Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier: JyAo8FZgSXwUhTfKQ991vAKaP1VNKEEFTiRufCth6TI=
Subject key identifier: 72:9F:97:BE:BF:D3:1F:E0:1D:F7:CD:1D:FF:21:09:A4:A8:7B:E0:D7
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 0199FC589B967CF82247B7597C4D150F28EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number: 0851
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: _QBZZm_j6pkBqG7ULTSKSuYA6m4.roa (hash: J+NZ6+xHvgyZBnOnyLbSKcqDP+9z+FmiBI8TDK00aCo=)
2: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=)
3: jpN0hvuTgqmocPyed3qkYPDHQdk.roa (hash: k+R6t5Hzmk9H5O7QG4Q3cEOcrN/jFXUPR3aXqZ2Jg1U=)
4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=)
5: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: 4y6k6CbStqQ1SFFVkfn5CvvffnT0chQUCkA4yCfIUfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9b:96:7c:f8:22:47:b7:59:7c:4d:15:0f:28:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=729f97bebfd31fe01df7cd1dff2109a4a87be0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:27:53:bd:e2:c3:99:4f:ae:6a:04:33:ed:0f:
21:7e:e2:39:65:94:5e:52:4f:c5:12:ed:2e:a5:97:
d1:f2:8b:e1:6d:ce:dd:25:ad:6c:08:68:f4:27:dd:
0a:ce:5f:05:09:9d:7f:a5:ed:67:e5:08:d6:56:29:
7d:0c:75:b0:9d:d5:52:44:2c:aa:0c:2e:eb:94:cc:
29:d4:05:b2:a2:0d:91:0b:3d:e4:35:e6:b4:79:87:
2b:c1:af:9c:59:a8:5b:c7:f3:c2:86:8f:41:86:f3:
73:e8:4c:da:de:1f:b0:37:3e:85:68:d8:17:5a:b9:
f6:5e:4b:05:6e:6a:fc:ad:1a:ff:e7:53:57:88:46:
15:4c:8b:02:96:3c:45:e4:d4:71:e4:c9:0e:e1:63:
9d:71:e8:0a:ad:5e:5b:f8:bb:ac:7f:8b:cd:28:35:
82:5b:c2:a4:ac:02:55:19:83:59:ea:29:65:59:32:
6d:05:1a:07:1a:a3:bf:90:6c:5c:09:e2:c6:6e:e6:
d3:86:9a:6e:b7:00:d7:b5:8e:be:80:7c:93:1c:20:
19:ef:e9:00:a1:50:61:a9:79:92:92:5d:2e:b5:6b:
e5:4f:a3:a7:24:21:4e:97:c4:a4:1d:eb:2c:69:bb:
8f:7e:c2:66:45:8a:ba:77:fd:8c:5a:15:e2:15:7b:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:97:BE:BF:D3:1F:E0:1D:F7:CD:1D:FF:21:09:A4:A8:7B:E0:D7
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:34:ee:5d:80:a3:95:b5:20:ec:bb:46:cd:72:7f:a1:a3:8d:
74:6f:3e:53:f2:52:77:61:f7:a2:d8:a8:78:01:6b:a8:56:3d:
b7:2f:f7:70:4c:53:fe:4f:9e:a3:bd:a4:84:0d:2c:25:a4:2e:
c0:02:45:c9:48:4b:4e:df:4f:a4:34:63:f8:f3:9f:3a:c4:a0:
5e:1d:a5:80:8c:54:87:fa:f9:2e:e7:fc:9f:99:d9:49:ed:06:
1e:0b:a4:88:ac:e3:bc:6a:dd:6b:9b:45:e9:54:ee:ee:1f:31:
79:3e:1c:48:05:07:e0:f5:53:bd:42:7b:7f:0e:a4:35:fc:9a:
1f:6f:5f:d9:3b:2e:a0:90:68:e9:d4:44:7b:73:88:35:c9:ee:
7c:ec:fd:18:d7:9d:fc:27:48:21:50:bd:3e:08:00:1f:32:0d:
09:f6:f7:d0:62:31:23:14:5c:28:24:a7:2b:59:bf:1d:3b:ce:
a2:4d:9c:dd:27:be:37:dc:82:13:09:62:f0:72:ea:e9:2c:c5:
59:51:60:9a:5f:98:41:cf:b2:cc:43:31:53:1f:00:f6:ac:e9:
ee:2f:63:f1:c0:29:f8:2a:8e:56:3e:6d:52:38:33:51:e8:33:
73:62:82:de:59:f6:3b:40:5f:dd:1e:5e:eb:ff:bb:ff:df:b7:
2d:63:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:01 2025 by rpki-client