Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: ieGtwNdWdM4igRd7DZiweM7JTtCddS6kY1Nfkva8F/M=
Subject key identifier: 92:40:AF:83:21:6A:BE:A0:8B:06:4C:A4:70:7C:22:30:CC:CF:C1:86
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 0199FDD9497548C6F5483A6BB51EEF883245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: 6W6QrvBktRbHXV+W6/6PNT1wIMCO1i1IgPg+MDFTemM=)
2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=)
3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:49:75:48:c6:f5:48:3a:6b:b5:1e:ef:88:32:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=9240af83216abea08b064ca4707c2230cccfc186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:b4:56:56:aa:29:10:c2:8e:68:bd:c2:cf:
d6:55:20:3c:94:45:c9:15:ab:7f:44:15:b3:1f:a7:
f5:2c:7a:90:b0:1b:45:46:70:4d:dd:90:6e:d3:a4:
a6:70:50:19:19:f2:42:c4:bc:d7:a2:bd:3e:84:a1:
9b:e0:30:bf:d8:da:ed:50:d9:ff:78:de:2e:61:86:
31:ac:76:2c:01:4a:dd:a1:2d:0e:43:55:1e:f6:7b:
16:f1:f3:26:c7:bd:b5:1f:b3:fc:37:38:60:a2:32:
bb:bf:b9:b1:3c:f0:de:b6:a8:3d:04:2b:a4:01:9c:
d1:1c:a6:db:d2:7c:a1:69:20:ed:6e:ed:6a:f6:6c:
f2:3d:5b:64:8b:fe:a1:66:8f:89:19:bb:7e:83:7c:
4b:4c:64:22:4f:80:d6:5b:ec:a1:ff:1f:8e:50:fb:
36:39:41:bc:c1:15:a7:b0:f9:6e:b4:5d:60:8c:aa:
72:3c:e8:f3:ad:28:d2:7e:de:47:55:07:8f:2c:73:
8a:ce:71:90:d8:97:3f:4f:67:b9:8b:09:28:60:6f:
eb:f2:74:fa:ba:2c:a9:5a:6a:a3:f0:ba:fb:c4:9e:
da:34:f6:82:ba:31:66:d5:1b:4e:2f:1b:b4:e4:c9:
b9:0f:ce:50:71:da:14:a4:f9:75:57:4e:ec:a8:c8:
3e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:40:AF:83:21:6A:BE:A0:8B:06:4C:A4:70:7C:22:30:CC:CF:C1:86
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ea:0d:91:ad:ba:29:58:5b:54:a5:82:63:46:17:10:61:64:
d8:8b:16:65:dc:b8:0f:87:cb:db:6a:7f:aa:90:22:98:fc:80:
d0:56:62:45:3e:a3:28:da:0f:99:5f:cc:12:79:7e:5f:dc:a6:
cc:d8:3c:13:a6:47:93:3f:fe:43:15:9f:a9:24:7f:93:bb:ab:
52:07:f5:1a:0e:49:9b:a1:5a:27:e8:c1:dd:5d:73:55:ab:4d:
d1:b6:77:6d:62:50:eb:a7:d3:be:82:06:00:61:ed:80:ac:9f:
5a:38:76:ce:70:a8:37:36:f0:43:2a:ee:a4:ce:b7:2f:6a:9e:
d4:43:49:db:46:1c:60:4c:c4:41:4c:fa:74:bf:de:ff:d1:e2:
1d:71:96:7b:e4:c3:a7:60:ab:ba:a8:34:bc:6b:99:a8:4f:c2:
0a:45:65:ee:bc:5a:b9:06:cf:9f:79:0a:89:88:84:c6:c7:6e:
73:2a:18:6f:79:ab:ea:c8:3f:c7:f9:39:4f:ef:62:62:75:14:
a6:1e:88:e4:58:0c:fe:f0:24:95:8b:8d:ef:cd:7b:35:d9:71:
91:cf:de:7b:8d:8e:db:8d:2d:be:de:e8:6e:af:62:20:f1:d9:
8c:93:20:f9:b3:6d:34:59:94:d2:c3:36:c2:62:f5:f9:16:b9:
52:fb:05:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:45 2025 by rpki-client