Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: ob3KFNU7q2BUrMuiBH00ddRVvzY7GHQqiLjXiC8L1G8=
Subject key identifier: 54:B6:AF:0C:0E:04:9C:A5:1E:4B:6A:FA:B8:E2:9D:44:FD:97:F8:79
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 019A02FEBD6051A79E93E9C26C12255A8FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0AB1
Signing time: Mon 20 Oct 2025 19:00:40 +0000
Manifest this update: Mon 20 Oct 2025 19:00:40 +0000
Manifest next update: Tue 21 Oct 2025 19:00:40 +0000
Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: E7j9XW132WjHiGl1AMBkqFfEq8gk+tbJB8UZ3brmUWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:bd:60:51:a7:9e:93:e9:c2:6c:12:25:5a:8f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Oct 20 19:00:40 2025 GMT
Not After : Oct 21 19:00:40 2025 GMT
Subject: CN=54b6af0c0e049ca51e4b6afab8e29d44fd97f879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:62:60:42:60:9e:f4:ce:75:80:ce:5c:74:
ce:b3:97:47:b8:00:a0:4e:85:48:ed:77:46:59:6e:
fd:de:f1:db:0c:92:05:2d:79:c0:01:73:54:91:3b:
af:10:de:17:2d:0d:ae:51:d1:a4:48:7b:15:b6:d5:
00:87:d5:82:81:14:da:34:bc:66:73:30:23:07:ec:
1c:85:87:14:51:03:36:22:7f:89:60:d2:90:8d:27:
47:33:48:e5:ab:85:2d:7d:15:7a:29:51:52:1d:6f:
19:6f:96:b7:fc:71:c8:93:1f:9b:b1:ad:3c:dc:10:
66:c8:a5:5f:39:e5:72:29:08:ba:cd:5d:5f:14:b9:
6c:b7:a2:32:4d:6b:69:08:fb:b2:25:58:1a:5c:71:
b8:5b:64:05:9c:f8:a8:e9:d6:1d:c6:50:c1:14:9e:
00:ab:ca:3f:09:1d:60:e5:1f:66:d6:a4:62:2f:01:
02:c4:af:4c:0a:0a:ad:be:c9:3b:f8:d5:72:3c:60:
d0:79:e4:91:47:40:08:25:63:42:3b:18:f2:73:84:
d4:f8:44:11:2a:f8:52:17:8f:50:8d:e3:25:67:ee:
b3:eb:4b:d2:3d:96:d9:c5:55:9d:4b:8a:48:79:53:
8b:c1:16:b5:b6:47:43:70:12:71:5a:14:94:b1:06:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:AF:0C:0E:04:9C:A5:1E:4B:6A:FA:B8:E2:9D:44:FD:97:F8:79
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d1:b0:25:ac:cb:ff:88:29:5e:3c:9b:76:5a:c9:bd:3a:c2:
2d:10:39:49:35:e2:c3:11:d9:78:45:0f:2f:c5:8d:97:f4:41:
8b:11:65:3f:8c:1e:41:a1:7f:5e:e7:81:cd:9f:49:92:dc:05:
84:4e:8e:ed:80:c4:8e:88:43:25:70:77:6e:48:f3:42:c2:5c:
16:84:bd:5e:98:a1:10:a7:56:46:f2:ef:7c:b2:94:35:b8:ef:
70:44:d4:92:73:04:e9:2d:51:72:ac:1d:ce:7f:69:9b:5d:b1:
69:58:24:9a:c7:42:4b:d4:1d:d5:d8:f7:fc:67:91:7d:60:c4:
bf:02:61:7a:24:71:1f:86:07:d1:eb:4a:70:29:b6:ff:53:cd:
e1:f7:08:4a:34:1d:61:d4:fd:e4:5d:58:bc:00:cd:fe:50:2d:
22:1a:4a:9f:46:ff:e2:8b:18:1c:9c:b0:b2:6d:bf:2d:ee:0c:
ae:d5:c0:87:11:28:81:98:c8:a3:d0:ec:0b:5e:06:dd:2b:f1:
1d:59:28:97:d9:da:a6:a3:82:fd:ec:f9:1a:d2:73:26:f3:69:
7c:3b:98:f9:bb:71:82:8d:91:3f:4f:b2:2a:0a:ee:48:17:07:
a4:42:dc:3a:93:12:c2:2d:09:6d:0d:cb:1e:b5:00:6a:88:ab:
54:df:d6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:10:45 2025 by rpki-client