Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: uIOqYFTc5og/s4RExLi2SZpY0WtWefFScbTIMxoS2HE=
Subject key identifier: 50:BC:8E:E8:DE:C9:D9:20:83:AB:B5:4B:AF:D6:DD:0F:2A:1E:C8:63
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 0199FE46F59072093AEA39C148560DE13423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0E02
Signing time: Sun 19 Oct 2025 21:01:27 +0000
Manifest this update: Sun 19 Oct 2025 21:01:27 +0000
Manifest next update: Mon 20 Oct 2025 21:01:27 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: jU1iJYLRTnBLoOyeqiY3iBstcV0F6ZRBm5O14Sdjq8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f5:90:72:09:3a:ea:39:c1:48:56:0d:e1:34:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Oct 19 21:01:27 2025 GMT
Not After : Oct 20 21:01:27 2025 GMT
Subject: CN=50bc8ee8dec9d92083abb54bafd6dd0f2a1ec863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:47:30:31:76:2f:3d:82:b2:70:28:c9:3e:
a2:98:3e:8a:d0:2f:50:8c:d7:53:4c:0d:de:b0:ed:
d1:d0:bb:f1:d7:fc:5f:77:7b:67:c7:9b:16:79:a3:
da:82:df:c6:cf:bf:77:47:2c:ec:ae:38:2c:ec:7e:
49:80:0b:f6:b5:1d:aa:76:51:4b:06:a0:48:70:59:
50:c3:6f:42:60:bc:10:40:00:31:72:8c:aa:ba:40:
85:c2:17:9d:6d:bd:fd:7c:fb:7d:4d:da:af:af:24:
3e:a7:7e:53:bd:36:71:0d:39:61:94:8c:29:39:ea:
4f:c0:b6:e2:0d:fe:8f:1a:f5:1e:c9:e5:62:fb:2f:
a9:bd:7b:c9:c7:b9:e2:3a:24:cf:0c:b3:cf:99:fa:
e7:48:77:f1:07:e8:df:b4:f3:fd:fb:0f:1c:9d:68:
26:7e:6c:f9:3a:95:c0:3f:2d:de:4b:0b:10:24:01:
24:5a:69:e3:1e:10:97:66:75:6e:ec:0c:c1:3d:d0:
75:70:45:14:c5:92:fc:e4:ec:fa:f1:12:24:22:2c:
c0:ca:a4:c2:eb:3d:de:09:35:f8:d0:f7:89:7b:56:
2e:57:2a:71:5f:83:fe:89:25:27:29:ef:af:27:b1:
7f:2f:6c:0b:9c:45:2e:e2:83:6c:87:0e:6f:64:d0:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BC:8E:E8:DE:C9:D9:20:83:AB:B5:4B:AF:D6:DD:0F:2A:1E:C8:63
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:bf:99:b1:67:85:e2:4b:64:7f:9c:3b:51:e4:df:73:8d:
af:4f:70:e2:b5:60:02:9b:cd:c6:15:71:84:89:88:23:26:8e:
09:59:1f:6f:7a:dd:aa:7a:70:d2:9d:54:7e:9b:a8:86:80:d1:
ef:8f:c4:37:1a:52:fa:3a:6b:b3:2d:0b:d1:20:81:d4:88:49:
36:5c:97:11:b2:99:fb:3d:57:4c:0b:d5:93:77:5b:b4:c5:11:
b3:2b:3e:0d:96:6c:11:9b:2d:93:61:7d:2f:2c:14:d6:85:18:
ec:ed:ee:66:e7:7a:90:c1:61:67:a2:3b:6d:fa:f0:2f:4b:33:
98:cd:e4:7d:f7:78:6b:33:4b:3d:ce:4a:0a:26:2f:fb:4a:1c:
2a:11:88:fa:02:04:e7:49:19:33:11:01:8e:e9:2b:46:78:cb:
59:ec:55:ca:8c:71:71:1a:2f:e4:6a:e3:17:ee:49:4c:e4:b4:
86:67:a4:34:d3:e0:80:5d:2a:42:cc:e0:c8:68:c8:f3:28:0f:
08:4d:1c:24:b1:e2:44:a6:57:01:e6:3c:1e:bc:ae:6f:a4:bb:
84:d6:44:7f:14:ea:2e:da:ce:0e:c8:e6:44:18:77:03:80:c2:
13:92:1a:69:8a:40:42:f7:4d:75:5f:d8:d9:61:f7:c9:cc:0b:
c0:14:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:29:14 2025 by rpki-client