Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: hAVnvcmUvituIWkNmPx5eFkyIf31SRIZUj5iStcD8Y8=
Subject key identifier: E3:9E:00:B6:7E:04:B5:86:C0:A8:70:CE:0A:A2:15:FB:BF:93:8F:FA
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 0199FAD80FB943574B0B6201612D7BC619E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:27 +0000
Manifest this update: Sun 19 Oct 2025 05:01:27 +0000
Manifest next update: Mon 20 Oct 2025 05:01:27 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: jMgUgGFQ5dWUiOqkG+5x71jNNCdOk/uDntrXXLtn6zk=)
2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0f:b9:43:57:4b:0b:62:01:61:2d:7b:c6:19:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Oct 19 05:01:27 2025 GMT
Not After : Oct 20 05:01:27 2025 GMT
Subject: CN=e39e00b67e04b586c0a870ce0aa215fbbf938ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:de:8c:57:2d:9f:ab:5d:a5:d3:34:68:0a:
d8:df:9f:74:4e:4f:9d:27:11:f8:48:3e:33:21:b6:
96:42:d9:9d:b0:40:9d:8d:d5:39:9e:60:7f:f9:21:
db:1c:13:ec:f1:94:37:0d:b3:58:14:d2:74:2b:2d:
9a:fa:53:ae:35:ce:49:7d:d7:fb:46:20:86:09:90:
de:4f:ca:51:40:5e:12:94:f9:98:d9:c0:6e:e7:6c:
36:f3:eb:61:19:07:fb:65:a4:f0:32:88:b2:b0:80:
9e:91:c0:e8:d3:f1:2a:82:11:4a:0c:91:b6:e0:e7:
9c:39:0a:af:4d:91:2c:b7:f4:f3:40:f2:ca:ae:5c:
76:c7:66:a9:58:b9:c7:6f:94:55:17:c0:51:44:2e:
95:5e:20:88:0e:cb:5d:1a:5a:70:7a:91:9b:25:57:
1f:d2:82:a5:08:60:e0:c5:0b:d5:d8:45:f2:a7:a7:
d4:fb:fd:96:88:a0:90:1e:ce:d7:4a:86:4b:9f:05:
0e:d7:8a:7a:59:6d:08:c9:0b:e7:af:52:4c:5a:01:
c1:2a:31:d4:ef:24:44:e7:41:35:09:e9:97:5c:98:
4a:cc:e2:12:62:49:ea:fb:2b:91:a0:33:42:c0:d0:
d2:65:ef:d9:e7:5d:2f:9f:d6:5a:50:9b:36:24:59:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9E:00:B6:7E:04:B5:86:C0:A8:70:CE:0A:A2:15:FB:BF:93:8F:FA
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b7:c9:7b:9b:5f:ee:51:15:44:74:b6:93:d7:64:1e:6b:97:
c5:7d:91:4f:92:09:61:4c:b0:68:6e:b9:59:b1:97:89:f7:f8:
da:61:bc:ae:83:81:75:03:5b:44:97:19:fb:72:ce:14:28:58:
ec:9c:01:80:76:5d:35:a9:b7:45:51:bd:14:7d:ea:82:41:aa:
a2:ce:b5:8a:cf:39:f0:85:1b:31:b9:49:bc:79:64:2b:55:75:
58:cc:8d:68:85:a1:03:90:8c:0d:0b:b7:06:68:b3:d7:d0:44:
66:bf:68:c5:b4:cc:6e:be:a6:35:65:41:d7:d6:b9:78:fb:43:
13:3a:b5:d0:b6:a4:d8:6c:c9:54:ec:fb:8f:46:31:46:02:b9:
8e:d0:0a:34:dc:4b:67:64:e7:c0:56:5a:12:c6:2b:11:ba:29:
91:d0:54:03:f9:d4:be:93:98:66:c2:11:0b:db:ec:f6:d1:d7:
fd:0b:13:63:eb:c3:5d:3a:e5:d8:c1:e5:a1:b1:41:eb:92:1e:
cb:8d:73:ca:49:b9:e8:93:31:96:1c:d6:d3:34:a7:a6:78:a1:
fc:f5:d3:90:4a:8e:cf:a0:eb:05:af:5f:de:e6:58:c8:7b:a9:
86:1e:3b:4f:4a:89:5d:36:86:a8:13:6c:74:c3:14:3d:16:a2:
5f:9e:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:14 2025 by rpki-client