Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json)
Hash identifier: Ep/kimBVs4isBFIB5mNWGBdaB7Cze1XCaJPsxz6fGJ8=
Subject key identifier: CD:40:51:7C:3D:0F:DC:ED:37:1E:FE:8E:48:EA:12:00:76:F7:02:2A
Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Certificate serial: 0199FD343DDABCBB2D44C4231B1E3250A0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 16:01:23 +0000
Manifest this update: Sun 19 Oct 2025 16:01:23 +0000
Manifest next update: Mon 20 Oct 2025 16:01:23 +0000
Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: vg522WfrpF9FlZAM/Ae1uoHrB1+vvXU/gNkvuyZ0ZWU=)
2: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (hash: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3d:da:bc:bb:2d:44:c4:23:1b:1e:32:50:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14
Validity
Not Before: Oct 19 16:01:23 2025 GMT
Not After : Oct 20 16:01:23 2025 GMT
Subject: CN=cd40517c3d0fdced371efe8e48ea120076f7022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:ce:1b:98:bc:29:5b:fd:23:53:00:ee:73:
77:9e:0f:5d:9b:9a:eb:a3:b1:82:c3:01:d9:d3:41:
52:21:ff:5e:8f:73:ac:9d:67:92:e9:d8:fb:0c:5b:
17:07:8f:11:8d:9f:88:08:50:26:f1:14:6a:94:ac:
0a:40:13:bf:da:97:1c:c1:cd:d4:0c:2b:6a:29:7c:
96:ce:1a:ea:13:b3:b8:35:b7:1e:82:be:f5:43:3e:
ec:68:8c:fa:7d:b2:81:ad:eb:f2:57:32:20:a5:36:
0f:32:0f:c2:92:99:c3:e6:10:c8:a4:a9:58:09:8c:
33:c5:9b:33:29:c3:17:73:66:7e:c3:7b:ed:da:90:
74:15:8a:f5:60:3d:e2:43:4c:53:18:7b:48:b1:fc:
64:dc:2d:1f:5a:cc:3d:e3:b4:3a:e4:4f:8b:5b:d3:
2d:8b:0a:48:6a:7c:d7:68:7b:44:bd:80:6c:e8:85:
d4:0e:f6:9b:63:e2:55:43:44:31:3a:47:08:64:c9:
fd:eb:ab:ce:d8:a8:9c:41:80:b4:66:1b:f9:b1:b8:
f2:f5:4c:31:ce:46:f6:54:44:d3:83:3e:49:15:61:
a2:eb:85:97:69:c6:ca:44:b5:77:83:c5:b2:78:29:
ff:4d:b3:0c:31:0f:3e:8f:c6:94:14:fa:1b:16:19:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:40:51:7C:3D:0F:DC:ED:37:1E:FE:8E:48:EA:12:00:76:F7:02:2A
X509v3 Authority Key Identifier:
keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:41:03:6a:e5:05:89:64:7b:57:a0:55:b7:9b:73:28:46:
50:b3:bb:0a:ef:b3:99:c0:6c:d7:0e:49:e7:40:3d:ce:e5:74:
d3:b9:04:a9:36:bb:9b:51:55:63:c9:f4:c4:0d:51:8a:b6:7c:
1e:20:bd:b5:01:33:0a:0a:69:e5:6d:fe:34:91:40:68:3e:66:
8b:91:13:78:61:91:32:de:78:19:d4:f5:5f:43:ce:95:19:bf:
65:b8:fc:9c:40:8b:00:06:ee:ae:da:bd:82:b1:4c:f1:61:6d:
7d:76:6e:84:84:e4:f8:26:50:5a:48:74:82:7b:e8:8c:d3:53:
2d:50:5d:08:fb:02:d7:1b:2d:c8:a4:04:c5:72:26:92:64:4a:
9a:f1:07:bd:5a:d2:4b:8e:f0:1c:15:25:55:75:84:fa:43:e0:
5b:91:94:80:e5:02:26:1a:87:a2:d9:e7:94:71:d6:0e:41:b2:
a6:77:25:96:3d:df:af:c2:23:0a:8c:7f:aa:d8:db:a8:69:b6:
9a:7b:98:5e:5b:db:71:15:06:bb:fa:97:61:24:97:56:fc:3c:
e1:05:84:44:fe:b7:48:44:1b:61:f5:2c:bc:5a:85:9a:5f:52:
04:94:9d:a3:cd:72:6c:57:11:f6:c0:59:ae:90:07:7b:8f:c1:
5c:4f:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:22 2025 by rpki-client