
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: l3SvT+tycARki8cWE74NFxRTRrkrS6a4YvGFsHqw/5I=
Subject key identifier: 3F:4A:AC:23:AF:27:49:80:F1:C4:F9:DF:0F:A0:DE:2F:79:A9:E7:E4
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 0199FBEA88524C098D72E5E0C23A8AA98893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 1301
Signing time: Sun 19 Oct 2025 10:01:15 +0000
Manifest this update: Sun 19 Oct 2025 10:01:15 +0000
Manifest next update: Mon 20 Oct 2025 10:01:15 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: Ta2F1iXHyuIvi2WOXi631m58s6s2mlpDu+vi5O+tvKo=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:88:52:4c:09:8d:72:e5:e0:c2:3a:8a:a9:88:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Oct 19 10:01:15 2025 GMT
Not After : Oct 20 10:01:15 2025 GMT
Subject: CN=3f4aac23af274980f1c4f9df0fa0de2f79a9e7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:2e:3d:9f:8e:9a:02:13:1c:2b:fd:18:74:
0c:7c:d0:2d:a4:71:7a:55:e8:40:1a:2e:48:20:7a:
65:06:32:9e:6a:82:a1:2d:47:07:d6:54:35:ce:52:
17:34:c7:a4:b4:04:b9:18:a1:98:b7:81:07:a9:83:
7a:a9:d4:ae:bb:2c:0f:fc:04:8a:64:57:4c:f6:0d:
01:7b:c9:c3:d6:80:8a:3c:c9:c1:ee:20:bf:1f:55:
b3:a9:3d:a0:4c:b5:c7:89:66:1f:66:89:31:0b:f5:
ad:99:39:a1:2c:96:3a:fd:98:48:5c:36:a4:f4:2d:
81:26:e0:4f:33:97:43:8e:a4:41:be:1b:d4:f9:f3:
e1:0b:fb:88:53:55:2c:a6:f5:86:47:ed:3c:15:28:
14:17:9c:20:65:f3:ae:34:25:7b:1e:d7:6c:5b:5e:
39:fe:b9:3b:c5:04:be:ff:73:2f:d5:fd:9b:10:ad:
df:0b:cf:90:60:7a:cc:cc:e8:5d:74:63:d0:2f:18:
9a:f6:2f:49:26:e9:22:9d:0e:92:e6:22:8d:e4:0f:
20:77:e6:14:20:aa:4a:ee:08:c0:c8:4b:28:5c:b3:
f7:92:9a:f7:75:af:96:fb:b9:7c:f9:66:9d:bf:82:
cc:ab:e6:4f:c9:7d:7b:70:01:75:50:d2:cd:81:a8:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4A:AC:23:AF:27:49:80:F1:C4:F9:DF:0F:A0:DE:2F:79:A9:E7:E4
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a6:df:e2:f7:12:9f:5f:2b:06:a7:cd:de:8b:b9:20:80:0f:
fd:5c:a3:fe:dd:bf:de:07:55:14:b5:e3:f2:67:28:c5:7f:22:
28:6a:14:b9:a1:31:3c:48:ae:3f:cd:0b:ac:17:44:2d:e8:29:
70:12:8e:a1:6a:24:45:e1:b7:8e:ca:33:72:e7:a2:d2:aa:36:
85:eb:27:eb:d0:49:f0:a0:b0:07:57:13:27:6d:08:b2:ea:03:
76:61:7e:de:b2:e0:18:c1:32:c7:7b:84:48:3b:33:b8:80:e8:
98:0e:6e:53:22:fa:bc:eb:c5:11:9f:b2:de:21:4b:83:d4:56:
58:7e:e0:28:24:0d:e8:4e:55:d0:bc:00:0a:14:c8:ce:76:6e:
bf:9e:76:fa:4a:2e:42:7a:ce:0a:c6:2a:7e:de:c8:60:3c:c2:
ac:4b:7c:f8:aa:08:34:66:bd:45:73:75:d8:10:9a:9b:20:35:
9c:9a:93:4e:11:dd:60:11:e3:64:ce:40:9f:17:79:b2:05:5a:
05:29:9f:f8:c8:24:14:38:e7:04:1b:a8:63:d9:0f:d8:d0:07:
97:02:92:17:db:8c:e0:af:c0:6f:08:9d:2d:57:ca:52:ed:78:
ba:39:35:c4:52:15:e9:32:e5:a5:35:b6:bf:53:cd:d9:68:4e:
72:f7:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:04 2025 by rpki-client