Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: WnlIF/dXD14n2lSMjTjItsYx0Fb6mo3Sd2sZu20zq78=
Subject key identifier: 85:B2:5A:B9:EF:26:86:53:47:92:34:FC:AB:E4:57:51:D4:97:BC:26
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019A54516F6E55927C998A2EE8EE8641A5D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 02DE
Signing time: Wed 05 Nov 2025 14:00:14 +0000
Manifest this update: Wed 05 Nov 2025 14:00:14 +0000
Manifest next update: Thu 06 Nov 2025 14:00:14 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: fcVWSXESWbHdp0uGZJsznDF2byU6jMdiCcPO3c5Q33g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:6f:6e:55:92:7c:99:8a:2e:e8:ee:86:41:a5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Nov 5 14:00:14 2025 GMT
Not After : Nov 6 14:00:14 2025 GMT
Subject: CN=85b25ab9ef268653479234fcabe45751d497bc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:78:ae:40:35:17:f7:50:b7:71:43:c9:eb:
b0:09:a5:0f:6a:a3:0f:69:2e:4e:8c:51:5e:09:47:
58:2e:4e:09:6f:17:ef:7d:15:2e:a6:ef:73:cb:1e:
d1:6e:db:49:1c:41:c1:35:89:3e:1e:93:d7:0b:54:
b5:b6:ae:23:a6:53:c9:2b:3f:dd:1f:c4:7d:05:09:
05:fe:97:85:1d:7e:70:f0:af:78:42:40:af:00:e2:
6c:ad:57:02:79:ff:10:5d:33:4f:e2:ab:4d:e4:62:
b7:c5:84:df:4c:36:78:1f:ce:71:8f:5c:ac:b5:f2:
94:09:d4:2e:b9:09:84:e7:a3:25:84:a1:0c:56:f2:
d5:db:11:06:8f:65:46:06:80:34:fe:ad:42:73:e1:
80:7e:34:9b:df:5a:d3:f2:9a:c4:d1:bd:a4:a5:66:
a1:ae:0f:48:88:76:e7:e1:61:a7:1a:d0:cd:3f:f7:
8b:2f:1a:ec:84:52:07:8d:c8:dc:8f:53:7f:d7:22:
27:e0:9b:3b:17:04:6a:37:10:41:89:3e:a5:51:a6:
56:41:79:31:04:c3:9c:76:dd:6e:4a:92:85:6a:f3:
bb:dc:8d:bb:cd:b6:ef:f6:91:ad:0d:c7:77:34:65:
96:66:2d:66:32:4c:bf:8a:6b:f4:58:2f:54:ee:e8:
7c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B2:5A:B9:EF:26:86:53:47:92:34:FC:AB:E4:57:51:D4:97:BC:26
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:be:02:86:19:55:c7:b7:73:d6:ec:b0:58:e9:3d:62:3c:57:
0f:65:bb:c3:55:e2:1e:6a:94:41:f1:9a:8b:f3:87:ba:2d:ca:
ef:a5:2e:28:1b:33:c3:7d:c2:82:f4:76:bc:94:90:a1:35:db:
95:8c:d5:86:8c:b2:c7:4e:10:70:36:6c:51:7f:7d:bf:57:e6:
ff:97:8f:e1:2d:da:59:2e:e3:c8:ed:36:dd:3e:93:27:b6:49:
60:11:ba:c8:fa:14:84:99:18:63:91:3d:3d:95:3e:de:ea:82:
1c:0a:84:7d:1e:31:23:0d:93:b3:f1:c4:be:65:74:e6:c1:da:
cb:ab:55:e9:79:9b:29:c0:0b:1b:b4:10:70:10:71:ae:da:5b:
22:43:2a:77:78:c3:f2:26:84:89:a3:f0:a4:ec:7c:97:6b:dd:
39:54:ab:b3:99:f7:d1:68:4a:58:0c:93:8d:7f:09:b1:d5:97:
77:b1:24:e6:0b:37:96:b2:36:f3:b8:ed:25:3f:f6:97:6e:e9:
92:49:04:6b:8a:bc:14:83:ac:1d:7a:64:59:50:a9:d6:7e:02:
47:1d:49:ac:0e:98:e1:72:a8:39:d7:c6:f1:65:8e:5a:89:59:
40:44:16:a6:1d:30:e4:c1:b4:54:93:01:b8:cd:20:5b:cf:17:
11:a9:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:01 2025 by rpki-client