Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: APMd00tpC7gOPv7SGB6JHM5kZ9PASbWkFmnmgkM5YvA=
Subject key identifier: CF:B5:8D:6A:A2:58:1E:0C:8B:31:00:80:83:C7:BE:62:5C:FD:0D:9F
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 019A4E866E4FC92F0E271237D42F94D56D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 079C
Signing time: Tue 04 Nov 2025 11:00:24 +0000
Manifest this update: Tue 04 Nov 2025 11:00:24 +0000
Manifest next update: Wed 05 Nov 2025 11:00:24 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: Y0O1Sq3hda/xhIMr1tWSIzumTbRl43QFjTuqMn4YeZo=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6e:4f:c9:2f:0e:27:12:37:d4:2f:94:d5:6d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Nov 4 11:00:24 2025 GMT
Not After : Nov 5 11:00:24 2025 GMT
Subject: CN=cfb58d6aa2581e0c8b31008083c7be625cfd0d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:80:1e:eb:7b:21:9b:82:1c:69:66:48:ff:
b4:d6:c4:2f:ca:28:11:15:f5:ae:0d:d2:11:7f:54:
cd:11:11:b2:9e:54:71:2a:87:7f:69:87:52:86:59:
eb:4b:9d:7a:c1:96:c3:a2:59:ef:25:c1:aa:14:1f:
ae:fe:9d:b5:9b:6d:7a:21:35:6b:01:44:28:59:22:
aa:bb:a1:66:6d:70:ff:a8:f8:46:cf:fc:d1:f1:94:
51:65:0a:0c:e3:57:70:ef:92:20:2e:50:e5:c0:65:
9e:ad:26:c3:fd:3d:ce:42:8f:5b:e0:c7:4e:96:86:
2a:8a:33:fd:59:39:7f:32:35:a9:24:cc:2e:f7:1f:
56:e9:f1:c6:dc:d6:15:f2:a7:90:df:0b:1c:f4:1c:
43:05:5f:6f:8f:69:18:b3:cc:5c:aa:85:ee:54:73:
e8:59:c3:ef:62:50:d1:66:18:18:9c:d9:46:de:3d:
62:ea:35:c5:1e:1b:bf:55:f4:1c:86:f2:8e:ef:ae:
bb:4d:9a:3e:69:33:aa:29:be:bf:eb:22:e3:41:9d:
77:ab:4d:53:85:40:c3:db:72:8c:db:e6:84:75:ce:
cf:56:32:c7:e4:fa:97:42:dc:0b:ad:98:a2:5d:0d:
9c:7e:51:58:b5:94:18:45:a4:d0:da:ed:6a:e1:b8:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:8D:6A:A2:58:1E:0C:8B:31:00:80:83:C7:BE:62:5C:FD:0D:9F
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7a:9d:e9:cd:8c:d9:91:84:9d:b9:3e:4d:78:6f:1d:25:7b:
75:96:33:2c:e3:46:63:cc:77:27:00:c9:6b:c8:94:7c:fb:c5:
59:2c:50:a0:0d:a6:ee:51:dc:3a:27:27:04:79:07:08:fe:07:
fd:0a:a3:e1:83:6c:8c:7b:16:1a:64:24:1f:27:3a:c6:3f:ae:
31:c6:04:3e:f0:b9:5a:19:32:21:ad:81:88:62:8f:a8:ba:46:
4d:78:c6:fe:fb:63:3d:0b:3a:8d:1a:39:bb:03:23:03:83:2d:
77:05:1d:f6:0f:41:fe:22:15:10:3e:35:01:31:97:ec:ef:8f:
76:41:61:c6:43:26:5c:ae:a2:f6:60:61:53:75:10:e9:ef:8a:
6d:4f:72:11:dd:d9:46:2b:61:7e:87:f5:42:39:4a:01:d6:48:
af:d0:ff:cb:fa:a2:a5:13:6b:69:d6:7f:95:52:46:f3:df:9b:
3e:b1:12:de:89:d8:35:97:ab:c8:1a:37:85:ae:77:f8:4b:72:
4e:fd:fc:40:6f:97:e8:22:48:79:de:33:8d:20:64:e9:f6:9c:
ea:f9:6f:84:43:f4:a9:cb:7f:48:03:9f:a3:2c:5b:0f:1d:8f:
72:92:29:34:d8:af:b5:5e:b7:41:04:f8:8a:13:7f:0a:a7:7b:
b2:7c:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:15 2025 by rpki-client