Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: WYYGd+ym4aWIhTGvTzk9h3hUUj67HJx60eAQKa0ACQY=
Subject key identifier: F9:E8:78:FE:E4:49:7C:CC:BC:9A:F9:34:41:AE:89:47:88:E3:6B:B7
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 0199FC8FBD981FFAD7F31E25FC23FF8ED8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 01A1
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: XFt9MvwX5wlj0OhnAQrxEwH2RxqI7KNtGWzAJsCy9cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bd:98:1f:fa:d7:f3:1e:25:fc:23:ff:8e:d8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=f9e878fee4497cccbc9af93441ae894788e36bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:23:02:4d:f6:b9:9c:b6:ec:01:b7:b9:c8:
63:4f:db:46:ba:47:1a:28:ad:1b:30:ac:9a:04:99:
11:37:28:55:40:e5:58:ff:79:b1:e1:03:88:d0:d2:
5b:7b:3c:6f:b7:99:a0:01:15:d9:ea:ba:cf:f1:60:
a7:3c:6c:f3:f7:fc:c3:4a:2f:62:01:74:b3:43:dd:
23:47:12:f4:f6:4c:66:c9:70:73:4f:75:0b:b9:4d:
aa:5e:61:4c:e7:d5:e1:2c:c4:55:87:20:47:3f:49:
0a:b2:26:20:c8:45:59:ce:22:4f:04:f7:40:5e:1c:
40:9d:10:95:3c:20:8c:db:ce:84:68:ac:e4:3b:d0:
9c:62:5c:ce:6c:93:d9:a4:03:cf:44:ea:ef:cd:38:
8d:b4:ef:b3:5e:a9:71:5d:fa:5e:92:ae:12:50:d6:
42:16:82:b6:d9:a8:6f:5a:95:b0:f2:f4:32:cb:7b:
df:90:f0:51:8b:36:ef:4e:3e:9a:7c:49:99:3f:a1:
2a:46:bc:f8:d7:bc:93:e9:d9:1a:7c:a4:0d:68:56:
78:65:d3:ac:d4:8c:09:95:34:ab:60:b1:d2:c2:69:
fe:db:b7:db:7d:7b:a6:b1:68:a0:e2:5e:c8:89:21:
db:d3:34:7a:4c:c0:6e:34:36:a2:b7:52:70:c5:8c:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E8:78:FE:E4:49:7C:CC:BC:9A:F9:34:41:AE:89:47:88:E3:6B:B7
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f4:51:85:0a:54:d9:0e:a7:43:f9:3b:05:0e:de:f7:f0:75:
0f:a9:f0:5c:36:f6:68:a0:be:cf:1b:3f:17:3f:1b:ac:0d:40:
6e:90:cb:f8:4f:4b:f5:5e:87:93:85:aa:07:71:63:8d:3c:a5:
76:11:19:91:a5:69:a3:12:b9:ab:14:6c:1e:25:49:a6:6a:7a:
f6:82:f8:57:c8:73:d8:92:63:0b:e6:1e:c8:d7:a1:87:e9:3b:
7c:36:ac:56:90:9f:3c:5b:50:d1:41:79:6d:56:54:f5:58:17:
24:fd:7a:4d:58:91:6d:c5:28:7c:38:eb:56:99:f3:f6:bd:67:
8c:63:0c:d6:9d:da:b0:4e:6f:e7:21:2d:77:90:8a:45:12:04:
1e:ac:35:2b:52:d6:f2:92:98:61:fa:1d:16:4e:c7:d2:39:c7:
fd:78:61:20:b0:2d:78:2b:f4:81:b2:8f:5b:db:3d:a6:85:5c:
dd:72:c4:f9:43:52:55:e9:a7:01:1c:b2:2d:f6:f4:75:00:3a:
b6:fc:de:0a:7f:cf:61:1a:e8:09:70:b2:24:90:5d:c2:f1:34:
63:fa:1f:47:99:e1:60:5d:64:14:55:9b:eb:76:33:4a:f6:17:
86:fa:77:12:a8:9e:ba:c2:fa:74:dd:a3:75:9d:c3:ed:e8:a8:
eb:0d:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:34 2025 by rpki-client