Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json)
Hash identifier: U/96XUw6+BLI+TGTpSkOnYypgqOI7PNa73Zib5L1psE=
Subject key identifier: DE:B0:DD:2A:1B:2E:89:2A:8C:7B:96:62:91:DB:0E:91:BC:8E:B4:B2
Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Certificate serial: 0199FCFD207636B1C17CCD8C2BE03F928FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=)
2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: 8vo3UqD9oGkHPsZRWvMpOyK0IqCHlMtee1TwD3yMMyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:20:76:36:b1:c1:7c:cd:8c:2b:e0:3f:92:8f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=deb0dd2a1b2e892a8c7b966291db0e91bc8eb4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:61:fe:87:ad:89:34:2c:93:00:8a:54:2e:
d7:26:58:a3:14:5c:0e:88:00:42:ff:81:5b:f6:13:
28:d7:21:17:59:e0:26:a5:4d:6e:c2:bd:c3:c7:9b:
c6:1b:53:de:a0:71:09:05:88:1a:3c:d8:35:b6:cc:
c8:7b:4f:14:94:4a:d4:8e:f3:9d:ea:f8:c8:71:f8:
bf:13:14:88:95:22:a3:ac:49:0a:e1:d8:00:a2:61:
32:cc:76:4a:bf:36:01:dc:46:9e:18:b8:e2:5e:b0:
32:fc:d2:a4:da:f5:62:4e:99:7e:e5:0c:d3:8b:25:
49:82:47:eb:85:fa:e3:99:2c:09:06:00:6f:7c:ee:
45:ae:44:ff:73:7c:4e:b6:96:54:04:03:94:bb:4f:
a7:9f:31:71:a8:ba:8c:40:72:6c:dc:7c:b2:52:e3:
fc:1d:a0:86:03:36:44:f6:a8:28:26:8d:d9:e5:37:
b1:2b:4a:14:23:e5:20:1e:16:b3:a7:a4:ff:1f:0f:
1a:11:26:f1:b8:31:55:9a:e9:06:7b:b2:16:1f:0b:
23:cf:58:e8:20:93:44:0d:b4:83:3d:4a:8f:a9:33:
97:51:52:83:c6:d4:60:a7:bc:d8:e5:db:b6:b2:f8:
f0:7f:e8:92:f6:c7:ab:33:ac:5f:d5:f9:4c:64:0a:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B0:DD:2A:1B:2E:89:2A:8C:7B:96:62:91:DB:0E:91:BC:8E:B4:B2
X509v3 Authority Key Identifier:
keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:58:c5:50:c4:ba:f7:c9:30:95:cc:9b:86:15:8b:61:97:9f:
35:20:7a:22:9a:eb:e8:70:6e:9d:0c:a3:76:00:6d:8a:82:da:
d0:d3:58:3c:53:86:26:1d:ea:f2:f1:fa:e9:e7:c2:09:13:19:
8d:c0:39:5b:45:6a:8a:bf:30:fa:d0:73:2d:63:88:16:fb:41:
03:ce:37:70:39:ff:71:24:bc:92:a5:45:6d:43:4a:46:47:46:
1b:90:aa:70:1d:1f:8c:b0:6e:44:74:38:20:91:b3:30:56:2c:
f3:54:ad:7c:87:89:45:17:1a:bd:30:75:6a:31:bf:ec:a7:35:
c6:96:e4:41:80:2a:31:63:77:2b:2d:40:0d:79:e2:39:76:59:
f6:05:f4:92:32:79:d6:01:89:c1:b6:d7:73:55:22:ef:1c:35:
55:70:19:3d:ec:59:91:f6:4e:7d:56:ca:9f:2b:4b:33:aa:40:
43:cb:a0:92:10:3c:c9:d8:b2:7f:a6:f5:c8:f9:82:c7:62:7c:
12:a7:74:f7:c4:25:b8:0d:14:d0:ba:7d:cf:32:e9:b1:a7:93:
73:05:b8:fb:75:fe:08:8e:e5:6d:8c:9b:19:29:9c:d9:e2:3e:
e2:5e:36:0b:13:17:2a:df:7d:80:e3:9c:e3:6e:85:26:b8:6b:
c2:64:e1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:27 2025 by rpki-client