Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: IqtdA6NgjOSA//3bWdAoS89AiXIpb1h5ae98Cbdt09o=
Subject key identifier: 8D:3E:F6:51:D8:F8:E6:4A:AA:CD:3E:72:CB:B6:09:89:9E:6F:1E:0B
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 0199FBEBE9D6AA84A969419039BD521E36C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0A9E
Signing time: Sun 19 Oct 2025 10:02:46 +0000
Manifest this update: Sun 19 Oct 2025 10:02:46 +0000
Manifest next update: Mon 20 Oct 2025 10:02:46 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: Ehs837T6lh4+98aU4h3bhDij2AZgXGk8m1kj2LvSKvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e9:d6:aa:84:a9:69:41:90:39:bd:52:1e:36:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Oct 19 10:02:46 2025 GMT
Not After : Oct 20 10:02:46 2025 GMT
Subject: CN=8d3ef651d8f8e64aaacd3e72cbb609899e6f1e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b3:d3:65:e4:6a:e4:bb:d0:cd:71:34:06:77:
87:ee:23:65:12:92:e7:bd:e5:27:d9:15:0c:88:3d:
f8:9f:4b:71:a6:fb:de:66:22:10:6f:f0:f8:d9:7a:
bc:9a:72:f8:67:97:19:ef:3b:13:83:a9:da:ca:b9:
ae:c8:67:bf:dc:40:00:33:bb:53:3a:b0:92:e1:25:
b0:cf:4c:53:40:f8:a0:01:85:b2:a5:4c:12:9d:b2:
9b:69:01:fc:6b:e9:78:2f:ff:e3:cb:64:e8:e4:09:
62:81:e9:5c:cc:a1:26:cd:0e:0a:d3:cb:b9:c6:0d:
df:bb:2d:87:30:0a:85:83:be:b1:42:93:c1:b1:9c:
49:ce:e6:f9:78:ed:93:a0:1f:5b:b0:04:b7:0f:94:
99:73:b2:33:69:bd:25:bf:94:c6:6c:ad:1f:b3:b6:
5f:00:58:73:e6:6f:e6:ed:9b:d4:8f:4d:69:f9:25:
5a:69:49:d6:ad:3f:d8:6f:f2:98:71:8f:43:89:d6:
00:6f:d8:59:ea:a8:33:94:1e:11:d6:c1:a3:02:df:
0d:02:71:98:1e:e1:61:60:ea:ac:47:70:9d:e4:95:
d7:84:2b:47:49:ee:88:e6:73:ea:47:a0:46:18:a3:
9f:48:a2:d0:ee:4e:90:86:92:19:c1:17:14:99:13:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3E:F6:51:D8:F8:E6:4A:AA:CD:3E:72:CB:B6:09:89:9E:6F:1E:0B
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:64:19:18:57:c3:d2:2b:86:ec:5d:68:24:0e:26:68:03:a0:
26:61:6d:f5:1b:29:b5:6f:a1:dd:a2:07:42:c6:80:e0:05:6d:
4e:00:64:d0:1c:93:fa:70:8f:e8:a6:2a:eb:30:4f:bf:e7:0e:
62:19:e3:98:20:0c:56:b5:e5:aa:6c:93:6e:b0:ab:c1:8c:e2:
4e:6a:3f:4b:eb:db:a1:ca:36:3c:64:d4:70:fd:57:e6:52:fb:
b4:4c:2f:47:92:d9:47:d4:88:c6:21:07:ca:5d:ea:3b:1f:3b:
0f:93:b0:41:19:c1:37:0b:b7:f1:f2:f0:a4:19:c4:86:56:60:
fe:04:c3:27:e7:9d:ac:fb:74:32:3e:57:b5:7d:9c:44:79:a7:
51:44:91:ef:cd:05:38:ed:e6:dd:d9:e2:76:20:7a:2f:6e:f9:
97:ab:02:ac:dd:0f:cf:e5:d3:6f:14:d0:2c:2f:4c:92:87:26:
d5:98:eb:1c:bb:e4:c0:33:5d:34:85:7e:57:1c:ee:8e:d3:1a:
45:72:aa:67:b1:e3:3f:55:4a:48:f0:04:ed:a4:2a:92:4e:7e:
09:a9:c5:cf:a3:ac:fe:ce:fe:c7:37:cd:28:53:81:3a:5b:84:
d5:87:ea:ae:b7:a1:98:3c:5a:c4:7b:76:a9:93:c5:30:e0:f4:
bd:e5:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:32 2025 by rpki-client