Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: Omz2yG85RLTc2hqfDgH3OAnnMAIHXieshSp1sm6PNA8=
Subject key identifier: AF:A7:40:DD:D0:FC:75:04:C4:1F:D2:7A:D8:DD:0D:A7:C1:A2:4C:EE
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 0199FB7CB07DC047EA0D86E984305ABF18D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 148D
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: aeeWWDBze6udW/Wd/cljxslWFA8heYK1sfhPtPZMJJU=)
2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b0:7d:c0:47:ea:0d:86:e9:84:30:5a:bf:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=afa740ddd0fc7504c41fd27ad8dd0da7c1a24cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:88:82:6a:a1:26:63:59:3e:6c:a0:69:70:
c9:2f:01:f2:6f:87:b5:1f:9a:0e:54:4e:2e:79:7e:
b7:f7:f4:ba:6b:cd:39:ff:9c:93:fe:d0:53:87:83:
1d:88:91:f8:e0:97:08:98:16:cf:c1:52:b0:de:12:
4f:dd:63:78:b1:0f:1e:44:e7:86:14:36:c0:71:7e:
5a:b1:85:a1:98:4d:12:81:b7:1b:2d:1f:5e:b0:e0:
46:64:65:70:01:13:e1:d3:02:26:27:f1:b5:12:36:
35:a1:da:a3:d3:66:bb:3b:60:d0:dd:f7:4a:76:86:
dd:0b:d8:c1:26:2b:6f:80:5f:ac:58:7f:72:41:fa:
5e:f3:82:4d:d8:04:b3:3d:7e:fe:50:98:d0:fa:c4:
dc:0e:c8:60:2a:e9:24:a8:17:4e:2b:49:24:4b:1f:
07:ed:57:8a:3b:34:86:d7:4e:a3:6a:1d:63:c3:c1:
99:c2:23:3f:97:04:0b:3d:23:a8:bf:61:6d:b6:2a:
dd:1c:9c:e9:d1:c9:fb:c3:a7:12:c6:23:07:21:2a:
a1:88:35:03:e5:3d:92:eb:64:5f:e0:96:b5:c1:6e:
16:39:16:ab:2e:9a:ef:3f:fa:e4:f2:31:b3:23:3a:
65:1c:33:b3:0b:74:c4:e9:34:c4:8a:c5:16:31:74:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A7:40:DD:D0:FC:75:04:C4:1F:D2:7A:D8:DD:0D:A7:C1:A2:4C:EE
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:76:f5:0a:5f:fb:66:85:fb:f1:6d:7c:20:a0:4c:99:cc:24:
56:c1:b8:f4:5c:09:8b:59:bc:5a:95:5d:5b:34:47:c2:2f:88:
4d:a7:fc:f4:0a:27:d6:16:26:99:59:05:05:93:ad:cf:ae:24:
75:4a:db:a3:a3:c9:e9:3b:24:ea:f1:72:9b:ce:40:5b:57:41:
cc:13:a8:ae:70:19:b3:ae:27:16:f4:21:41:e7:25:6d:48:bb:
d0:28:96:7e:0a:fc:a7:c7:68:0a:70:66:c6:12:5a:14:d2:86:
57:e0:2a:a8:a6:36:36:ed:b9:dc:5f:0d:34:3b:d8:fd:7e:d8:
07:ac:f0:98:1c:5f:e8:fa:bb:fc:e0:b9:44:be:b6:fc:79:94:
99:e8:6b:52:b2:3c:2e:87:af:6f:dd:78:18:7b:f6:a9:c4:d5:
ec:10:20:46:98:e9:f2:5b:68:5f:77:ec:62:a8:70:d8:a3:6d:
0d:9b:5f:1e:e9:3d:0f:5b:1d:b4:76:0c:04:7c:cf:dc:87:f5:
78:da:b2:5d:1b:40:a4:b2:35:7a:82:9f:7f:a4:5c:e3:1c:94:
7f:90:0c:78:99:09:a0:5f:87:36:56:26:68:0e:07:6d:74:d1:
85:c1:04:27:7d:3e:c1:5e:47:cf:c1:37:49:ca:17:b4:90:32:
cb:f0:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:47 2025 by rpki-client