Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: lnpqfUdeP7IBUAMJv5ul+JCRduNoBpwIE87bLJT9S/I=
Subject key identifier: A4:ED:15:9A:E9:28:88:06:54:19:DA:9D:D0:CB:69:8E:5F:89:BC:16
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 0199FDD92D364E113087C92A839D8ED942C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0CED
Signing time: Sun 19 Oct 2025 19:01:32 +0000
Manifest this update: Sun 19 Oct 2025 19:01:32 +0000
Manifest next update: Mon 20 Oct 2025 19:01:32 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: Vrtm8rdF2kLIUaU2JdeU8t1BGmaEiI6BkOeBdgn4W1E=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:2d:36:4e:11:30:87:c9:2a:83:9d:8e:d9:42:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Oct 19 19:01:32 2025 GMT
Not After : Oct 20 19:01:32 2025 GMT
Subject: CN=a4ed159ae92888065419da9dd0cb698e5f89bc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:7e:e9:90:97:90:e1:af:4f:59:33:ea:df:
f8:a9:b5:50:3d:cc:e9:33:23:b3:d4:7e:2d:f5:d0:
ad:a5:a6:52:0a:90:f0:2f:0b:40:bc:1c:58:2f:e9:
4b:5c:c5:2d:05:4b:bb:03:b7:01:72:17:d4:13:e7:
c0:2c:50:89:87:87:fb:1c:50:29:a2:e9:cf:a4:98:
31:3f:0d:2b:0e:be:78:71:fc:24:99:52:d1:43:d5:
a6:1a:db:1b:72:c6:cd:fd:d1:c4:3b:dd:9f:4b:cd:
4d:27:b2:67:f4:3c:bd:68:99:6e:78:21:ed:2c:b2:
3a:89:c6:42:f0:1c:77:67:eb:93:11:8d:9a:ea:0d:
38:61:48:b9:ea:d4:80:5b:61:81:5d:a6:31:b3:d7:
6a:7b:e0:5d:54:2b:b3:a3:55:44:db:e9:3c:e8:dc:
e4:88:9d:f5:9c:75:bd:f2:86:f5:00:aa:fe:72:73:
ed:de:41:e3:82:1c:42:9f:05:2a:ed:21:54:9f:e8:
0d:e2:89:f2:99:7f:3c:ab:70:f9:1c:bd:03:31:b6:
45:63:1e:89:60:a7:a9:72:c8:69:a6:f3:7d:ae:e6:
09:2e:72:9f:09:9a:2d:68:76:ac:d1:fa:f3:37:7b:
5a:a9:f3:ae:de:c7:da:20:ea:51:47:c7:d7:33:d0:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:15:9A:E9:28:88:06:54:19:DA:9D:D0:CB:69:8E:5F:89:BC:16
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:71:d1:04:38:ff:13:2c:77:25:3b:9f:91:eb:bc:77:3e:32:
1a:eb:a9:49:ab:d8:00:18:ce:2f:1e:c7:25:28:cc:7b:ce:22:
fa:61:98:08:75:37:bb:9d:28:8d:ef:d0:d9:3c:44:49:62:a5:
46:2d:62:2a:f7:34:58:77:18:b5:87:e6:af:f9:26:9e:e3:df:
3a:84:a0:4c:3f:3c:bc:21:6c:b2:6f:67:b7:80:75:e7:e7:a9:
4e:c0:26:57:ae:bf:87:f9:79:21:e3:d9:eb:95:d3:44:0b:3c:
fd:2a:2d:06:88:0f:67:e9:0e:7a:4f:ea:6e:fb:5d:e9:f1:b4:
a9:e0:d6:70:58:9f:21:1b:da:df:3e:be:02:95:6d:eb:b4:e9:
52:aa:b8:9a:d0:92:37:47:4c:b4:af:fe:ab:11:9c:f4:14:c3:
ae:c3:27:6b:34:1b:e7:9b:94:e1:01:59:4b:62:49:6e:8c:42:
d7:e0:d4:d8:f4:9b:8a:95:93:08:5a:e3:73:e9:2c:02:8b:ae:
26:f2:be:2e:31:b6:7d:26:d4:ff:7a:53:b8:86:e9:1f:19:a6:
bb:6f:37:66:e6:f7:56:27:a3:59:1b:51:80:5f:79:82:aa:76:
ce:27:c0:69:04:c8:70:c4:a2:0f:d2:49:78:e5:97:9d:69:38:
a9:a5:b1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:19 2025 by rpki-client