Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: /E7Ep+OoYxqlpAwC8isUvKcU4aRaXR07lwDftc90sQY=
Subject key identifier: BC:28:01:B2:58:E2:35:20:3C:10:69:F7:EC:2C:83:EB:FA:87:10:59
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 0199FBEB20BC353D40C57123E514897F109D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 02BF
Signing time: Sun 19 Oct 2025 10:01:54 +0000
Manifest this update: Sun 19 Oct 2025 10:01:54 +0000
Manifest next update: Mon 20 Oct 2025 10:01:54 +0000
Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=)
2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: +fVzgoFcuJoSs0zDZFIZcHOaL66/s68utvbpsm/m9L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:20:bc:35:3d:40:c5:71:23:e5:14:89:7f:10:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: Oct 19 10:01:54 2025 GMT
Not After : Oct 20 10:01:54 2025 GMT
Subject: CN=bc2801b258e235203c1069f7ec2c83ebfa871059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:38:8d:96:09:82:95:c0:5e:9f:b8:88:59:
b7:fb:18:af:50:8b:d7:c0:81:8e:75:63:82:30:2a:
9b:70:e1:66:76:d7:b0:64:b6:2d:e6:3d:e5:55:3a:
7d:f9:a5:1e:4d:fb:65:b7:63:38:e3:f5:17:c8:1c:
51:8f:3e:e1:84:1d:c0:be:af:30:a4:3f:48:6a:37:
5d:95:c0:6b:16:d9:67:e3:81:42:f4:38:62:f5:f7:
07:fd:c2:c8:8e:7d:33:d1:d1:cc:23:01:c9:d2:72:
c9:f5:af:5b:08:2f:24:f7:5c:e5:9e:41:db:01:f2:
67:2c:e1:15:d0:51:ac:db:f7:81:69:86:33:82:b6:
c2:d5:95:7e:51:15:b8:8b:2d:d1:ca:6b:8b:bd:3b:
39:ae:60:0e:51:55:9c:ab:8c:ec:b4:fd:1e:25:57:
9c:8c:13:27:3c:34:8c:98:94:bd:0e:78:6b:ab:a1:
f6:c5:a2:10:f8:46:f6:95:8b:ac:70:ae:90:37:a3:
c2:42:6e:b2:c2:a7:db:b6:ef:52:88:df:83:22:af:
ce:d8:77:65:f2:c7:fe:83:00:50:a1:0c:df:80:3e:
3c:55:a5:76:14:1d:b8:40:01:12:64:06:32:f8:14:
79:a8:d1:60:e0:23:9c:2a:54:e5:32:01:15:27:49:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:01:B2:58:E2:35:20:3C:10:69:F7:EC:2C:83:EB:FA:87:10:59
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b5:e8:27:7a:26:cc:e0:4e:f5:1f:a1:be:bb:1c:64:66:45:
6c:6f:92:2f:3f:2c:aa:39:2c:fd:e7:c7:79:d6:20:b7:9b:f3:
22:dd:5c:cf:ab:db:28:54:96:d7:d8:28:40:15:1a:a1:2d:ab:
94:60:12:71:02:aa:02:6d:e2:60:5b:ca:db:1f:95:cf:0b:d2:
91:c3:8d:e4:2c:45:31:d9:5f:32:bc:c0:8e:c9:d1:40:0e:0b:
03:24:a7:db:79:cf:c6:05:89:f8:06:e1:6c:3d:8d:5a:3c:4f:
e1:43:21:19:e7:a5:b5:79:e5:d6:5a:84:8b:ed:75:99:49:69:
57:8b:bc:56:41:e1:38:ca:55:49:b3:00:51:af:0a:17:c9:d9:
31:81:a3:5e:f4:5a:3b:23:c2:08:a4:e9:42:c6:0a:85:82:61:
9a:d9:9d:ad:3a:14:f2:bd:57:ff:22:eb:bd:32:84:21:2c:51:
92:55:98:3a:81:09:b1:a3:5c:da:5a:43:23:a7:6a:bb:05:e6:
72:0f:44:af:2f:f8:ac:b2:a7:2a:a0:ef:a5:78:c4:74:fb:5f:
67:6a:a8:3f:5a:75:91:6a:84:d5:f0:a9:ee:49:24:5b:e9:c2:
df:d5:c4:82:2a:be:d6:e5:ea:60:43:44:e6:2e:e0:65:73:41:
43:c6:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:20 2025 by rpki-client