Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: jwdhFD3O+Ib5q36b3SL7DOwcXrwRy5bzZhz9IexmO6w=
Subject key identifier: 10:A6:26:8F:A3:14:2C:5B:C5:99:B9:34:83:47:C3:9C:22:48:9F:1C
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 019A01115B454317F8268FD8F86DBB97396C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 15F8
Signing time: Mon 20 Oct 2025 10:01:45 +0000
Manifest this update: Mon 20 Oct 2025 10:01:45 +0000
Manifest next update: Tue 21 Oct 2025 10:01:45 +0000
Files and hashes: 1: 6BSNFyDmxjJKuKKXuAvPxKEuvHY.roa (hash: c6KHneV5lWrYB0vjR6eF0or+/RE98WhZucc1FLSvOaw=)
2: NiPqBoYHUOXXzCg0hHiDr6kmELQ.roa (hash: Xv44Y+Ginwz/PKxo+To+TC8XkCzR/fuz2BqxnW0vSNw=)
3: WVzv9IPs18jpEk9vxuxZJ9DgM6E.roa (hash: B0rUdnUd104guvU3/ZQlq+5h7/GgTzLKvxjoBYXsJx8=)
4: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: ntLprn4MBHMp2M+TjQAvPTuGcZ07+DRHK/d9L8DOt08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:5b:45:43:17:f8:26:8f:d8:f8:6d:bb:97:39:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Oct 20 10:01:45 2025 GMT
Not After : Oct 21 10:01:45 2025 GMT
Subject: CN=10a6268fa3142c5bc599b9348347c39c22489f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:12:7a:71:72:22:fd:77:d3:a3:ec:06:6c:04:
38:36:f9:47:3a:2f:8f:06:0c:9d:9f:b7:17:92:05:
90:7b:6e:cf:a6:0b:f2:ff:ca:49:14:26:93:60:c9:
01:f2:1a:e0:2b:e3:d0:6e:e7:32:5a:61:43:07:31:
7e:9e:87:b4:fb:13:eb:86:fa:52:ba:52:74:b7:03:
36:c5:c4:53:e9:fe:09:17:0c:d9:b2:c6:f8:57:7d:
f1:3f:a8:b5:18:57:0b:6b:a6:4a:ce:1c:2c:b1:ca:
d1:99:5e:92:02:9a:8b:54:96:50:cd:4f:50:04:32:
4b:0e:da:b0:fc:77:8f:75:09:7d:d9:48:60:40:0b:
96:c0:76:84:83:24:9f:b6:44:74:0f:7b:6d:18:e8:
4c:30:a8:88:7e:d1:ab:c0:10:2d:1c:e6:dc:4e:1e:
9f:b1:63:f3:9a:42:be:89:97:71:5a:b1:42:0c:5f:
29:94:98:da:ca:82:f4:36:8c:ed:a5:d1:f4:37:93:
e8:f6:b6:d4:ea:fa:75:c4:f7:47:99:6d:a6:c3:95:
ab:6d:3a:8f:9f:30:b6:78:20:d0:a3:30:f4:12:71:
d0:df:e6:3e:be:48:90:f4:de:6f:cd:5f:d0:90:be:
b9:94:93:51:f4:1a:a8:a2:6a:12:bd:8c:78:bd:0d:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A6:26:8F:A3:14:2C:5B:C5:99:B9:34:83:47:C3:9C:22:48:9F:1C
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:63:8c:d0:ca:2a:93:32:d5:12:86:59:15:46:10:b4:8b:f6:
0d:a5:86:d4:83:38:c1:79:3b:0a:0b:3b:31:09:5f:45:0d:aa:
f2:5b:9a:2b:d9:be:97:20:ff:7d:65:bd:6b:f3:7f:a1:15:13:
54:5d:8e:aa:4d:60:8f:ab:c6:cd:fc:f9:7c:e8:7d:8d:2f:2b:
41:9e:08:e9:00:8a:5d:e0:b3:50:ce:df:3d:af:cc:6c:94:2d:
6d:6b:dd:e3:c4:c8:03:29:71:57:2c:d0:b6:56:db:47:4d:4c:
16:d6:3d:52:55:ce:bf:d6:ac:33:0a:53:ab:c2:59:a5:ec:c4:
66:d8:36:c1:2a:2e:a0:fc:a1:de:ab:cb:2a:59:4a:c5:b5:36:
80:44:e8:46:ea:bc:0f:c1:93:56:f9:e3:9d:96:32:22:03:bb:
10:b0:c9:e0:8d:7b:cf:8c:96:b9:dc:11:f1:61:38:37:2c:35:
a8:ba:cb:c3:b2:c4:9d:44:e9:38:ef:b0:46:86:50:a6:5a:58:
f9:25:f3:fd:d9:c1:d4:7f:da:c3:fc:dd:24:89:5e:95:ce:37:
ac:72:3e:c4:20:a4:90:a0:de:59:f7:68:33:74:e9:5d:c0:e1:
77:f5:e6:42:df:74:fc:1b:7c:1b:55:f8:8a:c6:21:cb:87:ed:
72:98:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:20 2025 by rpki-client