Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: StvAse5CRt4vUhKcaTov2wA//Doo8tj+LUauPPapUxE=
Subject key identifier: 8D:26:E3:EA:76:FE:B7:D1:64:12:8C:0C:E1:7F:48:97:0E:28:52:6B
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 0199FDDA361391082CB63CE5EC3D87748429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0906
Signing time: Sun 19 Oct 2025 19:02:40 +0000
Manifest this update: Sun 19 Oct 2025 19:02:40 +0000
Manifest next update: Mon 20 Oct 2025 19:02:40 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: RWr2Wxonabmm16h/SRvQ+s51mdKG9LKzpRfXzj/tl68=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:36:13:91:08:2c:b6:3c:e5:ec:3d:87:74:84:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Oct 19 19:02:40 2025 GMT
Not After : Oct 20 19:02:40 2025 GMT
Subject: CN=8d26e3ea76feb7d164128c0ce17f48970e28526b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6b:5c:eb:ff:a9:23:39:ca:d7:62:b9:b5:72:
2a:4a:ea:67:bb:fc:c0:45:ae:ec:1a:e4:c1:8b:c4:
91:86:c2:01:0e:eb:75:92:fb:b0:f9:08:d3:d8:9d:
3c:a2:14:95:b5:f7:13:d8:a4:aa:d9:a1:dc:5b:8b:
1b:3f:b1:9b:d4:a6:82:c6:17:d1:2d:d4:b6:b1:ea:
68:07:f5:9f:c4:d7:b5:d8:3a:92:30:22:db:8f:88:
24:e3:96:61:01:0f:2e:8a:67:84:c9:ed:f1:62:44:
08:44:4a:46:f3:e4:fd:cc:1c:b5:9d:f8:0b:bc:85:
bb:bd:f8:f7:a4:93:f3:89:a3:3c:5a:5d:87:c7:d9:
66:cc:3d:7f:56:d8:76:15:96:49:7e:71:6c:aa:37:
60:5f:68:a9:80:da:ba:09:6b:29:99:26:eb:43:49:
2f:c3:69:6e:7a:e7:1a:1f:24:cd:6f:19:cb:08:a4:
fb:1f:94:c0:bf:99:32:05:96:92:47:a2:d4:f9:9d:
09:35:6f:6e:05:b5:f3:a6:83:61:bf:a0:93:5d:9d:
d2:31:57:9d:58:87:99:36:8d:a2:32:ee:b8:d9:31:
3c:04:28:64:16:fd:0f:6d:21:59:bd:de:4e:96:cd:
4c:5c:72:8d:ff:e4:63:1b:b0:93:25:9d:af:df:d7:
6e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:26:E3:EA:76:FE:B7:D1:64:12:8C:0C:E1:7F:48:97:0E:28:52:6B
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c4:a4:32:a0:ce:1a:5c:52:e3:af:03:1b:81:1d:a2:27:68:
ab:35:0d:14:ad:0b:f3:3d:ce:cf:f9:4f:c0:50:47:94:7c:3e:
9c:12:de:19:ef:6f:91:0a:c9:f7:c1:c0:09:3b:7d:e6:f3:27:
ac:05:5d:95:d9:14:da:f2:0b:b2:a4:06:86:86:80:eb:9d:6d:
a3:a5:2c:7f:c3:65:0a:82:f0:1c:e5:5f:25:42:8a:f6:d6:1d:
dc:5e:af:16:fc:ed:d4:74:b1:a9:96:9c:ca:28:84:5b:5f:66:
c6:9c:78:a3:79:d5:f8:56:09:6b:43:27:21:a3:dd:dc:e5:10:
97:f6:51:57:bc:bd:81:8b:8d:f5:47:63:9a:6f:b0:54:6c:b2:
70:8e:31:59:51:ae:f2:9f:d9:9e:c3:63:5b:4f:8c:da:6f:5b:
de:fd:56:ee:0f:89:ec:18:2d:3d:13:67:29:3a:c0:fb:a4:4b:
f8:02:4e:50:f3:86:ce:58:ed:e9:d1:d1:9e:e8:db:2d:71:56:
11:8d:63:4a:d3:26:96:2d:6d:bd:37:83:a8:f9:54:3f:c4:cf:
b4:45:18:69:42:0b:b3:6a:e4:96:58:b8:3f:c5:dc:db:b8:da:
7f:61:4f:19:f4:79:83:16:ce:89:8c:a2:6e:49:24:aa:e8:d1:
c9:4e:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:58 2025 by rpki-client