Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
File: xa0QdigFcZJWQLKu2jnMCXTAbOI.mft (raw, json)
Hash identifier: qBocnFgorJf41q4cRuixPG5ocZy4X6zeJpAVrT/vlmw=
Subject key identifier: EC:BC:49:D8:63:60:6F:42:B8:EC:3C:E7:C8:E8:56:0E:B8:47:2E:1D
Authority key identifier: C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2
Certificate issuer: /CN=c5ad1076280571925640b2aeda39cc0974c06ce2
Certificate serial: 0199FBB3609A33659C606BA809B0BEC65370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
Manifest number: 7B
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: TUdbI3fTIue2IS2nP7PyiMKvzpA.roa (hash: +rF1e9gIJIKIRSdOUzoKGO5Eq8f3G2LeMwZHkFAE720=)
2: xa0QdigFcZJWQLKu2jnMCXTAbOI.crl (hash: YljVOD9pxDb1b2BXTxFqSTC1y14SYn5m6npCLBpgoM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:60:9a:33:65:9c:60:6b:a8:09:b0:be:c6:53:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ad1076280571925640b2aeda39cc0974c06ce2
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=ecbc49d863606f42b8ec3ce7c8e8560eb8472e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:18:28:ac:b1:20:3b:88:97:7c:38:d1:6f:
a9:70:66:02:af:81:7f:52:5b:26:e7:e5:6b:57:3c:
80:86:e3:41:2d:8c:6c:fd:07:b6:6e:5e:1e:48:07:
3b:42:bf:bb:dc:f3:d7:74:7c:37:28:0f:dc:05:bd:
b2:af:c1:b0:2c:76:f9:de:b5:bf:f1:08:84:fd:c7:
f0:63:fb:a8:b4:76:5c:b0:c3:0e:0a:24:29:5b:2d:
cf:d5:c1:52:e3:e7:c8:fa:56:c4:02:8d:2b:e2:aa:
10:0d:98:e0:b5:37:ac:16:c3:f0:9d:ae:c2:3e:fe:
c5:cb:42:ad:c3:9b:8d:81:a1:55:9d:79:5a:b7:dc:
b8:47:3a:12:cb:f1:8b:31:95:66:a4:5b:d8:15:a2:
76:85:3d:0b:66:e0:ea:b9:0c:c7:a4:90:93:56:18:
27:b0:4d:29:45:dc:59:82:39:3f:2d:ff:92:a8:21:
b7:83:0c:e9:2a:75:db:3e:38:59:40:45:59:5f:a9:
c5:62:0c:46:24:fe:d8:df:c9:2e:aa:80:56:81:72:
b5:1d:8b:e0:10:43:00:ae:37:6f:eb:3d:0e:7e:94:
c0:af:01:64:89:09:dd:7a:3b:fa:07:89:85:ce:70:
f5:d6:24:65:58:74:8a:21:0c:19:60:8a:e2:5a:d0:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:49:D8:63:60:6F:42:B8:EC:3C:E7:C8:E8:56:0E:B8:47:2E:1D
X509v3 Authority Key Identifier:
keyid:C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:60:d4:51:5a:99:81:8c:dc:7d:7a:8a:5a:2a:9e:7c:dc:
c5:a8:02:2d:e9:5b:0c:4e:39:69:3c:ce:68:a6:81:57:e8:56:
ce:af:37:d6:02:f3:49:e9:33:05:58:13:8a:db:4d:cc:a7:c2:
2a:ca:cf:a5:6b:8b:24:0d:c2:3d:23:ce:8f:78:20:a5:13:b4:
e9:0d:80:cb:5e:e5:bb:86:fe:4e:e4:a7:94:54:cd:2a:50:26:
20:60:8b:13:12:eb:fd:2f:b6:0f:9e:d3:81:72:64:ce:dc:12:
35:40:a0:c5:dc:7b:6a:ea:48:2d:6e:a2:c7:8f:a0:5d:7b:94:
cd:46:5a:b7:0d:e7:02:03:db:14:ca:6d:da:3a:c3:28:ed:87:
33:5a:3a:e2:c3:7a:94:f2:c3:9e:da:5a:23:16:e5:3a:91:3b:
ee:fc:21:07:51:ed:aa:a7:f8:b9:fc:ad:b8:15:31:b5:24:83:
5d:d4:09:d2:46:92:00:79:48:6a:22:15:61:0f:84:68:9a:97:
08:8d:51:60:50:80:52:df:8c:8e:5c:f4:c0:e0:8b:cc:01:35:
67:d3:5e:24:fa:ad:4b:b1:72:7a:db:5c:52:a4:5f:80:19:58:
c2:c2:21:08:5a:d0:4c:5b:8e:65:c6:e3:4a:37:96:ea:2d:da:
f2:00:f4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:06 2025 by rpki-client