Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: kbjc0PfmB5QgfhzpIrZRFWPLno3n1NWfnoBRBl7ZeJc=
Subject key identifier: 61:D1:AE:7D:C5:0B:0C:1F:9C:74:D6:FE:6C:66:EB:71:58:A2:AB:0F
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 0199FC585A8E43BB7D22FE8F5C05C5415547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 05C0
Signing time: Sun 19 Oct 2025 12:01:12 +0000
Manifest this update: Sun 19 Oct 2025 12:01:12 +0000
Manifest next update: Mon 20 Oct 2025 12:01:12 +0000
Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: hD9m6UoflGKOxpo2pj58eciTGE+S/a8mb3z2RiEETck=)
2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5a:8e:43:bb:7d:22:fe:8f:5c:05:c5:41:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Oct 19 12:01:12 2025 GMT
Not After : Oct 20 12:01:12 2025 GMT
Subject: CN=61d1ae7dc50b0c1f9c74d6fe6c66eb7158a2ab0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e1:f5:d8:e7:31:20:67:6f:98:50:54:9e:75:
a1:fe:77:2a:db:11:42:28:70:fc:89:02:a6:19:d9:
bf:c7:88:8d:55:92:6c:d2:b9:d1:a6:77:f9:46:52:
cb:ca:57:7f:a8:5e:5a:03:59:fc:3f:fb:d4:31:28:
af:a2:67:57:9a:63:b4:c2:82:a5:b1:42:14:18:cc:
e1:27:04:86:10:f7:48:45:80:78:2d:5c:98:fc:b2:
72:31:5a:bc:a5:e2:d3:23:1b:bd:25:1d:ba:1b:f1:
22:11:7e:9d:b1:d2:14:f9:08:26:25:22:97:04:73:
dc:a8:7d:e8:a2:c7:84:3f:9a:5a:52:87:59:9b:35:
cf:0f:05:68:26:e5:ab:4b:20:75:3a:f8:db:52:50:
64:1f:51:ae:c2:28:84:c8:2a:ca:f2:59:76:83:8f:
25:f8:7e:aa:88:41:cc:b4:08:e9:72:78:e5:ab:28:
f2:98:86:af:17:2b:9e:b0:1b:ec:d9:67:7e:5d:5d:
7d:7d:0f:7f:5d:02:89:42:51:22:5c:e9:c6:41:59:
04:9f:94:e7:6d:fc:db:03:c8:78:b5:2c:65:b5:97:
21:43:6b:4f:57:e5:f5:37:cb:26:23:2e:0a:7c:9d:
b6:49:6e:14:63:88:ff:88:1e:a2:61:36:a8:1f:dc:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D1:AE:7D:C5:0B:0C:1F:9C:74:D6:FE:6C:66:EB:71:58:A2:AB:0F
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:a8:67:d8:8f:6b:72:8d:5e:94:7b:7b:e5:ab:9f:86:75:
ce:fc:54:73:2b:1b:0c:f4:44:a4:21:bf:f9:12:e1:de:0f:3b:
14:34:f7:5f:74:41:cc:b7:d3:fa:3c:de:a7:df:e3:45:79:f7:
d2:1d:5d:a3:8c:e0:7f:ff:19:b4:19:c6:5f:80:bc:87:15:4a:
4e:1a:3a:4d:91:51:21:cd:6c:67:08:66:58:56:6c:6e:54:e0:
b2:29:6c:c9:c2:49:13:3c:f9:b8:38:7b:dc:71:95:5f:82:c7:
08:bd:b6:d8:d0:f5:01:ee:95:52:c8:5f:09:ce:de:f5:ee:32:
c9:f6:6a:de:3d:b1:28:3e:69:83:82:f5:98:3b:58:b9:56:27:
e2:4f:80:31:bc:a0:d0:bc:ea:39:b7:8d:1b:79:82:82:96:53:
6b:6f:33:f5:b5:ec:1a:72:8b:2e:8e:cd:a5:5d:5c:c5:5d:a9:
24:12:ec:93:35:72:fc:dd:70:6f:6b:79:67:ec:a1:79:fe:c1:
88:e9:b0:c4:15:2a:63:e3:d7:3c:c2:50:bf:ac:eb:4c:1c:14:
4b:2c:6e:07:e4:89:da:72:11:98:f5:dd:17:f9:c6:cd:9f:35:
25:b8:f4:ee:f0:71:b6:db:d9:8a:a9:bc:cf:a9:18:3a:21:f1:
f2:48:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:54 2025 by rpki-client