Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: QOpDy15gPsIu2d2rplaT2InfBv9k0411zey1n+QZcJ4=
Subject key identifier: 92:F3:F6:8E:20:62:EB:58:A3:E9:F3:F5:C8:04:81:90:E2:84:CA:9F
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 019A5307D20895CC2AD96B42FDA816BFBEEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 066E
Signing time: Wed 05 Nov 2025 08:00:12 +0000
Manifest this update: Wed 05 Nov 2025 08:00:12 +0000
Manifest next update: Thu 06 Nov 2025 08:00:12 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: GpSP6lrqu36nLemX2OqJs/vWv5t2sMY75vGt7xrzqGs=)
2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:d2:08:95:cc:2a:d9:6b:42:fd:a8:16:bf:be:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Nov 5 08:00:12 2025 GMT
Not After : Nov 6 08:00:12 2025 GMT
Subject: CN=92f3f68e2062eb58a3e9f3f5c8048190e284ca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7c:84:17:59:bf:6f:04:64:9e:da:99:45:1e:
a5:c8:d8:08:3d:9f:83:82:4f:06:f3:d5:f8:39:f1:
b8:79:9d:02:b0:29:ee:4a:c7:ba:30:82:a3:01:aa:
2e:bf:4d:c3:15:7e:52:bf:bc:6a:d4:49:24:b4:c4:
3b:91:27:d7:e7:f7:a3:a7:e3:90:f8:5a:d2:35:98:
74:73:5c:b3:27:0f:52:95:28:2c:d8:61:37:c1:0d:
05:55:6a:d0:65:db:f7:ad:a3:d9:70:29:80:75:4e:
22:e1:45:d0:05:d9:d8:51:a2:62:20:ee:df:14:12:
b6:b6:7d:df:7a:31:18:9e:36:2a:bd:ac:4b:9d:3c:
f9:81:66:22:99:e3:01:b2:e1:b2:c8:63:9e:88:0b:
a8:f1:7b:98:cf:8e:00:15:87:b6:c2:78:f4:ca:8c:
42:df:e6:0a:8d:60:bc:f2:f8:82:52:bb:06:b3:ac:
f9:b3:ff:84:b1:32:38:58:83:81:dd:4f:ed:5b:93:
ba:4c:ae:51:6c:8e:dd:10:a9:b6:5a:ba:ee:2d:0e:
4a:74:cf:16:6d:08:21:d9:0b:70:de:42:3b:9a:c0:
41:aa:ec:28:94:a3:29:98:75:d8:76:aa:55:7e:de:
84:58:8a:9f:28:08:0a:82:71:1a:39:13:9e:49:d4:
99:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:F6:8E:20:62:EB:58:A3:E9:F3:F5:C8:04:81:90:E2:84:CA:9F
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:67:f1:64:5c:94:b9:7e:8b:d5:d0:4b:d6:a7:8b:14:d5:0a:
d7:c1:32:12:ea:22:e1:9f:48:8f:08:67:90:15:33:59:de:c9:
8b:b2:01:61:db:55:f4:b3:87:10:b1:ee:20:da:89:bd:ff:d3:
dd:28:d6:80:f2:03:53:82:7d:ee:b4:9c:fa:27:9f:55:49:46:
8f:8f:73:85:d4:93:a9:3d:fd:a1:70:4f:56:5a:1b:19:e3:72:
65:68:d6:dc:1c:a1:2f:77:dc:86:c4:cd:af:2c:88:d7:ca:2f:
c3:1a:cf:e0:f9:0e:a7:76:ab:1c:6c:67:a2:61:7a:5f:aa:db:
5b:83:8e:58:97:01:36:a6:44:e9:ce:7e:f6:e5:b4:13:3a:56:
72:77:dc:7d:76:a8:5e:08:89:bb:79:6c:a5:35:0d:ec:9d:be:
ea:30:e6:18:36:ad:40:7f:44:4b:fb:61:60:32:e8:bb:01:ab:
79:b7:fb:60:e7:05:a3:88:9f:cc:84:e1:5e:9e:97:f7:cf:ab:
d8:58:f3:d2:dd:7b:15:c3:10:03:d6:8e:12:cb:82:13:ba:16:
9e:0d:a6:2e:cb:61:90:a7:24:b8:89:99:26:4f:ef:60:a5:06:
14:89:0e:e7:c5:e8:07:78:64:3b:be:cc:81:13:2b:e7:51:45:
83:51:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:58 2025 by rpki-client