Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json)
Hash identifier: uS5NeQTHOi20TNJDeCJ7hnYG2B9DEb6YfMERnHd1dkQ=
Subject key identifier: 9D:C5:27:A9:00:B0:A2:B9:17:B4:0C:83:27:C7:14:04:A6:4B:35:8B
Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Certificate serial: 019A5119ABE93371DCEFB47FCB95E31DDE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
Manifest number: 0C82
Signing time: Tue 04 Nov 2025 23:00:27 +0000
Manifest this update: Tue 04 Nov 2025 23:00:27 +0000
Manifest next update: Wed 05 Nov 2025 23:00:27 +0000
Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=)
2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: vPHh/cQyO9o2ezMixdcUk4FfZcWGHIK0yaYkIm2cW8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ab:e9:33:71:dc:ef:b4:7f:cb:95:e3:1d:de:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf
Validity
Not Before: Nov 4 23:00:27 2025 GMT
Not After : Nov 5 23:00:27 2025 GMT
Subject: CN=9dc527a900b0a2b917b40c8327c71404a64b358b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:64:5c:db:7b:4f:24:06:be:89:8b:0a:36:
43:b1:03:a9:60:da:70:8d:64:e0:2c:97:63:64:2e:
54:cb:d6:71:3b:87:b1:fb:a5:2f:c3:91:68:92:9a:
1a:42:c1:11:0d:d7:83:dc:19:3c:b2:16:c3:09:5f:
e2:d9:58:e8:e7:3e:9a:02:4d:35:96:85:ca:01:09:
db:da:e6:64:6b:8f:c0:82:5d:b7:5c:34:91:f1:1d:
44:c8:3a:53:02:a0:b9:6c:6a:19:9d:c0:53:0f:05:
a2:cb:80:f3:31:fa:8f:f7:97:3e:03:4f:d8:8f:5f:
af:3b:ba:9e:43:f8:f5:b2:96:b4:fc:78:75:b1:44:
ea:02:83:b5:30:6f:7e:61:4c:d8:d9:26:fa:cf:e8:
15:91:9a:00:d4:69:e9:7d:c8:05:53:42:bf:84:e2:
37:a4:d4:8e:b5:ac:28:e1:c1:58:5c:19:d3:42:48:
a0:1e:20:b4:50:cd:40:9f:43:74:35:05:4a:cd:20:
29:05:28:33:15:d1:9b:18:b9:ae:f7:60:e2:ef:71:
bc:76:77:18:45:f7:fe:54:cc:69:3b:b1:19:ea:98:
d0:f5:2c:5a:d6:07:7a:96:34:72:0f:49:f9:97:9a:
54:4f:ed:af:c0:a3:0b:4a:9f:03:ac:46:ef:d5:64:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C5:27:A9:00:B0:A2:B9:17:B4:0C:83:27:C7:14:04:A6:4B:35:8B
X509v3 Authority Key Identifier:
keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:4d:bf:c5:c8:5e:a0:0e:0d:7b:db:b3:82:53:cc:42:23:
b8:f9:e1:c7:72:69:7d:81:7e:67:75:22:3e:4b:ca:1f:bc:f5:
f7:33:c3:5b:0f:94:38:38:74:67:a5:53:18:5e:70:84:b3:cc:
65:b2:0f:59:56:dc:4f:e6:3c:75:10:57:85:f1:e7:e7:ac:f5:
98:ba:34:03:df:3b:de:ad:9b:c0:8f:95:b4:01:ba:b2:49:16:
cc:d1:e5:f7:36:60:3c:9c:d4:1d:50:c4:bc:2e:e2:8e:8e:bc:
b4:38:ee:ae:73:08:71:fb:60:1b:ba:ee:ad:e7:6d:b1:d5:31:
af:a1:69:db:c0:5f:c4:0d:07:22:71:80:74:e0:81:57:ed:d6:
76:11:5f:fb:59:31:15:32:45:8d:36:9d:fe:6b:96:22:05:d4:
b0:51:2c:68:7b:c1:83:14:85:77:6b:b8:30:74:71:f8:5f:fb:
66:a5:80:27:51:d0:34:52:92:61:a4:d9:79:2e:4e:cc:2a:8d:
d7:6e:1f:b6:9c:05:9d:77:8c:9f:17:f7:eb:25:8b:ea:c8:5a:
d9:ab:d0:d7:c9:ad:d0:46:13:05:79:df:9f:67:ae:37:98:6f:
b7:b1:d3:af:3f:52:07:aa:6c:93:26:0e:de:76:b6:8a:d1:80:
5e:e3:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:52 2025 by rpki-client