Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: y2ZO2pwJ7CZPUC0IOVVIc96NWSBkzFjuo7oVuBdErT4=
Subject key identifier: 80:88:84:9D:68:40:92:2B:EB:A1:DB:35:B1:77:9D:19:59:7F:04:EB
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 0199FC214901A511B4050755134C079BB12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 0641
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: Ae/9iYthJ7WknEvgdIAuUyAbPt3iREs7MelqGMAIZGc=)
2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:49:01:a5:11:b4:05:07:55:13:4c:07:9b:b1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=8088849d6840922beba1db35b1779d19597f04eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:de:ea:e8:95:8d:8f:42:64:ad:29:70:ae:
2b:31:dd:df:42:ee:c9:61:be:db:f3:c1:bc:da:ab:
87:5d:6b:79:34:71:2b:bf:e4:2f:16:0b:d9:13:3e:
64:f5:51:ee:b3:cc:0a:dc:3c:53:97:74:1e:24:31:
35:92:e6:69:a0:ab:09:ac:7a:4c:43:23:f4:f9:36:
46:9d:d1:9e:c7:dd:df:81:94:09:8e:0d:6d:5f:3c:
09:b9:42:40:e4:50:57:2a:5e:2c:9d:e8:79:48:ee:
32:61:0d:86:29:09:48:6e:a4:ca:17:66:be:b3:f2:
0a:05:a3:d3:65:b7:0d:b7:fe:65:ac:e5:46:85:5e:
e9:0a:2a:8d:7a:a5:78:5c:fc:dd:cc:0d:3f:80:f8:
d0:ed:bb:1b:aa:ad:55:33:bd:5f:9f:10:7b:1f:50:
aa:cf:17:0c:a1:8f:e6:32:f3:f8:4e:5e:e6:e7:37:
94:e0:92:67:d0:ad:40:5e:fa:52:ff:c2:1e:1e:d8:
ff:f1:67:c9:3d:fb:b9:00:2b:ee:d0:7b:c3:55:85:
b3:1f:99:93:fe:b8:57:b7:e9:30:0a:77:fe:01:36:
00:4b:4c:b9:4c:a2:3e:8a:23:d0:cb:1a:28:aa:cc:
04:c5:ed:8a:bd:a3:c8:19:76:68:0f:b3:a6:e0:d7:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:88:84:9D:68:40:92:2B:EB:A1:DB:35:B1:77:9D:19:59:7F:04:EB
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bc:69:bc:28:44:57:eb:42:ba:0d:01:f1:4b:87:46:e3:55:
99:52:8d:9e:52:cc:22:7e:de:78:4b:0e:e6:4c:19:55:16:54:
e7:9c:4b:29:ea:47:6d:6e:8b:ff:49:e0:6e:c6:c0:23:8d:36:
b8:95:35:b6:2d:8f:ed:cd:02:a4:14:43:33:e2:4f:45:ef:df:
9b:6d:30:68:cb:bc:54:e3:21:9e:14:5d:13:29:ee:23:1e:b1:
6c:8a:2d:32:74:a3:35:ea:04:98:ff:70:be:56:de:80:9f:90:
fb:c9:d2:a2:cc:40:c7:c8:93:da:5b:23:64:6e:b9:70:ff:3c:
37:0a:a1:45:fc:13:77:07:58:72:43:f1:ac:e3:fc:02:3e:ea:
05:f8:fe:72:58:49:02:f4:1d:e9:7f:b0:ef:19:b4:bf:19:09:
20:5e:09:62:81:75:bc:0a:74:56:ff:e9:44:1b:65:a2:6d:be:
fa:f2:35:d2:8e:3e:31:15:6d:7b:91:17:a8:61:e0:4c:1e:da:
29:98:e6:87:7f:75:5a:1c:e2:d2:bb:6e:73:9e:50:f0:4b:ed:
1d:35:77:47:22:92:61:15:84:3e:2c:12:9b:fd:5f:66:64:25:
3a:5e:47:ac:56:be:78:41:78:61:cf:3c:d9:b8:e2:53:1e:e6:
26:79:f1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:12 2025 by rpki-client