Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: 46hInL6DhURyr33hwNmVdaTsaOismcXHeJm5TqEDwwo=
Subject key identifier: E3:BB:AC:FA:FA:8A:44:5F:53:6B:2E:93:18:CC:48:D1:A3:CD:13:79
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 0199FF22BFCEFA5FE227E7F65209C1EB41B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 08A8
Signing time: Mon 20 Oct 2025 01:01:31 +0000
Manifest this update: Mon 20 Oct 2025 01:01:31 +0000
Manifest next update: Tue 21 Oct 2025 01:01:31 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: 4cIoT3qjU8tdZG6wR8vNfDBjngKBNRbsV9KviJchwBY=)
2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:bf:ce:fa:5f:e2:27:e7:f6:52:09:c1:eb:41:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Oct 20 01:01:31 2025 GMT
Not After : Oct 21 01:01:31 2025 GMT
Subject: CN=e3bbacfafa8a445f536b2e9318cc48d1a3cd1379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:78:1d:4b:3a:e0:07:0b:15:ad:b7:22:7c:
9c:b9:0f:07:81:cb:aa:db:9a:5b:c8:be:dd:63:0f:
1e:72:cf:c6:12:fb:c8:05:48:6a:fd:90:30:5c:ee:
2d:08:38:0e:69:79:c6:9a:9a:0d:9b:9d:07:a7:88:
38:fc:b8:af:5d:76:fb:aa:14:c0:14:9e:4d:3f:21:
13:25:ee:28:7b:b6:36:78:6c:90:41:03:aa:e6:ae:
37:a8:21:a8:e8:1f:45:c0:d9:a7:df:40:72:f8:5d:
f5:9e:7c:f5:a4:fb:78:95:84:11:99:99:51:23:95:
76:42:10:2b:dc:5e:b1:4f:a8:91:43:22:83:4f:4b:
e7:7b:30:e1:ac:17:02:6a:e0:3d:7b:4c:f0:d6:92:
0c:d7:52:17:0a:57:61:1b:80:27:96:1e:57:c8:f8:
7b:c2:e2:20:79:df:a5:7e:44:fa:1c:f2:62:36:9b:
6d:e0:0d:9b:5a:be:01:e3:81:a1:dd:cd:a4:6b:58:
2d:4e:ba:1e:a3:51:73:0a:b6:d7:b4:d4:03:ed:df:
6a:7b:31:66:2e:f6:c6:c0:15:c9:58:ce:64:b0:d1:
2c:b2:00:a6:ff:69:d3:95:f7:da:5a:46:ef:35:82:
f6:4e:00:10:a4:2b:76:0b:3d:97:b6:3f:f6:9a:15:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:AC:FA:FA:8A:44:5F:53:6B:2E:93:18:CC:48:D1:A3:CD:13:79
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:93:b3:a0:bf:cb:79:5c:8c:1a:8a:cb:7d:5d:a0:d1:53:ea:
21:94:c6:da:de:53:98:40:d4:a7:f0:60:19:81:a6:3c:b0:10:
5d:d7:9b:fa:4a:dc:b5:f7:e5:72:ca:9e:b8:e4:da:21:5e:22:
67:d0:dc:4e:0d:d7:0c:38:73:1a:b5:3c:c1:9c:db:0c:34:67:
ba:de:e2:2c:ff:ef:8c:8a:6e:68:41:68:46:3f:51:45:99:b8:
89:99:02:3c:e1:93:cb:26:95:fd:c8:38:11:c0:1d:c1:4c:70:
3f:64:cf:78:e1:57:48:08:e7:2f:28:04:61:41:ae:a6:76:8a:
e0:c2:ff:ad:cb:c8:b5:b7:36:71:0b:94:96:2c:7c:54:2c:54:
59:e0:0d:00:67:26:be:17:c6:aa:57:99:9a:bb:1b:56:7c:78:
e3:0a:67:e9:0e:71:37:c7:9a:34:00:97:99:7c:e8:b2:cd:3c:
86:df:84:ec:be:b7:74:e7:ac:78:53:62:43:16:1d:19:13:0a:
5b:0b:a6:0b:6d:ec:b4:06:94:08:ef:dd:3c:8d:de:30:e8:32:
32:2a:06:b7:40:ec:33:12:ec:7c:ec:5a:85:fa:f5:7e:0b:80:
d8:59:15:03:91:a3:1d:e3:8d:92:05:f4:7a:be:32:46:d6:a3:
38:c0:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:56 2025 by rpki-client