Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json)
Hash identifier: NOQ5CTBeNPc1QEcLj/O/ZelxyFogZAe7Z02ndNvDrk4=
Subject key identifier: 13:6C:AB:8D:64:39:39:AF:BA:E4:DA:FD:90:F6:A4:03:3D:8E:E1:AD
Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Certificate serial: 0199FC58CD99801D6BD2358164C421FC099C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
Manifest number: 0252
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: kntpmQsHRcyTyh0nQ4nkeR94Vd4BjQbAd/pmlKPqIKY=)
2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cd:99:80:1d:6b:d2:35:81:64:c4:21:fc:09:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=136cab8d643939afbae4dafd90f6a4033d8ee1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:22:af:db:9b:8c:25:08:3a:03:f2:25:a1:
30:e7:99:00:a1:4b:35:d7:19:ba:75:b7:90:85:4a:
6d:91:36:c9:92:08:30:93:e7:85:d3:94:f6:9e:a3:
8e:65:01:b0:04:ac:bf:59:49:ec:83:bb:77:db:9a:
2c:33:44:c4:ec:9d:fe:52:32:78:49:eb:ae:36:fc:
e5:dc:e6:27:02:65:17:45:6b:3f:26:95:6e:10:ea:
af:56:56:90:69:6a:72:fb:50:a9:0c:d3:a1:a9:83:
f4:30:5f:cb:a4:c6:cb:37:db:32:71:36:03:4b:35:
65:4e:f2:8c:0b:ea:2d:0b:7e:bc:ec:f4:9e:cc:5a:
d2:b5:1e:97:9f:67:24:94:df:71:14:b5:0d:a2:35:
06:33:4b:19:11:f2:0c:1c:6e:69:c0:90:9e:a0:0f:
13:ce:2b:a5:c9:5f:46:e8:a0:bb:be:c1:8a:32:cc:
89:f4:05:1d:8a:73:a4:65:c9:57:e2:bf:3a:9b:90:
2e:03:57:45:13:48:b2:97:a1:8a:79:58:c9:d5:03:
48:46:08:15:09:cf:c0:22:6d:58:d7:36:62:1c:eb:
9c:c9:00:ce:1e:a7:b1:1c:cb:48:53:23:9d:c8:b3:
57:ce:5e:95:fc:4d:32:82:a9:af:13:f4:63:08:7c:
78:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6C:AB:8D:64:39:39:AF:BA:E4:DA:FD:90:F6:A4:03:3D:8E:E1:AD
X509v3 Authority Key Identifier:
keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:96:45:1c:ee:a3:e0:f8:dc:6d:5c:e1:38:d2:e2:27:5b:8e:
ba:9c:a8:25:58:1c:b7:10:c7:c0:97:cf:2e:39:fb:2f:a7:cf:
a2:17:c9:12:05:df:6b:be:43:b6:98:39:07:0e:89:29:ff:f2:
d0:e6:3f:35:7a:0f:55:30:ed:44:80:e6:09:c6:e9:5d:11:f2:
2e:04:8a:16:a1:af:7a:76:b0:97:b8:e7:4b:97:9e:8e:fa:14:
e6:cc:cd:21:b8:15:1d:9d:44:53:d8:bf:7c:87:45:59:8c:10:
4c:31:b5:d8:da:86:28:b5:dc:a2:84:86:db:d2:8f:d6:47:26:
f9:cf:70:4c:d9:2e:ae:5f:5c:8e:c0:66:5e:ea:01:90:50:c5:
05:22:3f:c1:25:5c:b6:e7:57:8a:08:5a:9e:d9:4d:34:da:18:
4e:6d:6b:2b:07:47:82:ab:a1:fa:fe:87:43:6d:cc:97:7f:88:
95:d9:9e:8e:d1:39:7d:4d:6e:5e:1a:cc:5b:12:1d:02:e5:3d:
5b:04:0f:ca:f1:2b:61:6e:fe:ac:f4:87:5a:3b:26:84:2f:00:
18:ff:e9:ec:6f:15:c0:31:0c:1e:b9:2a:d7:c3:c5:10:22:02:
29:2e:5e:a1:39:10:2a:3f:d5:0b:d8:ba:fd:e2:20:56:20:a6:
83:a1:e8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:54 2025 by rpki-client