Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: LOv1Z9Ik7WMFhEMN4oAEmKoA0IvvHSys4hYLUTfHa9k=
Subject key identifier: A1:05:AD:A8:BB:BD:B3:55:BC:7E:92:2E:28:51:35:86:1D:A2:8A:FB
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 0199FEEBBD16ABA2E01C31AD3540039BAD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 00:01:26 +0000
Manifest this update: Mon 20 Oct 2025 00:01:26 +0000
Manifest next update: Tue 21 Oct 2025 00:01:26 +0000
Files and hashes: 1: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (hash: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: j3Nx+gPMrrw7MlAKTOuC8A42OVO7s+toKRS0b5uLqGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bd:16:ab:a2:e0:1c:31:ad:35:40:03:9b:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Oct 20 00:01:26 2025 GMT
Not After : Oct 21 00:01:26 2025 GMT
Subject: CN=a105ada8bbbdb355bc7e922e285135861da28afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:6a:bc:be:4a:10:34:3c:fe:8d:02:d9:80:
77:3d:2c:16:5b:a5:b9:27:c4:52:59:48:85:4a:1d:
91:4d:c0:00:b8:eb:58:2b:ef:6e:1b:fa:b2:6d:6c:
51:18:c0:9c:4c:f2:4b:72:cb:e6:76:f5:c6:39:09:
3e:f2:e1:3f:1b:f9:47:88:39:98:d1:1e:d4:d1:59:
c6:9b:11:4c:50:3e:cb:9e:fb:02:a3:f7:cb:b7:0c:
0e:fd:a5:8a:bb:1a:e1:c9:86:97:49:c6:a1:c7:8a:
13:11:79:cf:8b:99:14:60:ae:5f:7a:b4:27:fe:7a:
cc:02:fb:1b:6a:8a:cb:38:4b:3b:60:48:c9:62:c8:
ec:14:65:96:f5:30:d7:8a:a9:8e:c7:5e:36:64:9d:
6d:c5:4b:b5:1a:aa:5d:ca:bc:91:c0:77:71:23:32:
44:1c:f7:6b:71:dc:fd:7f:ea:e1:8c:2b:fa:82:e4:
64:aa:aa:a7:f5:d4:45:f9:87:d3:7e:61:8d:bc:7c:
88:58:b7:b4:e3:4c:46:99:ff:1e:a8:28:ee:d0:7c:
82:66:7e:89:8b:64:cb:68:95:ee:8c:26:9c:3e:fb:
35:a7:eb:5e:56:9c:43:eb:b2:9f:f5:8d:dc:81:8f:
06:53:9d:aa:b4:56:b7:a3:df:75:ca:ce:94:f3:48:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:AD:A8:BB:BD:B3:55:BC:7E:92:2E:28:51:35:86:1D:A2:8A:FB
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:65:5d:d1:6e:81:9e:90:e7:93:9c:88:3e:5b:9b:dd:07:d5:
55:e3:38:b1:7e:b0:99:cd:54:8d:4a:bf:0f:00:f9:32:ee:bf:
92:c7:1e:13:ef:75:cc:df:b8:e1:8f:78:44:10:a5:0e:0e:3a:
ed:c2:98:ef:ab:67:83:36:3a:e0:ec:51:30:8d:7b:a3:58:1d:
df:5c:d5:b4:72:c2:10:12:90:40:ee:b7:c7:fc:06:fe:47:7c:
39:83:3f:c0:da:e4:15:a3:be:ba:07:9b:c5:ad:2a:f8:8a:ca:
52:87:a6:41:6d:0a:27:f5:c6:9a:04:0f:17:fa:27:db:b8:e4:
49:7a:bc:13:25:8e:57:e1:ae:0a:a7:d6:48:c2:4f:c4:5d:76:
56:52:48:45:a4:24:f3:75:85:80:4c:7a:dd:01:f9:8e:ea:4e:
29:2f:a6:c8:13:69:8c:fe:ec:6b:6f:eb:cd:8e:b7:91:5f:32:
13:31:ba:db:95:a2:e8:5b:41:47:6e:1b:a9:ce:c3:77:3e:e6:
cf:b8:f3:e7:ba:07:a8:52:2f:49:56:ce:97:cc:56:6a:20:1b:
89:36:62:70:9a:9b:c8:5e:02:cd:af:9e:ce:a0:04:9c:d9:f5:
4e:10:4c:91:2c:b5:7a:8e:a2:d2:a5:19:35:26:ab:3b:3f:e1:
d6:aa:b9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:09 2025 by rpki-client