
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
File: XS8h5aT74BUgX2zviK-uGc0GphI.mft (raw, json)
Hash identifier: 32gpZu6gncE9qJsI/ov+DnfyQfN8uxulEagAs77lRgQ=
Subject key identifier: 23:C1:91:BE:37:20:6C:7E:90:52:56:E0:FD:56:B2:75:32:A6:89:BA
Authority key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Certificate issuer: /CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Certificate serial: 0199FBEB056AEA0FE73C9E03B8BAF734419A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: 3s8R9sRZRUNgHAycT7iMGkpoqeI.roa (hash: LAbsSBnsWLcRul98ZPfO4H8aiix0SGvDORk1UP26ViE=)
2: XS8h5aT74BUgX2zviK-uGc0GphI.crl (hash: F9NwVSWT/qKOwO8eRI7V0Im1GA51wN1w22Fb7ztFWN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:05:6a:ea:0f:e7:3c:9e:03:b8:ba:f7:34:41:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=23c191be37206c7e905256e0fd56b27532a689ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:75:65:40:12:94:90:6f:7e:ee:a9:1f:2d:
b2:30:9c:05:bf:de:e0:28:9f:0c:cf:b0:10:bb:bd:
17:0a:0a:f0:c2:8d:53:93:86:0e:77:fd:32:06:d3:
b7:5f:d7:e7:c5:aa:eb:73:59:d1:5e:3f:4c:e6:1c:
14:d1:25:82:56:c9:22:5b:a9:63:4f:c2:bf:d7:6b:
9e:bc:e6:7c:f0:e0:e0:c6:24:81:34:f1:18:7d:04:
80:90:8b:db:e9:80:84:fb:e3:00:99:b0:de:98:4c:
6a:73:4b:87:d1:7c:ae:f9:2d:c9:92:d1:98:33:37:
67:4b:42:5c:91:19:ee:18:18:14:a2:df:1f:d3:53:
dc:49:cb:1e:dc:19:7f:a0:7f:b4:6e:1e:e9:f8:ff:
ab:2c:86:0d:a5:00:28:26:23:6c:42:ae:bf:99:1c:
b1:cd:14:31:a3:4e:cf:f0:d3:63:c5:89:2f:ff:72:
af:3d:c0:01:fe:2c:2d:11:77:e0:4b:ac:42:f5:15:
53:6a:fc:b2:fc:91:cf:28:2e:ac:b6:31:02:ff:55:
44:3d:cb:bb:b4:f9:d8:b7:95:0c:b8:c2:55:56:4c:
a8:df:1e:dd:b5:f0:2a:2c:d1:7f:9e:95:98:35:b9:
66:d9:24:49:fd:67:b2:b4:8d:93:97:d7:ee:19:fa:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C1:91:BE:37:20:6C:7E:90:52:56:E0:FD:56:B2:75:32:A6:89:BA
X509v3 Authority Key Identifier:
keyid:5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bc:ff:7c:cd:34:f5:80:15:ca:d2:96:2a:d7:e0:2f:20:ff:
ad:28:a9:18:76:97:ef:41:32:ac:0a:b6:67:96:da:97:cc:a4:
81:e6:95:2e:70:10:7a:b5:fa:e0:6f:c5:72:d8:f1:62:c7:46:
8d:3f:b4:76:0b:98:7f:c9:72:0d:bd:26:5f:27:d8:30:1b:d6:
79:23:2a:58:0b:af:65:14:1f:f5:ef:41:a8:06:ff:8c:68:8f:
18:33:fd:71:52:4f:8f:ab:32:8a:c1:a8:3d:c9:6d:5a:c1:fd:
91:26:ec:5f:05:4a:dd:c6:06:77:ce:0a:3a:48:bf:97:c0:2d:
ca:17:56:de:f1:1e:3b:db:8f:b4:97:2e:34:a7:ae:e0:2c:a6:
a1:fb:f1:a9:84:bd:04:f0:72:84:f5:f2:dd:88:66:c2:85:19:
1e:cb:1c:9d:84:b0:af:08:8c:26:ca:d8:56:18:ef:37:23:a7:
9c:22:52:e7:fd:bc:99:d1:b0:49:69:9b:7c:ea:ed:2e:67:98:
70:4a:3e:de:2c:93:0b:01:1e:e2:70:e2:49:ee:2f:9e:f0:aa:
40:62:78:cf:b1:53:75:b2:92:10:f0:7e:57:b8:bd:c6:bd:56:
88:d1:9c:7d:e0:95:82:86:62:c3:48:a7:d3:ee:4f:f3:5c:c8:
6b:a0:2a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:19 2025 by rpki-client