Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: +IX8LewJEzbHEqWBjxbLOLLsVbyThWHaHAU6NA8MTq4=
Subject key identifier: D9:87:9E:6A:42:D7:12:20:A3:5C:3C:3A:3A:E2:3A:91:74:EA:70:B0
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 0199FFC80DABF3AF9F3319C4775520E57CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 1250
Signing time: Mon 20 Oct 2025 04:02:04 +0000
Manifest this update: Mon 20 Oct 2025 04:02:04 +0000
Manifest next update: Tue 21 Oct 2025 04:02:04 +0000
Files and hashes: 1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: KxSYi5shZyuauoInAZqRIvSKtZXwYZM3x4WwHubdnKs=)
2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:0d:ab:f3:af:9f:33:19:c4:77:55:20:e5:7c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Oct 20 04:02:04 2025 GMT
Not After : Oct 21 04:02:04 2025 GMT
Subject: CN=d9879e6a42d71220a35c3c3a3ae23a9174ea70b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:6c:32:8e:ab:33:1b:80:64:bd:5e:67:ce:
db:23:d2:32:23:6d:52:5f:cd:f5:b4:65:2f:94:41:
8b:c2:1a:2e:c0:55:40:b1:58:5c:72:d3:d3:f7:b8:
8a:89:e1:a8:15:8d:38:1e:29:2e:7e:55:f2:7c:15:
73:52:56:02:ab:0e:ec:57:89:e3:95:29:4e:1d:d3:
06:bb:82:b7:d4:25:bb:4f:bc:ce:13:81:5d:b1:eb:
30:78:bc:5e:14:85:94:66:66:40:e3:24:4e:f9:00:
1d:f3:bb:d6:3a:c2:90:08:16:80:9a:38:77:b8:dc:
c3:20:64:c8:9d:60:a0:53:85:d6:a9:e6:f3:0c:f3:
3f:e0:0e:df:ef:c2:ee:5c:3e:9e:65:b3:91:df:c9:
c8:01:c4:50:3f:9b:06:4a:b0:cd:e7:77:eb:1b:a2:
4d:e5:e6:13:f1:36:c6:4b:4d:2c:de:ed:f5:10:90:
52:a9:e4:3e:6c:70:c2:c1:27:f6:28:a2:4c:59:0b:
c6:53:8d:12:d3:e0:ac:11:da:71:a6:a6:5a:9d:fe:
d0:37:da:99:ac:ee:8d:8d:00:95:a7:4c:97:91:4f:
b0:66:7f:5f:9f:89:51:d7:9a:d3:54:f7:fa:38:d7:
af:c8:33:8c:7b:cc:70:ef:1a:ee:bb:2d:bd:71:31:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:87:9E:6A:42:D7:12:20:A3:5C:3C:3A:3A:E2:3A:91:74:EA:70:B0
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:26:3f:ec:3c:36:af:09:c8:d3:bf:a6:fa:3f:17:48:a2:13:
e4:87:1a:f5:3c:42:41:37:75:44:42:fb:44:3e:ca:ae:66:62:
a5:ae:a2:8a:a3:55:88:b8:da:34:d8:b8:69:e7:af:0a:6d:b2:
25:c7:31:a6:5d:be:52:f9:17:64:2d:91:71:49:25:33:b7:33:
a5:dd:f3:29:24:72:64:77:21:84:a0:53:fb:09:7a:db:0c:eb:
33:76:6d:70:0d:49:ab:b7:e6:be:7c:01:67:8c:06:87:8f:2f:
6a:44:d5:f1:b7:39:5e:e6:a6:fc:b9:6c:67:69:fc:11:29:76:
37:52:48:b4:a0:ba:4c:c6:55:d5:04:77:86:22:4a:e2:ec:d5:
5d:4d:35:28:d7:d4:15:de:d4:a3:69:17:56:fe:d5:cb:1d:93:
d1:8a:f0:ed:48:2d:de:02:31:9c:db:cd:78:6f:0b:8d:2a:54:
45:11:93:49:32:1a:09:20:07:c0:e4:ec:c1:56:b8:ac:d1:a0:
62:ad:80:48:69:54:aa:b8:26:ce:8f:ab:8d:c9:b4:da:32:52:
fa:8a:e2:88:5d:06:78:d3:0a:bd:13:ae:2f:77:c2:65:d6:d3:
0b:65:3a:82:f2:46:9b:b5:b7:f7:47:33:65:dd:66:d4:8d:8b:
06:27:16:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:33 2025 by rpki-client