Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: bsOL9v3iLPuZfX/gRdu9fxzYHTL4NFYVq+/7qOM+/6o=
Subject key identifier: CE:10:8D:D9:01:BB:D7:E8:5E:55:26:1C:CA:11:35:00:63:D6:FB:CD
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019A533F831031065DA6C1A21B236F516EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 020D
Signing time: Wed 05 Nov 2025 09:01:02 +0000
Manifest this update: Wed 05 Nov 2025 09:01:02 +0000
Manifest next update: Thu 06 Nov 2025 09:01:02 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: eHVKde2IlNi5s8xOKrdvGPnqLwA69+0l8ujvL33aJIk=)
2: Zwspllzg46eGGBAmk75fKGUNIMs.roa (hash: SP7acjr2fc/Seb508pgEvQAcmNKQjk7dz5FLGa5z8Eg=)
3: lWrjnOhkdLngH_rNw8_j4YqaRQo.roa (hash: K4bxS+l7j2oByKFzgDdI5RTjLvC4BrOSJXUtlpmQdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:83:10:31:06:5d:a6:c1:a2:1b:23:6f:51:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Nov 5 09:01:02 2025 GMT
Not After : Nov 6 09:01:02 2025 GMT
Subject: CN=ce108dd901bbd7e85e55261cca11350063d6fbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:b1:c9:0a:bd:55:f6:18:6a:2d:7d:5c:92:
12:80:26:57:08:33:bb:e4:30:ca:78:bb:7a:47:e4:
0e:16:43:2b:dc:b1:0e:67:38:9c:8e:10:da:94:6d:
e4:1d:dc:97:cc:30:d9:ae:a3:dd:be:d9:c2:21:97:
38:0b:f1:4c:99:51:36:07:d5:bd:95:21:ba:28:a8:
ab:c5:e1:ef:ee:bf:91:70:1e:02:f3:fd:ba:aa:71:
c3:7c:14:41:b2:aa:79:e3:2c:72:aa:ad:da:f4:cc:
e2:5c:b1:8d:4b:c6:1c:67:15:77:5f:a4:ad:1b:8a:
47:ad:49:fb:85:70:a7:a1:1b:0b:cd:34:43:c8:99:
2a:d7:90:cb:93:2e:1e:98:62:a0:98:c6:9c:52:e7:
36:e1:94:d3:c9:06:d6:9a:54:8c:aa:8a:2c:85:35:
5d:d9:64:cc:b7:b6:4f:aa:88:39:6f:e6:72:3e:c3:
7f:ea:fc:a9:ce:11:87:06:b5:37:e8:75:08:41:e9:
4f:65:58:3e:24:cd:aa:76:36:12:20:24:fb:7a:30:
22:ca:50:db:21:ae:e7:9a:63:ae:6c:6b:09:b2:4f:
7e:1e:a1:ca:ca:b0:a1:5f:9f:e1:ef:f7:a7:8c:08:
99:27:a4:78:90:3d:51:5c:24:06:cd:e8:49:ab:44:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:8D:D9:01:BB:D7:E8:5E:55:26:1C:CA:11:35:00:63:D6:FB:CD
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c1:ae:db:b2:17:71:9b:71:45:ab:f5:fb:e4:e0:42:0e:23:
b8:ca:42:3d:22:ff:f5:d1:57:a2:e5:65:5a:54:55:68:22:38:
a6:cc:63:ad:8f:a1:28:de:20:21:c9:b0:35:f7:5f:cb:31:a5:
6f:36:4c:b6:77:13:1a:37:05:21:64:64:ff:72:44:2b:67:f1:
e4:5d:85:81:25:67:6a:b7:3f:ea:d6:1c:81:69:8a:f7:18:7c:
df:42:7d:87:86:9e:57:5f:c3:b5:f4:1d:91:f8:bf:d6:7f:f0:
96:6f:ab:40:e5:21:7d:ce:6d:2f:7b:21:10:7f:42:a7:3f:d9:
95:61:30:8d:90:e4:16:eb:0b:21:97:78:45:89:65:92:dc:6d:
b9:96:cd:6a:ac:1e:45:c9:da:ed:55:68:5c:42:c5:53:f6:84:
d2:a8:ca:fc:e0:73:ab:9a:e9:9c:aa:df:a8:a8:bb:bd:7a:17:
5d:89:ee:de:84:b7:2f:b7:7d:06:b3:19:16:b2:95:54:35:6a:
1f:54:39:70:58:08:40:40:fb:fb:d6:77:9f:90:b0:2d:59:51:
d3:fb:3c:f5:a6:b1:b2:88:ee:d7:9e:75:c8:e4:a1:dc:e8:d7:
22:ad:9f:4a:b7:a8:91:76:25:2a:d3:5f:75:1c:f4:21:8a:c7:
d9:84:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:55:31 2025 by rpki-client