Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
File: Xm6clCz1a-uGksXVYu2OrWlFKO0.mft (raw, json)
Hash identifier: kQnb5TGS6/WVFymn8n7hR7JvzMbY4/UkBI5fCCgTZvU=
Subject key identifier: EE:EB:30:D1:C7:04:7B:46:17:3D:8A:C8:9A:96:3E:09:F8:A8:20:E9
Authority key identifier: 5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
Certificate issuer: /CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Certificate serial: 0199FCFD6D158117E72252211779ADB88D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
Manifest number: 0357
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: Xm6clCz1a-uGksXVYu2OrWlFKO0.crl (hash: 7c8sqtyZFTJ9JijYq1luJowWcB4rKXtUjb8l7Jak0uU=)
2: vosIopFKuVooFEnT_WoSvrVtBQk.roa (hash: MbdzDkBGjpybqFx3qcRSqHdBprEga+vyojjcpFHnoSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6d:15:81:17:e7:22:52:21:17:79:ad:b8:8d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6e9c942cf56beb8692c5d562ed8ead694528ed
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=eeeb30d1c7047b46173d8ac89a963e09f8a820e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:7e:e5:47:36:d0:b0:83:bd:68:96:ee:30:
35:3d:fb:a4:b1:20:4b:3c:64:74:43:a5:59:08:86:
99:53:6a:9d:4c:d6:d8:88:c5:3b:36:12:ee:f2:3a:
7c:6a:b3:ee:45:f0:31:13:45:b1:90:1a:cc:42:eb:
b4:1e:dd:dc:49:a5:4a:05:c3:75:33:8d:70:bb:f1:
03:38:9f:4c:0c:e1:72:27:99:ce:5d:df:24:1a:73:
25:fd:cc:81:cc:19:00:0c:52:86:87:7e:8b:4b:09:
a4:c4:b5:bc:ca:41:fc:63:eb:96:bc:6e:00:71:6a:
aa:90:0a:25:7f:68:7f:67:44:c0:aa:1a:98:79:be:
5a:03:35:f9:54:b6:80:6f:57:ff:79:a3:35:f5:69:
2b:31:5b:b1:fb:27:dd:9c:a1:41:6b:f3:d2:be:89:
da:00:1d:42:ae:93:cb:64:4b:fd:53:4a:bc:d2:c4:
41:ba:52:52:62:ad:7d:a9:05:1a:87:72:c9:b7:90:
a4:23:6b:3c:9d:7e:60:35:b6:64:f9:c9:98:ad:20:
86:85:3f:10:09:34:50:d5:30:a9:d6:35:aa:d8:8f:
69:69:66:24:40:9e:07:f3:10:b7:dd:8b:99:b9:e8:
43:78:8e:39:31:a9:69:4a:d1:7a:d7:1f:72:e3:b7:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EB:30:D1:C7:04:7B:46:17:3D:8A:C8:9A:96:3E:09:F8:A8:20:E9
X509v3 Authority Key Identifier:
keyid:5E:6E:9C:94:2C:F5:6B:EB:86:92:C5:D5:62:ED:8E:AD:69:45:28:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm6clCz1a-uGksXVYu2OrWlFKO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fab12a-444c-474a-86f3-e343777c3973/1/Xm6clCz1a-uGksXVYu2OrWlFKO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cf:56:fa:db:cc:e0:9c:66:b9:32:4e:f7:2d:65:5e:73:57:
ad:ad:8c:12:b6:04:bc:18:cf:ee:8f:39:14:39:d5:4b:2b:9c:
1a:ce:9a:38:98:84:db:51:1e:ba:96:f8:8d:bb:04:dd:53:e6:
09:67:47:c1:10:a5:fd:5d:3b:1d:f1:05:6d:82:c3:d5:b5:7b:
4e:62:3b:b9:68:f8:c1:85:b1:9f:06:37:2c:d6:bb:02:c9:67:
98:7d:21:61:f8:09:ec:15:93:38:7f:a3:86:7a:6d:e8:e5:b5:
16:ea:f7:37:6f:06:ae:fd:c2:49:a4:74:e5:e9:64:5b:d6:39:
47:a2:be:e9:bf:33:d2:2d:d2:f9:a4:ea:55:cb:7d:0c:33:b4:
91:1b:f0:39:c6:09:a8:44:f8:67:b0:78:e0:58:11:1f:88:61:
3c:88:56:52:99:1f:ac:c1:3a:5f:f2:05:4a:fe:dc:6a:a1:6b:
c8:ed:43:9e:c2:70:46:d4:01:45:ca:03:fb:5e:40:a4:90:32:
3f:96:d1:71:e6:53:17:d6:6e:4d:0a:22:f8:11:e2:57:5a:c5:
2c:eb:d1:3d:72:ff:86:06:3d:e0:21:93:7f:41:5f:20:ff:72:
3f:31:14:51:5e:5d:98:38:bd:cd:86:82:fd:3f:94:50:39:8b:
a5:13:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:20 2025 by rpki-client