Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
File: XQu-t4M73JvnJQYRV8A58qEPGoA.mft (raw, json)
Hash identifier: ASXMf90/lzBfl8k+5/Pyh0huIuS1PLDnq2TYlQNnztE=
Subject key identifier: 4B:11:AB:56:94:96:B7:CD:C1:35:E9:D5:1A:CB:F3:4C:B8:B3:97:D6
Authority key identifier: 5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
Certificate issuer: /CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Certificate serial: 0199FF59A2280F9FB03610F4031C37BE4EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 02:01:28 +0000
Manifest this update: Mon 20 Oct 2025 02:01:28 +0000
Manifest next update: Tue 21 Oct 2025 02:01:28 +0000
Files and hashes: 1: EhB6weKGJ4-421K8pUvkm2LrMKg.roa (hash: GehRK19n2FBgVxX0RORTYOeMQOvVei0ObqKHpANJ3js=)
2: XQu-t4M73JvnJQYRV8A58qEPGoA.crl (hash: N5rWMkvzz5WcvcioFGK1G3AMuRgMX8V6zM/IXBX9jqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a2:28:0f:9f:b0:36:10:f4:03:1c:37:be:4e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0bbeb7833bdc9be725061157c039f2a10f1a80
Validity
Not Before: Oct 20 02:01:28 2025 GMT
Not After : Oct 21 02:01:28 2025 GMT
Subject: CN=4b11ab569496b7cdc135e9d51acbf34cb8b397d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:e7:2c:d4:19:89:b1:7d:96:50:31:74:3f:
e7:32:fb:d9:6e:27:32:7b:f2:5e:c7:59:bf:d0:1d:
f1:10:35:19:68:a2:94:4c:26:b3:22:f9:a4:ae:4c:
cf:75:1e:e9:de:48:ae:71:22:2b:15:0f:8c:9c:1a:
44:f9:0b:a6:3a:06:48:3f:c0:cf:17:32:aa:0c:15:
cf:f4:05:4d:47:7e:1f:f9:ff:00:b5:e7:54:4e:7a:
78:a4:c3:ee:cf:06:b2:74:30:b7:ed:ef:d5:cd:78:
ca:ec:23:1f:ef:6c:ab:4b:6e:33:3f:69:37:cd:9e:
2c:b7:ac:a0:3e:cf:1f:93:31:38:a0:47:f5:0c:13:
03:03:da:57:b5:e7:94:4c:62:b4:48:7e:b0:20:cd:
48:f6:80:3a:5e:be:79:6a:22:ef:1b:71:7a:ce:20:
9c:27:2f:fc:00:a8:b8:14:7d:3c:95:ff:1b:4d:0b:
cf:3f:91:93:39:b7:89:70:84:26:a2:35:a2:68:f3:
c8:01:18:be:dd:9f:da:8b:2f:1a:fa:84:f9:ef:c1:
6a:40:79:c3:77:df:ca:6c:4f:eb:dd:fe:0e:8b:1b:
b8:53:50:ae:89:b3:c4:29:da:40:d2:03:f9:dc:6e:
16:73:09:cf:88:01:a9:fa:1e:c8:90:09:5f:fb:dd:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:11:AB:56:94:96:B7:CD:C1:35:E9:D5:1A:CB:F3:4C:B8:B3:97:D6
X509v3 Authority Key Identifier:
keyid:5D:0B:BE:B7:83:3B:DC:9B:E7:25:06:11:57:C0:39:F2:A1:0F:1A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQu-t4M73JvnJQYRV8A58qEPGoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2c08f-5ff3-4982-b57b-631c6d09e845/1/XQu-t4M73JvnJQYRV8A58qEPGoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a3:68:82:ba:ff:bf:79:97:75:5f:70:ff:e4:70:fd:c8:96:
6e:d7:73:6e:82:18:29:d1:3a:4d:6c:d3:c1:11:d4:8e:8a:16:
ca:1d:d7:2a:50:aa:ba:31:d5:ba:cd:38:76:21:b5:0e:5e:b8:
7d:dd:79:90:1e:70:f5:54:58:5f:b0:a9:96:42:09:b8:30:3c:
d2:67:bf:aa:0e:3a:29:d2:89:85:93:23:b8:0a:6b:1c:9d:08:
7c:e7:62:5a:67:a5:d8:68:35:d0:78:99:95:d9:32:3e:d5:ef:
01:19:e2:ea:9d:d7:c2:db:93:03:19:fd:84:5e:1f:75:ce:82:
5f:d9:ca:1c:6e:75:34:e4:1d:1d:dc:eb:61:31:87:11:61:19:
99:68:3b:4f:b1:6b:9e:bf:d2:13:56:41:1d:24:8f:91:ef:b8:
3c:30:89:ac:57:6c:27:0f:e7:5b:2f:61:d3:6e:ec:9a:aa:47:
f5:5f:6d:53:17:de:dc:f5:61:d5:95:be:70:fc:68:f0:9c:70:
eb:74:d6:e6:02:75:55:e3:5d:65:bd:09:c3:6f:4b:b8:3d:c5:
62:85:4a:11:97:2d:3d:b2:a2:10:f9:7b:08:3e:bc:cf:ba:a7:
78:e4:71:a5:ab:f1:f4:44:00:b1:6a:11:7b:b5:8d:e7:4d:87:
f7:05:c8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:27 2025 by rpki-client