Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier: 5DfwO3PfzXDKZluTaiKT/gsXLYV1rsLKGeJnnYZQ7lA=
Subject key identifier: EE:F7:2B:0E:EE:23:FF:AE:1A:EF:85:2C:4B:D8:21:3F:B4:12:69:5B
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial: 0199FC8F9FAC945591156F76B281A9DCB61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number: 04BA
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: 2ZnHwxpCLRm86EPz9Rn43Tit4fn2/Pa1wV2UtGQqIJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:ac:94:55:91:15:6f:76:b2:81:a9:dc:b6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=eef72b0eee23ffae1aef852c4bd8213fb412695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:3a:82:68:4f:a0:06:2f:4a:57:b8:8b:7b:
59:1c:97:a3:62:c7:3f:42:ed:24:9b:24:e8:0f:1f:
dd:ca:9d:27:6b:44:79:a5:8a:77:77:98:44:4d:03:
18:b0:fb:2c:ab:87:27:bd:87:01:87:75:e5:06:a7:
76:10:bc:c2:8a:c9:ca:1e:6e:4d:20:04:4f:5a:37:
3a:8d:31:80:dd:c7:e3:25:01:70:06:ba:0c:6e:44:
a3:81:d7:33:85:08:f6:83:60:a2:fb:60:d9:17:e6:
f4:fa:05:38:92:94:08:43:7a:3c:1b:3d:e9:60:38:
b6:b5:bf:fa:85:9e:e7:56:0b:74:22:6a:09:0b:40:
24:8a:84:4b:c3:9a:33:fe:12:c7:5e:6b:e5:10:20:
3d:4d:a2:db:f4:4a:49:a2:45:f4:cb:7d:06:ea:a0:
8e:0c:a8:3d:01:56:e8:92:44:cb:5b:7d:b2:5f:84:
c3:b8:63:52:0d:42:96:49:e5:1a:67:74:38:d6:f8:
90:53:f5:78:4a:93:44:a9:76:f3:08:3e:fe:2b:63:
26:ce:8e:a6:17:77:4c:07:a1:72:e7:70:84:4a:d1:
16:82:f3:d4:7b:9c:84:82:a3:c1:76:47:08:2b:07:
a2:71:11:45:79:8b:ca:6f:43:0a:de:dc:df:fd:dc:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F7:2B:0E:EE:23:FF:AE:1A:EF:85:2C:4B:D8:21:3F:B4:12:69:5B
X509v3 Authority Key Identifier:
keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:18:8c:e4:4b:c4:bf:99:68:56:75:00:a7:30:1b:5b:c1:80:
f4:a1:23:47:53:14:e0:69:e9:5a:e5:51:fd:e3:34:5e:c8:51:
bd:7b:62:9c:96:f2:fd:78:f7:01:3a:aa:8a:dd:e7:44:73:0c:
90:2b:a8:3c:92:95:fe:25:59:37:7b:80:87:4e:81:0b:0b:18:
8f:f0:9a:f3:ce:61:4d:c0:31:16:0e:89:f2:17:4d:69:b4:7c:
f4:28:fb:4d:d7:81:87:22:91:db:5c:af:48:19:a1:c5:dc:2b:
96:7d:18:27:4d:e9:80:17:bb:7a:ef:20:a5:a9:64:03:e0:f7:
57:eb:21:0b:9d:fd:ee:08:30:25:8f:6b:c7:a5:34:5e:d3:5f:
c8:f5:d8:d8:66:37:36:d3:e0:0b:ba:cf:da:18:75:f5:8f:13:
0b:f6:bb:71:a8:63:b9:70:a5:2c:8e:48:bb:44:a2:e4:1e:86:
ee:c0:94:14:5a:ab:c0:34:04:43:f5:c2:28:32:80:42:63:0d:
a0:50:0b:aa:4e:4e:2a:33:77:6c:7b:31:0a:1d:f6:4e:be:f2:
85:ef:92:fa:ce:8d:28:ce:62:f7:7c:a7:ad:2b:fb:b3:ee:4b:
32:30:9a:74:71:25:79:2a:90:7b:29:8f:12:fd:3d:bd:7d:a7:
f8:63:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:23 2025 by rpki-client