Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: n9mu/I8GjJpD44qTXRAMpJrXjUwHYfVRvvL26t40aws=
Subject key identifier: AC:EF:AD:8F:C1:AD:08:E0:F2:93:00:58:BD:F9:89:22:2F:76:AF:AB
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 0199FEEBBDB1C1647B10A38BF88ABAD723F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 00:01:26 +0000
Manifest this update: Mon 20 Oct 2025 00:01:26 +0000
Manifest next update: Tue 21 Oct 2025 00:01:26 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: d0GiIjK2PO2IYv5u3vTzMN+WIsYIdQqUVOOxvID2J4A=)
2: azbP8xztM6HoR6j7EeBVt4EbnIg.roa (hash: rva5hYZTrXadJatsMxoY0q+lj0tXHojolGsaODfl/yk=)
3: j7b7vmD8KPkdCnlVP71o2CqtU94.roa (hash: vTXrjDCvGjQOipbgO3jSLM/qIjBdRpKJ9yHdB1QKUs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bd:b1:c1:64:7b:10:a3:8b:f8:8a:ba:d7:23:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Oct 20 00:01:26 2025 GMT
Not After : Oct 21 00:01:26 2025 GMT
Subject: CN=acefad8fc1ad08e0f2930058bdf989222f76afab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5c:97:76:b0:ac:07:05:7c:9b:ae:08:ee:d5:
6e:7f:4d:49:f3:bd:60:27:0a:62:0e:09:61:43:cb:
43:17:ea:2d:2b:c8:10:f2:10:d6:d3:a2:6d:22:a9:
c7:c8:20:1f:35:cd:03:27:fb:46:a8:82:a1:7d:98:
59:8a:eb:55:0a:10:ac:34:c1:08:7b:85:eb:8e:e6:
a2:a5:34:f2:e8:ae:10:09:82:ef:c1:37:9f:07:6f:
0f:95:e5:04:15:e8:2b:9b:60:f9:d8:de:47:63:45:
fa:14:d4:53:8a:42:bb:40:f7:51:97:de:1d:7b:e1:
61:0c:0e:86:a5:91:5d:b8:43:d6:6b:7e:ba:6d:c1:
58:aa:f0:04:2b:4f:6a:5f:01:0f:72:2b:80:1b:89:
15:cc:23:b9:de:72:93:c6:6a:c7:24:8a:0b:c6:a9:
f2:88:7b:2a:a5:83:2d:e7:91:a1:34:f9:d8:5c:bf:
7c:8b:76:d7:41:63:4c:32:92:72:95:ff:15:20:1b:
73:bc:c2:3c:d5:f1:6d:79:62:fc:07:24:5e:3e:83:
39:6e:41:35:a8:6f:ad:f4:29:73:a8:ee:6c:11:bb:
23:2d:38:33:01:50:d1:88:aa:0e:4d:ad:82:f5:56:
05:5f:b1:01:4c:ca:d4:70:94:26:e7:1f:0e:5a:79:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EF:AD:8F:C1:AD:08:E0:F2:93:00:58:BD:F9:89:22:2F:76:AF:AB
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f8:c3:f2:5b:9f:e6:8b:84:b7:ee:f9:25:57:07:18:c1:19:
75:c8:19:92:6a:19:f7:e8:d4:f1:8a:95:7c:7d:7d:c1:3e:f6:
d0:06:66:c7:09:12:dd:0b:5d:a6:16:23:b3:73:cf:47:56:c9:
32:d2:4f:c4:82:0c:23:36:e9:47:88:b9:f4:36:40:a7:fe:a6:
e8:4e:f5:94:27:aa:e5:f9:a2:96:3c:75:d9:d6:2c:69:b1:77:
08:9e:35:4d:73:83:d0:6f:f0:ac:d5:7a:d9:c5:a2:fd:3a:ee:
a3:9e:14:95:55:c5:8e:7f:1a:c6:2f:63:1e:56:6c:45:8d:01:
9f:5d:02:02:5b:c6:9b:de:f0:c6:38:65:5b:38:b1:f0:4b:fe:
b3:8f:a2:c2:11:c0:ca:26:3d:e3:27:3e:d9:cd:8b:11:62:a0:
9e:f9:db:de:a2:ee:20:1e:8e:bd:bd:1c:28:a1:54:fc:2f:e3:
7d:a2:ab:35:74:6b:fc:e0:aa:a1:4e:75:6b:69:24:cc:a3:97:
3a:4c:4a:f7:5e:93:b5:e8:49:1f:71:f8:c7:45:90:d1:c0:99:
28:ff:63:97:e8:77:fb:59:01:34:63:b6:01:62:ef:5c:f9:8c:
68:84:db:d3:67:75:d5:ed:55:c3:70:d2:45:fa:17:22:cb:04:
c5:19:20:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:45 2025 by rpki-client