Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: 7wXJoai3wHFDNbqlhj3iJmFTTrWcoFBwKJFW5UFW2aw=
Subject key identifier: 35:2D:1F:43:27:23:E7:D4:B8:B6:4B:BA:48:58:8C:4C:AE:B6:97:E7
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 0199FCC675C67BCA9E5CA65A7E4431359135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 047B
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=)
2: 3MrTzqXRqi4qw3h6oaqykX6J0kU.roa (hash: +ClOERLFY4P0cwxaW/Im6eS4rQN8CdS+8xi58ep6Alk=)
3: 4is7oarlUlE_cBHOgTitgHxyrkc.roa (hash: qZVlByTSh1XFAvIhseY4HhxihXTQeYS+WUxMcII1cZU=)
4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: FJyvUs1QaXG4rLMYnlBPDfNpNBE8uMQJqSEDNWJ3gtw=)
5: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:75:c6:7b:ca:9e:5c:a6:5a:7e:44:31:35:91:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=352d1f432723e7d4b8b64bba48588c4caeb697e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5e:d6:03:e7:0c:00:db:2a:8a:17:aa:56:df:
59:1c:33:7d:c6:4a:ac:eb:56:62:79:64:d8:62:1e:
84:a3:cd:a8:f5:a7:72:21:f0:34:22:e9:29:c0:06:
62:48:3a:6c:20:81:63:e8:fc:21:2e:63:61:9c:1d:
9b:81:9a:4b:2c:af:33:8b:35:1d:50:cd:4b:ed:21:
b6:08:24:dd:5f:70:1e:3a:35:b4:36:7e:e1:e5:48:
22:38:df:6a:3e:16:e6:6c:95:e8:76:fd:94:d9:5d:
c5:58:64:90:50:f7:a0:0d:93:61:91:99:ce:c0:a8:
45:c9:1f:04:62:b6:5a:74:68:f1:4e:94:02:d7:77:
af:a9:31:d0:89:0b:3c:35:04:8a:3f:21:0a:8f:5c:
da:d2:ae:d8:77:4c:aa:7a:2c:d2:35:ca:f2:8d:cc:
55:be:20:b2:dc:1c:84:8a:96:19:57:fd:7d:fd:27:
71:7b:91:4e:c2:2d:53:3e:e5:13:f5:87:6d:8b:a8:
f0:d0:0a:84:77:8c:ae:48:4f:02:0a:cc:e0:07:fb:
65:d3:62:5d:32:5e:0e:b3:b1:a4:ce:0c:d7:f8:ab:
7c:8f:d4:5e:d6:40:18:b9:5b:3a:c3:12:16:b9:33:
b3:50:70:c7:ae:b7:e0:92:08:a3:91:8c:39:ef:5e:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2D:1F:43:27:23:E7:D4:B8:B6:4B:BA:48:58:8C:4C:AE:B6:97:E7
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3b:15:55:09:82:73:42:a7:e8:bd:24:30:38:cd:7d:74:71:
2f:fe:27:77:be:5a:a4:d2:c3:31:8d:ca:c8:9b:c1:b2:28:70:
aa:60:de:7b:f1:5f:9f:74:a0:49:13:f7:e0:cd:64:fb:61:f2:
c2:ec:c9:09:59:19:bf:1d:fc:f9:85:1f:c8:11:c0:7f:12:8d:
ae:c4:0e:8b:44:06:c1:c0:1a:52:cf:eb:19:74:4f:8f:bc:4b:
3b:87:5a:a4:59:0a:a7:88:52:39:d8:46:30:96:63:fa:2f:8f:
15:e2:fa:b4:95:65:df:f1:fe:2f:e7:31:7b:13:a8:49:11:94:
0d:de:63:ea:51:ab:f2:31:59:97:00:ff:1c:6f:f4:66:09:3e:
34:ee:13:00:98:20:92:69:0a:d6:ca:f8:18:67:b8:e1:5b:c1:
c9:31:29:d2:59:6d:39:67:ed:bc:4c:b8:3b:48:70:18:eb:c8:
0c:97:36:f8:0d:75:be:88:ad:2c:28:f7:9d:9a:b3:88:7c:55:
f7:89:49:f4:6c:a6:e1:04:63:ab:e9:04:4c:99:76:34:e1:20:
0a:94:b2:6b:95:43:86:2f:9c:0d:b1:39:6e:8a:a4:a1:52:3c:
59:99:00:52:70:d6:00:ea:14:7a:4c:d3:38:2a:ab:d6:10:bc:
a0:f6:75:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:49 2025 by rpki-client