Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: SZIxY8RjOI0n88JVnQIhqeMNhHicOuoll0IYZH0G5fo=
Subject key identifier: 05:88:AD:47:E3:A8:4F:40:87:F9:96:50:44:9B:93:5F:84:5C:75:BC
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 0199FB46251FAE8AAA7556DCD331F1D60B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 108C
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: iyVu0JX1CCmw+1tqzDfecoRTE8EnO7w0OHU+TADET+E=)
2: BBc69UDcCnvJ9YXOkYKIegaNiDE.roa (hash: u/teCtCSqk7whi20Ul6NWhHZ26QmJCDD43T9Guz4eqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:25:1f:ae:8a:aa:75:56:dc:d3:31:f1:d6:0b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=0588ad47e3a84f4087f99650449b935f845c75bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:4d:ce:6a:21:88:29:ab:3a:5b:1f:66:46:
9d:56:a6:70:c5:fa:b0:6b:d2:8f:c0:a5:13:13:36:
bb:01:9a:65:c6:6a:a1:2b:92:40:07:91:f0:0d:b6:
15:da:40:12:28:03:37:a2:7a:3f:ab:f7:33:a8:96:
42:81:18:9a:f5:15:f5:30:47:de:2b:ec:e4:a4:7b:
a9:33:5c:2a:44:63:ea:e7:49:b3:10:1e:7f:59:e2:
d6:a8:73:71:b1:7a:de:97:40:48:52:4f:1e:7b:20:
67:89:70:88:f6:30:d5:9f:c1:82:64:15:bb:2a:03:
f7:c6:10:9f:cd:44:37:81:c5:32:31:ab:0e:e4:ca:
0b:44:91:d5:32:6c:83:c9:d4:b3:9a:a6:01:e7:8b:
75:1b:fb:81:4c:e4:ea:e8:32:c0:80:7e:6c:fa:3e:
28:80:94:b3:93:cf:e0:68:c6:b0:35:a7:0e:4d:34:
19:9b:39:54:0b:c1:70:46:51:a3:00:78:d5:0d:70:
f9:12:d9:07:68:01:32:1f:f5:c4:bc:5a:f0:d1:97:
99:32:b7:65:09:46:92:31:ac:6b:ea:a6:39:59:1c:
44:fd:0d:6d:39:2f:8b:0f:e0:6d:34:76:96:6a:fc:
d5:b3:55:68:90:8b:e4:44:8a:fd:67:b6:72:c8:5e:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:AD:47:E3:A8:4F:40:87:F9:96:50:44:9B:93:5F:84:5C:75:BC
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:fd:43:dc:3f:e1:76:b5:ae:b9:cd:23:d4:0e:36:2e:25:
ab:fb:72:f6:77:6f:d6:9b:0d:55:fb:08:2c:65:b9:a9:8d:7c:
57:b0:5f:86:4a:5e:61:c2:c8:3b:a1:04:54:41:b6:32:6d:e9:
59:2f:41:dc:0e:70:24:8c:b2:4e:c7:1b:a0:f9:a3:7d:bc:01:
b6:eb:82:e9:49:ff:23:70:ad:8b:2e:d4:14:e3:5a:33:97:c0:
4e:9c:cb:9d:c3:59:73:e9:d0:13:a5:e5:2c:fe:96:30:a4:18:
0e:21:76:a7:a9:59:3d:54:7c:45:34:4e:3e:6e:9b:79:34:63:
4b:77:fc:21:17:43:1e:8a:ee:7a:6c:10:79:93:68:68:f8:5d:
e0:6b:8a:dd:a5:3f:37:71:23:3d:e6:9b:08:0c:1f:25:2b:d8:
05:d6:78:07:88:ea:15:fe:ca:ca:d2:44:da:4d:ff:fb:9f:8a:
30:17:a0:1f:b9:13:ff:88:8e:00:56:71:84:f0:06:15:8d:cd:
6d:34:6d:06:4a:70:e6:49:d9:f8:3b:9a:22:e5:21:3d:92:fb:
71:8d:96:a2:71:07:2d:22:2c:ad:01:5d:1e:78:04:1b:25:50:
58:56:a8:dc:fc:82:92:16:1f:e1:23:5a:c4:51:67:f3:a3:e3:
5e:49:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:33 2025 by rpki-client