Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
File: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft (raw, json)
Hash identifier: SXiedZtWkyqcpAtnhjqdBMCJpZPmQfLMhikG6lAtkxU=
Subject key identifier: 0F:77:D8:6C:45:6D:BF:C5:DD:52:50:02:8D:B4:96:97:72:FA:6A:83
Authority key identifier: 5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
Certificate issuer: /CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Certificate serial: 0199FCC6187B92F205B98157D5B2C1993D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
Manifest number: 1397
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl (hash: FKW3lL1uweJM8o9hWJ68sNlVg3jbSvpznIRPFOacBqk=)
2: gbEdvQz4q0AdyM98MXiZjERkDX4.roa (hash: QnkSlwi1hREwXQkmvd9zqXoHe57V+gXhpktYubECCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:18:7b:92:f2:05:b9:81:57:d5:b2:c1:99:3d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7fd9586f9ccb0fb4487b208cdf4675e5bbf330
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=0f77d86c456dbfc5dd5250028db4969772fa6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e7:13:68:86:1f:8a:82:16:a7:d0:34:25:65:
c1:e9:30:c1:1e:3a:f0:8d:98:0c:98:52:fa:90:01:
b4:f6:79:d9:e2:09:18:c8:e0:40:e3:00:a3:42:99:
37:c5:d4:74:e7:ee:d1:26:21:35:23:bc:35:bc:b7:
0d:88:63:23:db:3c:5f:60:9b:b9:c6:2c:dc:6f:66:
01:62:30:d0:ba:77:d8:f3:e4:07:3f:ee:8c:e5:38:
e5:b1:3d:03:26:08:eb:c5:21:73:f8:4e:58:42:df:
25:4c:ee:0c:51:c6:58:d0:61:4d:e5:0e:63:e3:85:
e7:a8:87:ef:25:35:ff:d1:30:5f:80:bc:19:e5:d2:
19:cb:4c:2c:f8:e8:65:c6:f8:5e:cd:c7:d9:bd:11:
1b:ca:5f:e9:35:0b:0c:1b:75:55:bc:0c:e2:77:7d:
25:15:e8:d3:92:8c:a9:dc:1e:55:e7:8b:ab:72:6d:
59:50:68:47:fe:f0:fa:40:2d:cf:01:f3:ca:cd:39:
8c:63:5c:97:28:84:70:e2:df:29:80:02:45:a8:8e:
e3:10:e2:8c:b8:61:25:7e:b1:6d:68:57:8e:cf:f2:
d3:da:a3:db:4d:b9:f7:77:65:4d:90:03:23:91:db:
f7:0d:41:cc:ad:9e:df:26:be:49:1b:30:73:63:b4:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:77:D8:6C:45:6D:BF:C5:DD:52:50:02:8D:B4:96:97:72:FA:6A:83
X509v3 Authority Key Identifier:
keyid:5E:7F:D9:58:6F:9C:CB:0F:B4:48:7B:20:8C:DF:46:75:E5:BB:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/15e53d-70b0-4268-9124-4b01d63e795c/1/Xn_ZWG-cyw-0SHsgjN9GdeW78zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:56:e3:b3:78:d9:6b:24:94:f1:cf:e0:7a:03:a4:cd:bd:d2:
80:ca:08:c5:4c:25:a8:42:b6:c3:de:28:62:b0:79:73:a0:bd:
8c:62:1b:f6:36:df:cc:e6:5b:e0:d6:7d:96:45:18:30:83:a3:
9e:c2:e1:8a:37:1d:f2:0a:17:a2:ad:28:11:94:f4:85:6c:a4:
28:6a:57:35:63:95:13:9d:fb:2b:9a:57:da:4f:d5:f2:03:13:
cd:9b:46:69:35:70:49:f0:a8:a9:44:3a:65:e0:14:ac:7d:eb:
b6:32:b6:66:56:a7:27:c9:6a:fd:7f:c6:49:c3:29:00:d5:62:
71:01:ea:f1:44:86:da:24:23:52:fd:f8:76:93:4d:57:9c:5f:
c1:c0:3c:36:bc:ac:f8:85:07:3e:6d:b9:67:f2:1e:96:dc:9b:
ed:eb:44:51:fb:d8:fe:91:6e:13:c2:81:7c:3a:45:ff:01:11:
63:cd:ff:90:1a:a1:03:b7:c6:cb:8e:71:8a:35:33:fd:1a:c6:
f4:c7:89:18:14:5b:c9:99:6f:55:c8:e4:17:1f:8e:8e:53:58:
d6:d3:d4:35:67:86:c0:c5:98:5f:20:17:05:77:3e:85:a2:14:
fd:78:63:17:02:ed:27:82:ba:33:8b:a4:68:6e:73:b7:ad:aa:
05:30:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:41 2025 by rpki-client