Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: tn/8djoR4xc8jPnE6mpKjWZ8PE72ME7q7fpuupl0w6U=
Subject key identifier: 92:CD:5D:1C:80:6B:7F:20:3D:19:D9:B2:19:EF:55:6A:B0:E8:C3:01
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 0199FBEBA54EF61BE599453D8A58D4D0F0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 10:02:28 +0000
Manifest this update: Sun 19 Oct 2025 10:02:28 +0000
Manifest next update: Mon 20 Oct 2025 10:02:28 +0000
Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=)
2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=)
3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: EIIhQWZK3IqRWz7LCYJvgvDhBNpOxpSTvCU231Mp+J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a5:4e:f6:1b:e5:99:45:3d:8a:58:d4:d0:f0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Oct 19 10:02:28 2025 GMT
Not After : Oct 20 10:02:28 2025 GMT
Subject: CN=92cd5d1c806b7f203d19d9b219ef556ab0e8c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:7f:20:d5:4a:0d:12:0a:82:1c:38:7a:35:
83:67:ce:ed:10:f8:ed:6c:9f:e5:66:68:c8:3b:7d:
1e:f9:46:b1:1d:45:75:17:db:fc:65:60:27:6f:9b:
85:95:0c:2e:6a:8a:a1:6b:17:13:a3:1a:28:7b:52:
23:e8:d7:c5:b6:2d:f2:7f:ed:72:10:3c:7b:80:f1:
21:2a:55:59:a3:1c:9a:4f:e5:da:0d:3f:9b:9d:3a:
6d:84:cb:3c:88:25:4e:ce:d8:e5:50:81:d1:ea:49:
99:96:f0:a3:bc:6f:54:bf:26:1b:e8:52:8d:3e:a1:
33:9f:06:0a:f5:04:87:86:53:52:c6:7d:73:dc:55:
62:1f:c4:a5:62:1e:d8:72:ad:16:78:0e:47:0a:d5:
77:85:15:d1:b9:97:87:03:96:52:95:b4:e8:d9:da:
1e:75:46:0a:83:58:31:b8:8a:7f:43:5f:f9:ac:25:
f8:b6:6a:f9:08:a4:af:25:72:b5:a6:88:9b:fb:e9:
b3:5d:b8:84:e7:45:c9:69:1d:39:2a:36:68:c6:c7:
24:4b:28:24:da:6e:2e:ba:03:2d:b4:42:e1:99:d8:
1b:50:e1:a4:e0:5f:b5:d7:bc:ed:2d:87:4d:37:9f:
e4:ca:dc:e2:28:81:a0:63:b9:d9:08:c5:c9:4f:a9:
bc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CD:5D:1C:80:6B:7F:20:3D:19:D9:B2:19:EF:55:6A:B0:E8:C3:01
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9b:d0:63:ce:c5:ca:04:f6:7d:42:7f:cb:75:0b:69:1e:0f:
bb:bc:14:1d:b5:1c:7f:8d:9b:63:91:37:06:91:3d:cf:56:e7:
e5:a2:7d:a1:f9:c1:94:8b:64:b6:2a:2a:f1:74:39:e8:fa:7d:
c5:c3:89:56:2d:6e:36:cd:4d:d7:55:3b:64:72:99:79:2d:ce:
db:a2:38:15:ff:73:03:6d:fd:69:1d:c5:43:95:86:ee:4d:63:
1d:a4:be:61:94:3f:d5:e5:fd:9d:9a:1f:c8:07:53:2f:f1:65:
b1:d4:3e:dd:1c:26:70:4e:94:7a:4c:c9:ba:d5:53:31:17:f2:
f7:b7:a2:ad:08:ac:a5:5c:8b:b0:58:de:f9:38:ce:40:4b:bb:
cd:c4:9f:7e:2d:47:14:63:2b:51:9e:f9:b3:64:08:e1:75:f3:
ae:a0:97:32:30:7d:34:fb:f9:4b:3e:87:b9:96:0e:9c:e3:32:
85:09:65:9a:4f:22:c1:56:1f:8d:2c:12:10:17:eb:e2:9d:4e:
95:f2:23:ca:c8:6d:21:c5:9c:09:8a:f8:90:e4:8c:cd:71:70:
6a:a0:5a:68:a2:59:78:1f:0f:2e:25:3a:9b:d4:79:2b:c6:52:
f8:15:d1:46:49:8c:ff:a4:2f:8e:49:45:25:ac:98:48:93:6d:
ba:1c:a1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:15 2025 by rpki-client