Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: AtHlLsgcv88kojeQoyhy9BqWa9b3dqv+bQ95rMx3ILY=
Subject key identifier: 9E:C5:B1:93:D3:19:0E:35:9D:AF:75:7D:AB:74:C4:7D:D2:34:18:97
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 0199FCFD65C80B2405AA8D0D21CFE248F73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1653
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=)
2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: MLbZ0M/8fV0GgDy7JYBbN5xwWiklgqIbnzL2MAnaYe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:65:c8:0b:24:05:aa:8d:0d:21:cf:e2:48:f7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=9ec5b193d3190e359daf757dab74c47dd2341897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:35:32:37:57:ac:d3:8e:ca:d9:0f:ce:3b:
6b:b5:38:a9:80:f6:e9:83:44:3d:26:36:43:c0:c6:
96:42:0c:cb:96:d0:28:00:8a:17:b3:69:ef:ad:ee:
c0:8a:12:fb:dc:a6:95:73:d2:f8:20:06:9e:3c:d3:
57:06:02:97:62:cc:79:f7:dd:07:aa:3e:fe:63:85:
f1:0f:e2:a6:e8:78:c1:9b:eb:50:f7:96:e1:bb:76:
3a:1c:15:17:e0:08:41:f3:f6:d7:b2:64:79:c6:07:
0e:81:b1:7b:1a:f9:04:7a:82:2d:30:75:8e:48:f1:
4e:3c:91:59:96:21:82:16:9a:28:49:4e:0f:2d:f6:
81:bb:bd:be:c1:26:16:54:31:5f:cb:fe:18:3a:3e:
b4:f3:88:d3:76:85:6e:07:a7:52:ad:0a:f6:9c:f3:
c4:29:2c:17:01:b4:82:07:42:93:ab:eb:17:f3:0c:
36:5b:13:98:d2:b9:a7:29:a6:ec:b0:d1:e6:6f:03:
3a:cd:7b:34:c4:e6:5e:f3:8b:b3:df:5b:90:94:ef:
5b:0b:ff:fe:78:e1:27:4b:46:a8:e1:cf:3b:fb:cb:
75:b0:b1:4b:1a:3b:c1:c7:bb:0d:52:af:65:c4:e4:
9c:38:84:77:06:aa:5a:8c:5e:30:ce:ec:52:73:98:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C5:B1:93:D3:19:0E:35:9D:AF:75:7D:AB:74:C4:7D:D2:34:18:97
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5a:ab:fa:5a:71:35:af:53:ff:9e:25:fe:64:42:ca:7d:7a:
da:2d:62:ed:44:d8:80:f7:d7:24:22:45:8a:91:3d:4f:c8:ad:
0f:21:18:2e:8a:42:9e:a6:7f:e8:d1:55:0d:86:3e:7d:52:2b:
cf:0c:10:22:88:fd:c0:23:62:0b:0d:14:03:8d:bf:4d:ac:9e:
09:2d:72:36:d0:75:72:3b:04:a2:6d:d1:54:ac:e3:49:27:59:
e3:11:98:c2:29:82:50:b5:e6:83:c2:50:3a:41:18:e8:eb:b1:
6b:3c:fe:68:9e:45:21:20:ed:83:79:a8:fd:90:3e:0f:9b:d5:
fe:3f:bc:f6:a7:5b:0b:02:93:f2:34:e0:74:4b:fc:19:01:79:
9f:40:03:cc:c1:a9:74:26:e9:bb:b1:16:a6:d2:ea:18:f7:ff:
d5:3c:aa:61:60:ea:5f:56:4c:12:02:5f:07:ae:70:b7:11:79:
9c:e1:48:d9:73:82:cd:69:85:2f:74:0d:21:70:74:7a:3e:c3:
28:a9:ee:ad:2c:c5:39:b3:14:ba:55:d8:1c:00:ec:87:21:fc:
e4:a1:36:fd:4d:fc:c9:63:be:09:d9:6c:f7:b2:1a:a6:84:40:
9f:f8:81:80:20:8c:56:dd:97:27:38:1b:12:7b:fd:c1:ef:67:
81:d1:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:22 2025 by rpki-client