Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json)
Hash identifier: R506LLsI+Sz+fUb2eWpWQsoSucjD3w/Z7t+/vtEQErM=
Subject key identifier: A7:17:2B:96:B7:81:E4:53:32:E9:4B:96:46:FA:F5:58:CC:E8:3A:15
Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7
Certificate serial: 0199FB7C6E430392987B6812DF67DF5EECFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
Manifest number: 05AA
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=)
2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=)
3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: Pbs/NoEWhDogkqtmHX9jO3sJlSusTyBltiDajAUK9Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6e:43:03:92:98:7b:68:12:df:67:df:5e:ec:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=a7172b96b781e45332e94b9646faf558cce83a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:a8:57:b5:c0:89:b9:00:ca:bf:d5:67:6d:
ab:2f:80:ff:f2:b6:10:2b:e0:4a:31:9c:49:e4:b9:
50:16:69:ed:cf:7f:cd:68:62:fb:fc:ea:ce:10:b7:
1a:ea:58:34:c6:c2:5a:ec:c8:e8:2c:0b:57:78:c0:
2d:e8:2c:d6:55:c9:05:4a:ac:76:0c:e6:b4:30:23:
50:87:f2:4e:6a:bf:b6:3d:14:fa:89:ee:6b:3c:73:
00:78:2d:74:b5:a8:f8:4b:c8:2f:b7:09:d1:b3:24:
f7:34:b8:1a:00:2d:0c:0a:09:cd:ca:b1:b4:a0:8c:
2c:f3:ed:e8:e9:53:6a:f2:7e:e9:42:6b:2c:ca:cb:
4c:3c:e8:d0:3c:66:07:b8:77:e4:9d:87:ba:f5:2c:
52:8b:70:18:f4:5b:f0:e2:0e:df:cf:0a:5b:c1:9e:
e4:66:58:40:f1:ad:e8:16:8f:51:19:ba:26:e7:9d:
28:4b:85:34:7d:98:a2:83:86:b8:e9:17:25:5d:f7:
e9:2c:0a:c7:40:ad:63:79:1a:8b:af:a4:d8:d7:91:
7e:20:bd:ea:07:c1:be:0e:97:56:cb:cb:d1:7a:a9:
05:12:e5:60:20:83:f2:be:62:23:f1:2c:26:4f:22:
0a:c3:0c:40:d5:db:3d:44:05:8f:92:7a:b7:db:30:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:2B:96:B7:81:E4:53:32:E9:4B:96:46:FA:F5:58:CC:E8:3A:15
X509v3 Authority Key Identifier:
keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:72:dd:0a:4a:e1:4d:6d:ee:87:8e:81:5d:6a:8a:df:7b:db:
12:55:a0:35:69:4e:73:bf:6a:8e:6e:9a:92:c7:08:ef:5e:ce:
c3:9a:40:72:d0:76:09:26:2a:7f:b6:b0:90:2a:d8:f8:7a:af:
70:15:b5:7f:8a:b0:92:22:7b:c6:94:21:4c:c4:76:0f:70:8c:
43:b5:2c:75:2d:22:77:2a:32:f6:fd:e6:5b:90:5b:64:54:24:
45:3c:7c:5d:a0:be:e6:c7:59:02:51:9b:63:ab:9b:29:41:5c:
bf:89:19:b3:e5:ae:82:d6:9d:c0:a0:c1:ff:82:9b:af:a3:0c:
2a:d8:dc:be:65:0e:3c:66:3a:15:b9:f7:2e:ee:7e:10:90:ec:
11:f6:a2:cf:f4:c9:a8:bc:cd:81:d8:93:27:92:7c:57:bc:84:
f5:e0:d8:8d:01:38:fa:07:33:d2:b1:7d:02:92:35:a0:f8:eb:
99:45:04:7f:83:bd:88:ef:02:cb:d8:04:ae:3e:18:b5:b2:57:
e2:e1:ce:cb:70:01:8e:e7:75:cd:ce:6d:aa:a2:d1:e0:d5:68:
88:f1:94:e9:1a:e7:94:43:ba:37:83:28:4e:6d:33:4d:3a:0c:
2a:e1:7c:b0:26:2e:d1:f0:5a:15:63:36:f1:e3:83:ea:a9:1a:
d4:ac:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:02 2025 by rpki-client