Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: hbzur7jNZBruhVii6SpbJp05S/XwWNfFdRwgI+V8AbE=
Subject key identifier: 84:07:F7:71:9F:13:09:FA:28:DC:90:0B:4B:A1:3D:62:BE:1E:11:6C
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0199FBEADB36E382A4E96BD33B4A5EF141F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:36 +0000
Manifest this update: Sun 19 Oct 2025 10:01:36 +0000
Manifest next update: Mon 20 Oct 2025 10:01:36 +0000
Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: etYGCdpkRvw3/LmvcS7Lb/5lmaKPE5jBmDuaT/kIAUI=)
2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=)
3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:db:36:e3:82:a4:e9:6b:d3:3b:4a:5e:f1:41:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Oct 19 10:01:36 2025 GMT
Not After : Oct 20 10:01:36 2025 GMT
Subject: CN=8407f7719f1309fa28dc900b4ba13d62be1e116c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:f8:16:9a:b2:ce:43:8c:cc:26:70:42:fb:
99:e9:9c:c6:98:1f:cc:6d:65:88:96:d8:5f:22:21:
1b:d8:42:75:ea:8a:01:48:e3:73:44:d3:eb:dd:79:
a7:72:81:db:a0:6f:2d:a7:fe:8b:af:91:b4:b8:47:
38:74:14:3e:60:6b:6e:ef:fb:96:37:9e:75:d1:00:
e8:24:84:a8:37:d6:44:81:09:a7:e3:e5:51:be:4d:
97:d2:eb:d7:eb:fc:c1:00:cc:c5:c2:12:d7:83:3c:
97:f4:3a:f9:55:8a:5b:f1:ff:2e:5b:73:27:a5:ef:
03:c6:ad:6a:0b:16:70:fb:3a:58:15:e1:90:b1:23:
6e:f8:8b:9b:22:1b:da:98:64:04:75:e3:77:bd:d5:
24:23:4a:f8:85:d8:86:0e:7a:81:fd:27:4f:be:68:
32:d6:aa:e1:c1:56:c3:2f:3c:70:3f:41:42:dd:59:
b8:cf:4d:7d:93:10:3d:ac:29:a6:ff:06:ca:12:89:
e1:b7:19:1f:be:41:75:40:49:bf:ce:82:0a:c9:37:
8a:8b:af:9c:14:49:34:96:19:3d:f4:d3:25:f8:62:
11:c1:43:78:fc:10:51:89:d7:9c:d3:ea:d5:a1:4b:
c7:59:90:46:6d:bb:46:bf:4e:2e:d0:3b:51:ae:93:
b0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:07:F7:71:9F:13:09:FA:28:DC:90:0B:4B:A1:3D:62:BE:1E:11:6C
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:80:46:77:b1:a8:9d:6e:c7:b8:78:c8:79:43:1a:d6:d8:45:
a6:2f:a7:8c:60:12:47:1b:27:85:84:c0:4d:37:5f:0e:18:2c:
67:10:03:20:6b:b7:2c:8e:ce:0d:19:5f:72:69:ba:50:b7:49:
63:fe:3c:38:a6:9f:f9:29:78:07:cf:f4:9c:43:4c:57:a8:5b:
53:da:84:36:eb:00:f7:e6:07:a6:e9:09:69:a7:31:37:cc:60:
74:a7:65:30:3e:15:d3:94:57:8a:ff:2d:df:d4:84:54:b4:1c:
7b:0c:28:13:6d:37:1f:e3:3e:fb:64:b2:fb:fb:5b:67:f9:72:
e6:6c:6b:20:e4:ab:5c:56:08:1a:87:15:24:20:8d:82:65:9d:
56:ca:4d:e4:d8:69:3a:e2:41:f8:74:3b:f6:d1:00:89:04:8a:
e4:7a:3d:44:5f:01:54:9a:90:8a:1c:41:14:10:64:f3:e2:79:
b0:bc:e1:e0:d8:00:ce:9e:93:25:2b:1d:b6:c6:10:82:f2:ee:
69:a4:31:fa:e6:d2:02:00:00:22:52:6a:7b:9f:1b:f9:4f:bc:
2d:86:fd:17:44:6b:e5:ed:d0:c6:c2:e6:ef:f7:e7:d2:07:a8:
56:58:6b:ea:61:27:f3:7a:28:02:bb:65:eb:4e:c4:87:62:aa:
13:78:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:23 2025 by rpki-client