
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
File: XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft (raw, json)
Hash identifier: dqyBdpNWQ8FM/wEA7YrVXOcCbj0/ioqIEWZ6YIOEtLs=
Subject key identifier: 48:38:28:8C:67:A1:F9:19:21:49:B0:BD:5C:BC:12:3C:B7:09:F1:FB
Authority key identifier: 5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
Certificate issuer: /CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Certificate serial: 0199FC58BA8B07FA5768A3C26C6C58462C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
Manifest number: 117D
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: Cla5c1NehU4owZxYbWxe5QAstj0.roa (hash: kJV6jFD/Rf8rBVTNLGsW3TqMX9jv4tuD1CIR8TuTHbQ=)
2: XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl (hash: 2Qw32LGLAUWi5qUGaYUIdj4zzRHWV7Acdm1/3083diQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ba:8b:07:fa:57:68:a3:c2:6c:6c:58:46:2c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6373f5df99d821dcb57c7fb9202fb4686e5d61
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=4838288c67a1f9192149b0bd5cbc123cb709f1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:e0:d8:1f:70:7e:61:46:21:f3:ba:dd:99:
a8:54:1b:2b:f2:b5:bd:61:6e:7a:b9:86:7f:06:c0:
e8:39:c2:6f:13:98:b8:40:f0:59:e7:fe:0d:72:ee:
ed:3f:71:ef:8f:98:3b:3a:27:46:f5:0f:63:e6:d6:
6d:51:ab:15:d3:3b:06:89:ea:01:b5:86:28:bc:f6:
69:c0:e7:f0:c7:10:3f:17:6b:bb:49:35:4a:8f:dd:
8b:7b:a0:72:76:9c:a1:ae:91:d9:29:0c:b1:2e:c5:
df:c6:4d:dc:0a:75:58:05:fc:99:fc:af:b4:af:77:
52:77:70:1a:16:1d:57:76:0c:47:d7:57:1f:2a:16:
9f:b9:a3:7a:68:e8:92:ba:ce:8c:b2:22:92:50:fd:
93:fd:87:55:a7:5e:f1:4e:fb:e2:a6:ad:12:49:40:
10:09:52:73:9f:4f:3a:7c:79:58:90:a4:f6:b0:40:
9f:c1:c7:69:1a:02:fc:37:be:87:8a:21:99:2c:e0:
8f:52:98:9f:a0:ef:7f:35:0d:f6:a0:15:b1:38:1b:
37:be:85:aa:d7:bb:26:66:6d:9d:74:17:7d:59:b6:
a1:40:a9:9e:80:b4:fa:d2:69:ef:0f:73:f9:33:1b:
8a:e1:a8:d0:bb:8c:7f:60:ca:43:04:a0:bf:0d:03:
cc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:28:8C:67:A1:F9:19:21:49:B0:BD:5C:BC:12:3C:B7:09:F1:FB
X509v3 Authority Key Identifier:
keyid:5D:63:73:F5:DF:99:D8:21:DC:B5:7C:7F:B9:20:2F:B4:68:6E:5D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWNz9d-Z2CHctXx_uSAvtGhuXWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0c9128-a043-478c-9920-ad215285c864/1/XWNz9d-Z2CHctXx_uSAvtGhuXWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ef:07:e6:f4:69:d2:a2:08:5c:47:f9:11:24:fe:c6:b7:88:
46:f6:ae:53:36:d3:18:57:24:45:cb:c6:37:db:e9:54:1e:e7:
16:c3:cc:98:b8:cc:b1:40:be:3c:09:2f:6d:91:c7:dd:6d:a8:
40:4b:a0:4a:59:ab:d0:04:17:49:63:c6:6b:d5:01:84:9c:cb:
d6:c2:24:71:94:df:9f:db:53:38:67:ce:22:4a:3c:44:89:dc:
45:f4:f0:fc:6a:5e:1e:bd:01:e2:9e:4c:ac:28:31:3b:47:42:
d1:30:36:4e:a8:db:df:3b:12:f8:aa:e2:08:55:c0:ae:68:6a:
d8:d1:20:c2:cb:7b:4b:90:fd:48:c9:cd:b4:30:82:62:c8:e2:
06:2e:c6:09:65:3b:81:7a:e2:96:8d:c8:bb:7f:ca:ec:6d:be:
d2:37:08:4c:96:b1:11:75:77:f7:60:b0:1d:61:5b:04:30:f7:
54:7b:c4:6b:de:29:ce:7f:12:72:5a:0c:c7:a2:9a:f5:8c:0d:
c9:46:43:58:ef:08:d5:23:6a:bc:bf:b0:f1:b0:42:12:ab:c9:
a5:1d:fb:62:aa:96:a5:d0:02:7f:ce:c4:51:0f:33:07:39:99:
d9:e6:ce:48:4a:8b:c2:0c:9f:03:28:9f:d8:51:99:2c:29:dd:
8f:f5:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:10 2025 by rpki-client