Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: tCEKAleLkjmQd1YXp4yLBPHD/6Sml6mF5Ckp+xv/sW0=
Subject key identifier: CA:D7:A9:83:A1:7A:A7:7E:75:3A:E9:F5:AB:BB:7E:38:46:04:CE:73
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 0199FBEAA486E7F6BF1F20E7FD691540DE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: kFAWzJxAiMhkm4NOvHOiD5PY66g.roa (hash: QJZEuzHLkJsVvRtJ8dcL8i0clH/1NRZmPUpPgEFazCw=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: K8WvF1KFUg2VLjx7ANsvuVnOZpa+le6nXROi5xhykJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a4:86:e7:f6:bf:1f:20:e7:fd:69:15:40:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=cad7a983a17aa77e753ae9f5abbb7e384604ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:b0:40:9c:b4:68:a4:66:3e:4b:8a:64:f0:
d6:68:52:95:96:ed:ab:c8:e8:e4:01:ba:f3:b6:b6:
1b:bc:f4:56:2e:05:2f:52:a5:54:70:46:4d:4a:df:
4b:61:78:f7:ad:0f:3c:2d:bb:73:ac:40:01:fc:82:
e6:4c:a4:f1:a8:9f:53:4b:6e:a4:56:fd:6e:98:6c:
2c:f2:c3:b6:bf:22:d9:a0:87:d6:8f:af:e0:2d:ff:
a7:3f:7e:54:72:f9:9f:50:54:cb:56:64:92:c3:1a:
8d:43:d2:03:9f:9f:42:5b:e7:bc:b4:e9:86:45:75:
30:a1:b7:0f:4b:ff:fc:8c:05:3d:0e:7a:27:75:29:
01:ad:a3:43:af:80:3d:e7:5c:56:b9:63:81:cb:38:
fe:51:c8:cb:c2:c9:1d:64:1a:c8:f9:37:ab:aa:ba:
3b:be:98:e3:90:99:af:07:c8:b2:67:89:da:5a:e2:
20:6d:5c:5d:b8:7e:5e:37:d8:92:92:63:d2:42:bd:
61:a2:38:84:ae:76:a5:f4:b4:c8:fb:cd:26:35:11:
be:24:71:0e:34:c5:fa:48:05:da:e5:4d:d4:aa:76:
ec:60:6f:55:07:ae:7d:62:c1:fc:88:7e:41:dd:74:
06:90:24:c0:0c:13:fe:08:13:52:6e:95:4d:d2:9c:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D7:A9:83:A1:7A:A7:7E:75:3A:E9:F5:AB:BB:7E:38:46:04:CE:73
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9d:d3:5e:1f:dc:87:69:83:45:62:84:3a:e4:77:45:db:50:
79:84:98:07:fc:b6:18:be:c4:ab:bc:24:60:3d:4d:dc:fe:b2:
a1:80:c3:5f:2b:d6:d3:2d:9c:09:f4:26:b5:4b:07:67:9d:06:
00:4e:95:ab:ab:2b:d8:07:87:3f:6c:a6:5d:0c:5c:09:21:dc:
0c:32:3c:2c:a6:01:15:1d:fc:57:b9:d6:64:23:71:f5:84:fb:
49:7f:fb:0f:93:52:67:fd:3f:14:6c:24:0e:30:e9:41:a8:13:
ac:27:dc:7d:07:3f:4a:65:c1:43:af:77:8e:b4:57:56:c0:1d:
96:74:92:f3:d3:f3:6e:81:a4:29:75:64:54:0c:3d:e7:c5:c0:
02:2e:de:4a:ed:ec:ad:23:97:1a:e0:de:2c:75:68:81:87:9c:
a5:b0:73:7e:b0:62:3d:10:ea:9b:91:9b:4c:fa:c4:d3:3f:95:
0e:83:86:62:9d:02:b1:35:2e:cb:e7:c7:d9:c5:51:f1:fd:86:
05:96:7f:f6:58:f0:11:ba:a4:28:d7:03:f8:e7:42:2d:00:b0:
40:4f:87:e7:e1:33:fc:3c:79:11:e1:6a:cb:46:70:df:01:eb:
2c:53:52:92:0a:44:c9:e1:15:8e:e5:d7:46:81:63:2c:82:14:
e6:55:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:36 2025 by rpki-client