:c1:f8:81:5a:
5b:75:2a:34:ac:5d:09:dd:6c:5a:a4:44:47:76:ae:79:1e:45:
c3:0e:9f:71:9b:42:ed:4b:e4:8c:76:2c:27:32:e2:70:bc:46:
6b:32:ed:78:fe:ef:3d:be:81:be:07:c4:83:a6:6b:c6:d9:3a:
b7:20:9e:ce:cc:7e:de:56:a1:4a:83:a5:7c:0c:3a:fb:48:8b:
0e:f2:d9:a7:0a:31:cb:48:9b:51:71:34:cf:87:0e:87:b2:a3:
1c:1b:58:04:b2:6f:07:32:df:ba:a8:be:22:06:9c:4d:08:b4:
d4:f7:14:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:47 2025 by rpki-client