Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: PQbpmKu2e9kulKcNo0dwsvuGFHZaTNKrPUdtCGBmqKE=
Subject key identifier: CD:7B:19:8D:39:5A:AC:CB:EE:6A:CA:D8:AE:A5:95:D7:5D:AB:7C:3C
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019A5119BBDFFE9605BC7AF61224FB127588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0DA5
Signing time: Tue 04 Nov 2025 23:00:32 +0000
Manifest this update: Tue 04 Nov 2025 23:00:32 +0000
Manifest next update: Wed 05 Nov 2025 23:00:32 +0000
Files and hashes: 1: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: 6jVU9PWf6u72ZRhRFk9T3WqDNeXkPQ4uCjZ6giqcvl8=)
2: d_GxW2d1XGEYH2UR9fC88UUW3QY.roa (hash: uor8f2a3ITsSo8ZIn5M2P4KmPLaok++1jFjqHJFf6Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:bb:df:fe:96:05:bc:7a:f6:12:24:fb:12:75:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Nov 4 23:00:32 2025 GMT
Not After : Nov 5 23:00:32 2025 GMT
Subject: CN=cd7b198d395aaccbee6acad8aea595d75dab7c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:65:58:82:ca:a5:7a:f5:e9:b6:fc:89:8a:65:
4f:2e:20:88:e3:45:3b:22:2d:3b:58:90:65:d9:8d:
0a:f6:07:41:fa:46:21:f4:28:2b:70:13:dd:b9:fa:
19:91:eb:ba:98:0b:27:55:ee:ed:c9:57:1a:f0:d6:
42:cd:70:80:71:37:d6:56:18:b5:a8:d2:4d:9e:35:
bc:71:f7:ab:75:ea:1d:06:c7:95:73:3c:09:ff:ce:
77:df:a2:19:74:1e:f2:3c:ec:07:9d:db:4f:18:aa:
5a:66:bd:79:9a:b2:8c:b4:60:60:e8:52:1a:24:b3:
2c:9f:b3:dd:fd:5d:8e:9e:89:7f:1d:eb:28:c8:ea:
e1:05:32:94:ef:84:dc:fd:73:14:da:63:7c:72:1a:
8a:2a:33:b2:05:2e:78:ad:53:1d:a6:01:36:e1:88:
2f:66:71:65:0c:20:8b:f3:56:45:2e:6b:e3:51:f3:
33:f4:ee:fb:12:3e:2d:4e:03:c1:1e:b1:9b:ab:21:
05:dd:7b:1d:32:72:de:bb:77:06:11:eb:db:86:00:
84:44:6c:c5:59:10:21:71:1c:bd:2f:b7:77:00:bc:
73:34:4e:94:52:a5:68:b8:8a:1a:fb:8e:18:29:13:
6b:2c:c1:b6:81:b6:6f:14:9a:c0:4e:99:7a:1d:aa:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7B:19:8D:39:5A:AC:CB:EE:6A:CA:D8:AE:A5:95:D7:5D:AB:7C:3C
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:52:19:ad:d1:90:30:5b:ea:f5:af:3d:71:8c:82:4e:f4:
9d:60:ff:0a:40:0f:9d:98:e4:91:5b:32:5a:c7:95:d7:1b:f1:
25:ec:23:7d:7b:bd:54:a1:8f:bc:be:aa:7a:f6:69:3f:aa:2d:
cc:84:a8:c6:e2:e5:7c:a3:d0:c2:6a:c6:f6:04:b2:c7:4e:b9:
1b:36:76:77:9c:d0:5f:79:6a:63:ba:a3:5e:76:e4:e3:ab:92:
b4:5a:ab:56:bb:89:bd:2f:5b:ea:cb:42:a6:ae:0f:49:2c:ee:
94:24:63:6c:9b:85:bb:18:03:74:b9:12:87:d3:63:de:ec:7f:
43:63:7c:4b:3b:9f:93:40:63:55:73:61:40:4f:c6:30:9f:94:
c5:ea:21:fb:cd:55:2d:63:86:2b:c7:2e:dc:15:b2:93:a0:37:
59:7f:42:97:e9:93:cf:ae:a1:b5:28:d7:74:6f:a2:b1:48:ee:
4a:61:b9:50:a8:9e:2e:c4:c9:f1:be:9f:5b:7d:f2:ab:f3:ae:
9e:02:d1:00:27:61:a4:f9:b1:9d:db:4e:c8:1d:6d:38:08:96:
2c:e6:75:48:81:77:46:3e:61:b0:63:1b:04:a3:b2:39:bd:a4:
28:62:e0:c9:1f:b5:cc:c8:5a:16:74:9d:a8:7a:8e:c7:30:d8:
e5:18:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:33 2025 by rpki-client