Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: agtQCa0X4rwEHqR2b2XTBR2DyUU/M0m5ud74tk+qZrs=
Subject key identifier: 53:CF:A7:FD:FA:86:65:9A:EF:09:9D:3D:29:20:C2:31:66:A0:92:3E
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 0199FFC7AB9FEB6BEBF2F9A9F48CD9D5D57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 04:01:39 +0000
Manifest this update: Mon 20 Oct 2025 04:01:39 +0000
Manifest next update: Tue 21 Oct 2025 04:01:39 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: CdnA65KQr9WjvfmwCjOx055t4OwLJYEZx/asyPC7u2o=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ab:9f:eb:6b:eb:f2:f9:a9:f4:8c:d9:d5:d5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Oct 20 04:01:39 2025 GMT
Not After : Oct 21 04:01:39 2025 GMT
Subject: CN=53cfa7fdfa86659aef099d3d2920c23166a0923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:f6:ed:45:39:de:23:a7:3d:f9:6c:a7:20:
b4:f0:0e:cf:a0:98:ce:52:1d:9d:c7:eb:1f:99:6a:
f5:b5:b9:ea:8d:1c:9e:e6:e9:10:5c:ae:9c:5f:e2:
33:0f:16:9a:ec:ab:d6:5e:a0:6d:7d:bf:fd:45:9e:
31:a3:4b:ea:21:c1:3d:e9:4c:b9:68:a7:36:0a:2f:
85:5e:42:cb:5b:b5:35:80:7a:a7:c2:8a:16:28:55:
bf:a1:eb:08:9e:c0:fa:87:54:71:5c:c1:90:dd:b3:
31:b2:3d:6f:cd:8f:31:75:7c:f5:ba:3e:01:bb:fd:
cc:d8:76:aa:c5:1a:a2:a8:bf:10:61:ba:5f:22:81:
7e:8b:54:07:e4:7e:81:aa:1a:34:80:f0:1f:39:dc:
75:a1:a9:f6:e4:b8:1f:19:b6:35:a1:e1:0e:d8:13:
cc:7a:f8:5f:92:d1:4a:5f:1d:96:c8:ea:39:6c:16:
c4:56:ae:96:0a:20:fa:1b:06:2d:7f:15:87:32:e4:
c0:25:d9:b2:32:3d:cd:d2:03:79:e7:5e:8d:44:7b:
ab:e1:56:3d:64:53:01:84:85:a6:5f:e2:3a:bb:ca:
77:0c:00:72:28:c0:17:3d:80:a7:2f:b2:2e:84:40:
d0:bf:91:13:c6:0c:e2:ca:a8:f8:77:39:d2:19:21:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CF:A7:FD:FA:86:65:9A:EF:09:9D:3D:29:20:C2:31:66:A0:92:3E
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d3:69:68:49:90:30:f2:37:42:8e:b4:4f:58:c5:d4:e8:a9:
02:d3:08:39:e4:2c:56:d7:44:11:d0:ec:74:41:dc:c8:62:93:
48:9c:67:cb:4a:b9:4c:33:44:32:08:0b:e4:f6:f0:86:2d:ca:
22:6d:2f:c7:7f:ee:c2:a2:d7:3e:fa:2a:f6:b0:2c:b6:fc:dd:
18:2a:33:58:c9:7c:5f:7d:78:e6:f2:49:97:4b:79:68:9d:2e:
1a:ef:f9:29:a6:85:2b:71:39:48:38:da:83:47:8d:5d:79:27:
57:64:8d:13:de:ac:8f:fd:23:90:fd:68:6b:15:55:7b:2e:11:
0a:38:0f:72:57:d3:a7:c5:bb:8e:a9:76:e9:82:22:6d:d1:0a:
1b:7a:e5:34:5d:b6:ff:99:a9:19:03:26:7f:4a:9f:d4:0d:90:
3e:4f:95:cf:a7:54:18:5c:30:87:4c:73:61:68:17:9c:79:a4:
13:d3:d5:fa:a0:cb:71:2d:e0:15:09:7e:1c:2a:61:f1:e2:5f:
67:69:c8:80:28:68:25:58:a4:14:a1:de:3c:bb:ec:e6:4a:d5:
79:a6:de:09:8a:5b:75:71:c2:7b:27:ee:56:6b:00:26:57:3a:
de:78:bf:9e:2f:2b:cb:57:89:ad:de:43:ca:7d:fe:c8:c3:cc:
e8:99:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:49 2025 by rpki-client