Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: 0wt/TkoqcmK7pY9pOdjTOUusl8nE94+vnobrTaWy0GM=
Subject key identifier: F2:86:1E:98:2E:1A:7A:9B:85:FC:B0:C8:8A:13:19:A1:0D:A9:F1:88
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 0199FD344E974EAFA698366BB1AF9C8500D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0ACB
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: gsY1qNWFPpiJ5tPwwEsa9W9esOHu/X3jAHFx87DDS80=)
2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4e:97:4e:af:a6:98:36:6b:b1:af:9c:85:00:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=f2861e982e1a7a9b85fcb0c88a1319a10da9f188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:3b:de:f2:1f:79:fa:5f:54:ca:87:fb:a4:
46:a9:73:6d:5e:8e:f7:47:d4:cc:ae:38:f6:20:24:
15:d9:40:49:35:1a:dd:8d:da:0d:4b:2c:1e:9d:cf:
50:7a:11:7b:1d:aa:cf:c3:55:0c:16:5f:38:9f:bd:
2a:7b:b7:d0:85:cd:41:05:6a:b7:0e:fc:70:e8:31:
92:50:46:42:5a:ea:02:f8:1a:a4:12:c1:d1:c5:5a:
31:59:74:68:95:1f:84:45:e5:a8:2c:41:0c:9d:8d:
d1:2b:2a:f3:f7:7a:7a:44:9b:cf:8e:3d:6f:ae:72:
27:55:c2:4e:d0:59:7a:29:83:61:5f:9a:24:87:25:
98:62:96:0c:a7:d0:dd:0f:31:bf:d5:05:52:db:25:
60:f0:b0:b8:8c:4f:bb:65:7d:74:41:6c:2a:a8:48:
5d:d4:de:0a:70:9b:9d:f3:44:c8:2b:d3:e1:df:45:
fb:47:c5:21:ac:69:a9:02:df:80:bb:61:32:dc:df:
3d:47:79:08:c9:a5:60:8f:8d:5c:29:65:aa:dd:66:
4c:f0:93:51:2a:cc:95:c8:78:d5:b3:a9:2c:60:b6:
80:5e:b2:5c:f7:52:4d:b4:5d:c2:87:70:77:54:ca:
c0:a9:6f:3e:7e:1a:a5:a6:46:3e:bf:31:c6:8e:e5:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:1E:98:2E:1A:7A:9B:85:FC:B0:C8:8A:13:19:A1:0D:A9:F1:88
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:44:23:85:b1:04:6f:d5:51:4f:cf:32:74:a2:c6:af:12:44:
75:af:d4:13:94:f7:a4:85:8e:b9:68:eb:70:a8:48:5e:ab:2f:
da:d0:01:16:04:8a:63:82:76:be:fe:b4:53:dd:13:63:02:ff:
55:69:49:7c:27:ad:59:62:73:9e:69:f8:1a:c4:dc:63:0a:99:
a3:7c:9b:90:3f:3d:29:ea:8b:d8:21:16:0c:c7:e4:12:3e:68:
a9:a0:63:e1:4d:9d:75:b7:e6:ad:4e:4d:33:93:77:5f:92:26:
79:ff:09:37:8c:ba:4c:9f:02:a9:96:46:0a:59:41:73:52:73:
ef:80:ac:f4:d0:89:e5:b1:86:0a:71:92:f7:c6:6f:62:94:eb:
54:8b:1a:95:13:5d:10:79:bb:ec:ca:b2:89:39:81:49:73:2f:
b6:69:20:7b:81:bf:a4:60:88:82:70:a1:98:53:9a:3b:a7:08:
96:6d:88:a5:a2:66:14:01:b0:fd:32:18:b0:d8:4c:44:c8:08:
c8:2b:35:cf:19:5a:5e:4b:fc:af:fb:d9:e2:aa:dd:1f:6c:9e:
e0:66:48:5d:bd:63:e2:f7:67:fd:d2:ce:b5:e7:f8:a4:2f:98:
3f:3d:7a:26:e0:be:cb:ea:1c:c1:bd:55:ca:1c:b4:d0:6b:d8:
7c:34:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:45 2025 by rpki-client