Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: 3OzSj3+wQRNSILQnM0UcQRenjWuyaWGCcIzWcyTrHZI=
Subject key identifier: 72:92:7A:2D:6B:D1:04:56:4B:AA:7D:70:33:D6:14:03:57:BB:FF:4E
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019A51F5881DC7822383ADA52E213F265D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 088D
Signing time: Wed 05 Nov 2025 03:00:36 +0000
Manifest this update: Wed 05 Nov 2025 03:00:36 +0000
Manifest next update: Thu 06 Nov 2025 03:00:36 +0000
Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: FMx/3m0xm3qYwhJ1fALkJM9f9eFBujgQuR/kxDYYow4=)
2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:88:1d:c7:82:23:83:ad:a5:2e:21:3f:26:5d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Nov 5 03:00:36 2025 GMT
Not After : Nov 6 03:00:36 2025 GMT
Subject: CN=72927a2d6bd104564baa7d7033d6140357bbff4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:06:93:f2:07:e0:cc:6d:92:88:19:44:c1:
86:3c:73:7d:b2:4d:15:03:64:25:3d:37:6c:6a:f7:
64:be:85:fe:ac:4d:74:f4:db:f0:b3:b1:98:fd:b8:
03:74:3f:0f:8a:9f:50:cf:db:a2:16:0f:9e:0a:37:
d8:73:10:ac:53:ca:38:62:b4:dc:e6:8a:6d:4a:61:
4b:5e:6a:42:63:1f:cb:c4:0f:42:f0:e6:e1:34:dd:
38:b5:71:8c:61:8b:9e:81:5c:2b:60:7b:b8:a4:69:
92:ce:59:9b:95:0b:8c:a8:79:f5:95:21:b5:39:2c:
ae:83:9b:42:6e:87:1e:c6:13:f1:17:2c:e1:2b:fd:
77:ca:e6:e2:f8:02:18:16:e3:7b:55:e1:b6:b8:2c:
de:c9:1e:e0:f4:0b:9c:ed:9e:41:10:a7:a7:f3:77:
31:64:cc:99:30:f5:34:54:3a:76:1b:c2:08:a9:5b:
50:8c:4d:71:67:af:0f:6e:1f:34:6f:01:d8:e8:22:
50:0b:34:9b:f9:77:bc:19:00:9e:52:39:1f:3c:d0:
ea:39:d6:b8:5f:87:83:b4:90:d7:71:91:d2:7d:6d:
d9:80:b7:1f:a3:ca:69:77:af:8c:f5:e6:92:ff:de:
ed:f7:c7:17:4e:f8:19:f4:aa:cb:48:cc:d4:48:bd:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:7A:2D:6B:D1:04:56:4B:AA:7D:70:33:D6:14:03:57:BB:FF:4E
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fd:44:03:46:4a:13:e0:7a:1b:6d:ae:c9:e0:35:ec:d6:09:
83:49:4d:25:8d:c4:ef:9b:12:37:48:73:89:da:23:28:c5:b1:
43:f2:3c:89:16:9e:e1:35:bc:00:6b:cb:78:77:99:21:6f:77:
d5:4a:c3:0d:4c:b5:f0:63:d4:ab:91:f0:10:6c:d8:9a:ec:b3:
9c:04:39:2a:44:58:f7:5e:d0:c2:2b:43:93:33:2d:bf:2f:6a:
96:31:81:0d:80:47:9b:8d:b5:fa:55:65:16:ff:26:3c:d3:75:
15:87:a9:f3:e2:48:ac:a5:31:5b:50:cb:8e:d5:f7:8d:bb:6a:
be:fb:fc:99:60:56:2e:8f:cf:0d:5e:1a:6e:6b:50:2e:3e:09:
19:4c:56:29:3c:02:a6:db:25:19:f3:46:ab:ee:50:94:b0:62:
29:0b:1d:d5:f0:f6:60:20:16:50:72:16:51:4d:58:d8:b1:9a:
1f:75:41:ee:16:d4:dd:0a:23:04:f9:f7:d0:d9:74:89:48:de:
46:15:13:f1:24:8c:7f:54:fd:ec:76:5c:97:e6:09:40:ca:be:
08:58:8c:ce:b5:70:ca:bc:1b:50:09:0e:6e:d8:04:76:05:bf:
4e:08:ab:96:d3:1c:e0:7e:bc:9f:7b:c2:06:d4:a4:91:a7:fb:
ac:ad:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:41 2025 by rpki-client