
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: wfa6c2pDi29mz8BffRr4RsFMdLf70K3V4V+In9TKfQo=
Subject key identifier: 89:B9:73:8C:C3:C5:03:64:CB:21:13:50:B4:A4:30:04:D3:34:ED:01
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 019A00A3553B36935AF51FAB55EBBD892BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 05C4
Signing time: Mon 20 Oct 2025 08:01:35 +0000
Manifest this update: Mon 20 Oct 2025 08:01:35 +0000
Manifest next update: Tue 21 Oct 2025 08:01:35 +0000
Files and hashes: 1: 02wqSv6S3QfGQclsARr7QXNvdWI.roa (hash: blfoT2HbR+GD9/4BT0/OCiD+iemp7TQrPXABrjQFnJw=)
2: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=)
3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: gq2Hpyh5b4Ch5gsqtlN+WJrPzgsjpIkZC7KBOrgfJLw=)
4: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:55:3b:36:93:5a:f5:1f:ab:55:eb:bd:89:2b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Oct 20 08:01:35 2025 GMT
Not After : Oct 21 08:01:35 2025 GMT
Subject: CN=89b9738cc3c50364cb211350b4a43004d334ed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:39:49:8b:d1:d8:e2:0d:d5:94:e2:51:3f:
e5:d7:f8:bd:84:db:2b:bb:c3:c5:65:18:4a:d1:8b:
50:29:d3:07:25:d8:8e:ec:20:ae:6e:0c:21:90:4c:
36:d4:19:ef:9e:e5:7e:a2:06:b6:38:94:d1:07:6b:
a2:0c:c6:3f:fa:16:58:79:1c:3f:d3:30:8b:4f:c0:
8f:3c:4b:a3:cf:9d:11:e4:5f:02:0c:de:8a:83:d2:
a1:bb:5f:1c:9c:3e:f6:73:1c:57:17:f2:d5:94:f8:
9a:35:de:c1:0f:bd:4c:dd:54:95:8d:f6:58:5c:1a:
3d:f6:e0:c2:bb:0d:b0:29:f6:dd:72:42:ad:20:4b:
ec:10:19:47:10:7c:c1:4b:54:ed:54:4c:e0:0f:64:
52:c8:06:37:10:9b:80:d4:87:40:2a:08:c9:d5:7f:
2b:a7:93:a5:e0:c2:91:7f:63:90:e7:7d:95:6e:d0:
d7:c0:ab:96:48:f7:52:11:22:d6:63:0d:7c:5e:08:
e4:96:ca:05:b1:b0:38:83:43:cd:58:3a:82:f9:eb:
1b:db:81:e6:eb:c3:c9:33:48:0b:d8:22:1a:f1:ae:
4a:db:38:1d:03:a5:f4:40:bb:24:b3:8e:26:4d:e3:
c7:1a:d9:15:17:e6:e8:f7:ec:18:62:00:ae:45:6d:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B9:73:8C:C3:C5:03:64:CB:21:13:50:B4:A4:30:04:D3:34:ED:01
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ad:0e:5c:d0:b3:06:12:a0:44:22:d8:10:86:88:4a:8b:a4:
33:8f:dc:a8:6f:54:93:ea:bb:85:2f:c4:fd:7c:1c:51:54:b6:
f5:33:3d:7e:a4:e2:85:57:c5:e6:fe:6f:1c:45:02:44:62:49:
4a:21:21:3c:74:4e:33:24:08:48:90:c1:6a:46:ae:93:d3:4e:
9d:db:dd:27:c6:63:8a:af:91:76:4f:ca:5d:22:c2:3f:21:4f:
13:04:fd:da:9f:e2:a6:64:99:76:01:79:a6:c4:5b:54:f7:ef:
4d:9a:c9:6a:ad:4e:c0:5f:96:2e:c0:cd:c0:76:a2:49:f7:9b:
75:bc:b1:40:e2:fa:b2:9b:5e:a9:27:bb:17:dc:a4:c1:5f:5f:
be:03:95:da:c7:6f:1c:2d:b5:fa:96:7a:3b:98:f8:1f:75:8b:
a6:ef:f6:31:53:7d:1e:fd:7c:8f:a8:86:95:df:97:7b:7d:e2:
33:ff:e2:8c:08:a9:f8:59:94:47:d6:d5:82:0b:be:b0:68:6d:
06:22:01:85:63:be:b0:d8:6a:14:20:f3:01:20:c8:39:43:92:
de:1d:60:3f:ad:d2:26:fd:06:74:8a:55:05:62:9c:15:59:84:
55:f9:1f:9c:f4:b1:82:79:6a:40:5d:72:00:41:32:24:84:fa:
7e:33:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:15:51 2025 by rpki-client