Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
File: XiMd-Hvf4ien5eQZNANwurMB4nk.mft (raw, json)
Hash identifier: 0FeoywWoRiWAicQf7OaDTXAStHpDNL6W6ylaFvlxKXE=
Subject key identifier: 3A:5B:61:D8:B2:FD:10:70:86:77:A8:A1:C4:5F:55:D1:CB:F7:43:54
Authority key identifier: 5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
Certificate issuer: /CN=5e231df87bdfe227a7e5e419340370bab301e279
Certificate serial: 0199FDD9B9B4C5DF4F3BB40BF1ECC8FB177B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
Manifest number: 0CE5
Signing time: Sun 19 Oct 2025 19:02:08 +0000
Manifest this update: Sun 19 Oct 2025 19:02:08 +0000
Manifest next update: Mon 20 Oct 2025 19:02:08 +0000
Files and hashes: 1: XiMd-Hvf4ien5eQZNANwurMB4nk.crl (hash: LkmJ2ZDqnP0fu11AozsFYc7t6IUUJlOoZkIcu4NVvg0=)
2: w5D1yX-tZICiSwFR7jL3CytqOn4.roa (hash: 2NNJMvsHwacMFGzvYSwe5becAnCEvkEVPVyFOuRSFjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:b9:b4:c5:df:4f:3b:b4:0b:f1:ec:c8:fb:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e231df87bdfe227a7e5e419340370bab301e279
Validity
Not Before: Oct 19 19:02:08 2025 GMT
Not After : Oct 20 19:02:08 2025 GMT
Subject: CN=3a5b61d8b2fd10708677a8a1c45f55d1cbf74354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:30:3b:c2:33:e1:99:bb:fa:7b:75:57:f8:
36:01:e0:ec:ea:ca:a3:79:fb:8d:f9:5d:05:5b:ba:
c1:7b:f6:0c:9e:cb:61:1a:64:67:90:33:77:07:72:
ab:ab:a2:0b:5f:00:e9:ae:da:34:8e:46:0c:3f:f0:
15:44:a7:62:0e:1b:1e:52:01:77:a4:7d:76:af:be:
83:6e:a0:f8:49:ad:43:1f:9e:76:a0:ee:05:a0:d4:
38:52:33:8a:59:93:52:bb:08:76:d7:7c:da:d1:2e:
7e:f8:31:eb:2a:53:82:70:90:ff:d8:36:e1:0a:9e:
bf:57:3d:3a:2b:e8:22:71:1d:fd:8a:00:4c:b4:eb:
8e:db:4a:c7:0f:4f:0a:76:cb:52:0c:5e:cf:d2:fd:
50:ab:b0:72:ea:d3:43:c6:62:b0:4b:81:2c:d5:21:
a2:27:d2:cd:7e:25:35:29:f3:3c:96:89:de:8d:0f:
39:c1:a7:2d:2d:d9:b1:5e:6d:0f:d7:9e:c5:2a:7b:
c5:c3:b6:f1:c3:41:f7:bb:35:3c:81:fb:f6:3d:cb:
90:a0:8c:65:0a:54:16:9f:69:25:1e:51:36:06:65:
4f:5e:13:de:31:77:7c:75:93:9c:39:19:d4:b8:50:
4b:c8:7c:98:a8:82:0a:dd:98:94:59:57:3b:bc:37:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:61:D8:B2:FD:10:70:86:77:A8:A1:C4:5F:55:D1:CB:F7:43:54
X509v3 Authority Key Identifier:
keyid:5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8b:64:30:c6:f2:37:59:f8:d7:79:f8:35:59:f7:b7:f7:bc:
f9:e4:f6:a8:6e:27:d8:a2:fd:85:76:e9:46:e2:22:4b:17:3f:
3e:76:78:1b:61:0f:9c:0e:cf:fc:d5:35:27:1b:3d:67:ff:0c:
07:c5:d7:4e:8a:8c:c2:0f:b0:5b:5c:d2:7c:25:e9:a0:4d:c8:
f6:54:0b:ba:57:d3:da:3e:a1:6c:b3:f9:7b:c3:b6:0b:f3:78:
26:a6:37:10:60:8a:3b:ad:13:89:ed:da:59:94:f2:4e:8e:06:
5b:03:27:57:d2:2e:a0:58:8a:f5:2d:7a:b0:c2:3a:23:85:b8:
2b:c9:23:8a:ea:db:a5:56:57:8d:1c:ca:7e:35:ba:1c:9d:67:
be:5b:9e:99:d0:68:cf:e8:7e:54:58:35:1d:cc:82:c6:27:b9:
1d:8a:b2:84:e2:ba:c9:a0:7c:98:cc:d6:c5:ca:9e:b0:17:4f:
aa:94:c7:35:33:df:85:b4:cc:c0:1f:b1:d7:d2:61:90:a1:32:
f1:77:eb:20:fe:96:21:ba:77:a9:3c:f4:c2:e8:95:e2:45:3d:
26:04:d3:63:96:5e:7b:0c:25:b3:fa:4a:9f:75:26:05:b8:f3:
f8:4e:9a:5b:15:50:56:5f:c8:e8:87:d7:0a:43:c3:32:d3:e8:
b7:1f:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:15 2025 by rpki-client