Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json)
Hash identifier: l1GGskoND/EbLPu2xemXwrOrczlVzGwLliVLaMQDOb8=
Subject key identifier: AE:8C:7B:11:5C:BA:BD:B1:1F:D7:9A:3D:FE:CB:18:57:0C:60:80:85
Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Certificate serial: 019A50E39F65E5D0A2A897C55A9831ADA0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
Manifest number: 0ACA
Signing time: Tue 04 Nov 2025 22:01:25 +0000
Manifest this update: Tue 04 Nov 2025 22:01:25 +0000
Manifest next update: Wed 05 Nov 2025 22:01:25 +0000
Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: PKvs3F7QFcAoYEMKcA4H8f/5UjxSJ3y0m85GlKMWkCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:9f:65:e5:d0:a2:a8:97:c5:5a:98:31:ad:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688
Validity
Not Before: Nov 4 22:01:25 2025 GMT
Not After : Nov 5 22:01:25 2025 GMT
Subject: CN=ae8c7b115cbabdb11fd79a3dfecb18570c608085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:45:45:44:5d:97:a3:aa:8e:89:f7:70:f5:
d0:64:12:74:05:16:2f:07:ca:30:d1:75:63:10:e2:
3b:0d:37:76:b0:2b:52:f1:6b:ce:fb:dc:65:26:fe:
64:75:c3:b1:e4:60:ed:24:0b:75:6f:f9:cc:94:79:
23:52:ef:a9:df:69:57:f0:3d:1e:24:25:b9:99:61:
37:25:61:1c:3d:97:d8:87:c5:33:45:36:c6:10:be:
56:ca:67:9a:74:12:50:2a:8e:c8:9a:a7:96:55:0b:
36:be:44:88:75:c6:dc:e5:c8:2d:07:8a:62:aa:16:
b8:ed:48:ba:fe:53:6a:74:8a:b0:88:31:9b:11:1e:
5f:0b:ae:ab:67:9a:ac:8c:1d:8b:28:fc:97:69:e6:
cb:70:95:6e:aa:23:8e:41:00:e6:9b:87:e0:b6:8f:
37:34:76:aa:7f:c4:c6:10:da:48:0f:75:6b:b4:b5:
5f:21:38:5b:96:f4:0b:34:a1:19:f5:df:46:f6:95:
b9:f8:74:56:e4:93:c8:ce:64:0e:63:de:76:2b:f9:
63:be:49:e8:eb:de:1f:44:3e:22:6a:b3:f9:bf:61:
a8:71:97:28:35:83:55:fb:99:fd:00:71:40:72:b9:
97:3d:06:69:2e:b8:0e:25:11:a1:9f:0d:56:0b:aa:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8C:7B:11:5C:BA:BD:B1:1F:D7:9A:3D:FE:CB:18:57:0C:60:80:85
X509v3 Authority Key Identifier:
keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:bd:74:31:1e:16:05:a9:6a:7d:80:0a:c1:f3:d5:8d:9c:
38:25:a0:3b:a4:ad:7e:84:48:74:14:d5:ce:ca:32:ca:c7:01:
99:03:35:8f:95:1d:40:f0:01:ad:0e:f0:ef:48:7e:b5:12:ab:
41:bc:f0:d9:b4:dd:94:98:1c:ac:6e:08:40:d5:c2:fc:e3:d8:
28:0f:6e:26:bd:5b:00:9e:e0:ca:63:d5:8b:f9:ba:9f:46:92:
8c:7f:b5:5e:f5:7c:82:0a:15:27:1a:55:16:2a:86:cf:a2:95:
d0:20:86:b6:bc:7f:f9:54:d5:18:7d:fd:fe:ab:a7:50:3a:9d:
43:6f:65:93:e8:76:69:32:b4:37:45:18:f2:c3:39:0f:12:0c:
02:10:c8:6b:7e:9a:31:7c:c0:20:f9:44:ce:2e:ab:f2:ec:b9:
6e:d4:0a:c1:72:be:8f:98:87:a6:a0:d6:f7:99:04:1a:d8:45:
95:33:44:bc:45:c7:8c:08:98:b8:0a:1c:e0:e8:4f:ef:df:41:
14:17:99:c2:f4:2a:79:2d:bd:38:dd:03:3d:8b:39:7f:75:1a:
20:b4:25:7d:63:b8:d5:84:eb:31:99:e5:ed:4a:8c:d7:8c:2b:
06:da:d9:5a:d9:68:33:fa:1a:6c:21:17:ff:ad:7b:e5:5d:42:
33:8c:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:08:55 2025 by rpki-client