Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: KHNH1VyrpdFJYpgCrMO4IcozDrOmTCdOV6vFyBpBh9A=
Subject key identifier: 26:00:32:44:24:06:DE:21:B0:8D:C2:D8:29:93:32:26:F1:A2:EC:23
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 0199FCC65E1BB61AD124BB596ADD020D2FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 0F49
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=)
2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=)
3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: DFwKxhaWUKTI6lNrIAj892pVQ0Q8sR+rwq4/+AYZHCk=)
5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5e:1b:b6:1a:d1:24:bb:59:6a:dd:02:0d:2f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=260032442406de21b08dc2d829933226f1a2ec23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:1a:70:91:c0:15:a0:c8:d0:8d:a6:66:80:
94:2c:78:6b:ce:9e:d8:34:55:80:34:82:66:b6:a3:
20:9d:dc:76:c9:ad:c9:0d:8f:f4:af:f8:33:96:11:
20:36:ed:73:23:b9:69:fc:88:99:06:60:33:67:6e:
e8:af:eb:89:73:a8:6e:c3:1e:fb:32:b6:ca:e5:e4:
94:27:0f:33:88:10:02:59:5e:d6:77:9c:58:af:39:
33:2e:6f:5c:6d:01:ce:a8:30:86:b6:9f:34:4f:ec:
a4:b2:a1:3e:ae:98:7f:b1:bc:00:e0:b8:9c:80:cb:
29:a9:e1:39:b9:9b:78:0a:d2:88:e3:18:fc:fe:51:
e9:f3:91:d9:69:58:d6:d0:73:ad:b4:50:02:d5:bb:
11:ef:d7:c1:8e:e7:31:7a:53:ad:6a:c3:3f:d9:f7:
f3:f3:21:22:aa:7b:bb:1e:2b:fa:63:f6:d4:71:6c:
af:af:5c:62:8f:0f:e3:77:2d:70:51:18:0a:37:f9:
f5:28:f1:e9:c8:68:4c:01:0d:b2:e0:2a:f6:0d:dd:
40:56:60:e5:57:e5:56:be:0a:74:d3:24:fa:8a:57:
4e:28:b5:01:ac:64:db:bb:7b:ec:be:e5:bf:6d:7a:
81:04:5e:80:8e:4f:53:35:cd:8a:2e:d4:62:f8:f6:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:00:32:44:24:06:DE:21:B0:8D:C2:D8:29:93:32:26:F1:A2:EC:23
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f5:e6:d4:27:7f:f8:6b:5c:26:ba:23:4c:e6:96:8a:2e:5a:
93:58:9d:44:66:5d:9e:de:8a:7c:0a:32:c5:b1:c8:ee:04:b5:
e0:c8:ce:1d:22:22:48:f2:67:7d:4d:15:43:6d:0f:62:a5:05:
27:ee:ec:11:ff:c5:84:5b:51:da:16:9f:94:d7:cb:1a:87:c2:
6a:bf:0c:1c:d9:24:17:bf:05:77:1a:c2:7a:08:75:cc:4a:b6:
9b:90:64:34:0d:c0:b9:ad:ce:34:35:cd:fe:4c:3a:ea:01:db:
5c:87:e3:a0:72:a7:af:f5:cc:91:75:3c:3f:c1:65:e7:fb:11:
57:6f:be:c2:25:59:ae:de:61:5d:94:c8:e8:af:18:ad:66:74:
b7:1e:f4:db:1c:b7:71:ab:23:90:79:ac:2f:ae:c5:51:b4:e0:
d4:97:cf:e5:d7:12:2d:6f:12:36:63:a7:90:d0:04:23:c6:7f:
4b:9e:af:af:54:5c:84:82:c4:0a:6c:65:01:34:ac:2b:ce:14:
ef:b9:73:a7:28:2f:ae:62:c1:f3:c1:94:31:d3:94:ae:70:39:
7f:ea:bf:79:44:78:e0:0a:41:52:0e:7e:d9:a0:4b:f6:87:e5:
13:f3:81:02:77:f6:d5:0b:79:37:e7:af:93:1b:b7:c4:95:6b:
36:3f:49:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:48 2025 by rpki-client