Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: riP1yQXRPxxzRa9AqwBlF83fXhoBNoWuQIq4/+uA7PA=
Subject key identifier: BB:EC:F3:4B:67:ED:99:7F:12:BD:E3:8C:63:00:25:86:59:EA:0E:40
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0199FBEA9E8ECD3F89D183884B029C896B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 09AC
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: CRBQIYQbu2OePD8ft3w63FUkeJQ8lJvD+IERyk6B9fE=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:9e:8e:cd:3f:89:d1:83:88:4b:02:9c:89:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=bbecf34b67ed997f12bde38c6300258659ea0e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d9:b3:14:b7:b2:85:53:47:e5:8b:a1:9f:59:
e2:f5:a2:31:b9:51:8b:78:c0:cb:63:45:7f:c9:9c:
77:8f:c2:79:04:32:93:4c:6d:a0:e9:ea:22:df:9d:
95:49:51:60:9a:7c:bb:e3:38:cc:82:3d:96:41:89:
d6:6c:04:79:14:32:20:99:a2:47:9a:a8:4c:80:bf:
98:5c:16:b7:f7:80:97:f8:85:00:36:a1:03:27:ec:
b8:31:1d:0c:30:a0:64:bb:21:fa:a3:9a:2c:64:07:
01:ed:f3:e0:56:fe:da:40:d5:d4:43:d5:80:ca:11:
aa:fb:22:0e:a9:b8:b1:4d:d2:dd:34:a2:11:e0:e6:
41:7e:33:9b:ca:c0:f1:44:35:f5:e7:a0:3a:58:14:
dd:5e:0b:5d:78:29:bd:5e:3c:e0:59:38:32:68:bb:
fb:ed:60:4a:e1:f9:7d:87:08:81:2e:19:b5:f4:05:
93:df:e6:4b:3c:7e:2b:f0:ed:26:21:c6:28:c0:fa:
68:85:ed:2b:ab:70:93:3e:4d:f6:b7:fc:f7:0b:72:
76:ed:e0:08:bb:ed:62:3e:13:65:4e:6a:7f:4e:c4:
ca:91:96:28:ea:df:22:97:1f:cc:06:d9:72:9f:62:
16:18:6d:24:e8:3b:cb:53:05:9b:2d:e5:23:91:ed:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:F3:4B:67:ED:99:7F:12:BD:E3:8C:63:00:25:86:59:EA:0E:40
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:92:ec:ba:7d:4c:3a:68:4e:1a:d4:3e:2e:2f:0a:4f:a5:0c:
8d:e9:f8:e7:4d:9a:f7:d5:32:aa:50:2d:61:95:d3:5e:70:a0:
d5:f1:ed:a1:d2:c3:d0:17:7c:93:16:18:22:32:53:72:a3:01:
19:90:a1:63:4d:d1:7c:03:49:91:c1:b5:e2:e8:91:e1:29:c2:
c8:4d:f9:ba:22:7d:b1:bd:ea:51:57:d2:b8:83:fa:9b:5d:ed:
96:4f:7d:2a:8a:a9:c7:ae:2c:f6:99:bf:d7:ba:17:18:e1:4a:
2a:d6:d5:a4:f8:2d:4a:67:f7:37:a8:c8:54:f6:22:b4:09:02:
88:db:83:1f:f6:c3:98:a3:12:0f:ae:c1:30:5c:c5:d1:8e:86:
40:44:6c:d5:30:2f:43:19:2b:56:9d:da:65:ae:aa:5d:28:4a:
50:bf:14:b4:64:9e:e2:85:28:72:32:c1:4d:46:e1:c4:95:25:
3f:cd:54:a4:d1:29:2e:df:77:83:44:80:4f:7c:a6:0c:4f:ab:
67:c1:8a:91:26:68:2f:42:4f:b9:f3:ad:f9:c5:49:91:e8:48:
01:e1:9e:98:bb:12:88:c7:c3:b5:69:d5:7f:e2:7b:34:3a:6d:
95:88:9f:a6:83:5e:26:11:2f:69:bc:12:8c:4a:f2:20:ad:5c:
f3:2b:43:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:48 2025 by rpki-client