Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: cicJUsrhKe3/D0sjZL6wuC2IZYtYjeOFmwjfk/1JOss=
Subject key identifier: 38:00:70:62:ED:B5:87:FF:DE:33:BE:2E:8C:7B:37:6C:00:E2:4F:7C
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 0199FC8F95EFD740283F95B1B0C089F02C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0BCB
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: zlpip2b91Wkj8fQlkIeH5w+Dk+ztdxipvMgfWQS8gEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:95:ef:d7:40:28:3f:95:b1:b0:c0:89:f0:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=38007062edb587ffde33be2e8c7b376c00e24f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:c7:d0:56:f8:97:63:07:83:3c:03:31:9d:
3c:a7:7d:23:9c:b2:65:57:2c:32:07:6a:c0:3d:e2:
03:bc:2d:0c:d7:45:2e:ac:9b:44:53:c7:31:cb:83:
9d:b6:27:91:a4:31:73:6b:e2:66:25:92:1c:d6:05:
ff:c6:3b:74:19:07:9b:ba:8e:b7:eb:5d:0c:cd:35:
41:b6:a9:65:7e:82:f4:e1:f2:bf:ff:f3:f6:e5:2e:
43:25:dc:ce:4c:7a:c1:13:7d:30:0a:87:7b:6c:f2:
bf:99:b7:19:2e:a1:b6:2b:50:38:c1:97:b3:7c:ef:
48:1a:bb:e1:2d:33:cf:74:27:bf:3f:5a:54:ab:06:
7c:b1:a0:07:68:7e:20:92:20:ea:04:42:0f:2e:85:
a9:43:fd:c1:dc:31:4b:2d:7d:9d:51:63:ad:47:33:
c6:14:36:88:17:66:6e:57:ae:cb:c0:f6:11:3f:00:
e6:da:8e:f6:5e:e9:c9:d9:f8:e3:8d:6e:87:a3:cb:
f2:7e:1d:43:cb:d1:1b:0c:c4:d3:86:73:e3:b2:0d:
ef:d1:39:ac:71:6a:03:f2:60:c2:96:f3:66:4b:1d:
7f:44:0a:62:cd:f4:b7:a7:98:8e:bd:04:69:eb:d3:
cb:b3:8b:11:d9:1a:49:ce:0b:69:7b:33:a8:6a:84:
49:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:00:70:62:ED:B5:87:FF:DE:33:BE:2E:8C:7B:37:6C:00:E2:4F:7C
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ba:2c:bd:0a:14:cb:92:29:4f:17:4c:66:37:f4:53:9d:2e:
cd:8e:47:ac:04:e6:e8:eb:c5:f7:66:cb:ff:19:75:ba:a1:90:
f2:e8:be:4f:c9:e7:a4:eb:5c:57:ab:42:10:e7:b6:4f:18:36:
94:1e:25:50:38:32:d1:4e:02:2a:3f:30:b4:c1:b1:96:26:24:
ef:2e:41:49:6a:6b:94:11:19:06:0f:3a:4b:9d:f5:59:36:7a:
16:20:8f:5a:8c:91:63:be:44:3f:1d:ae:e8:96:ec:34:42:1e:
a0:41:93:41:c7:6c:34:70:df:56:e7:04:61:87:c8:b3:43:9b:
08:5c:4f:47:3e:7e:09:5a:35:bc:bd:1f:61:05:be:ce:4e:d7:
8d:30:6d:d8:0f:b5:b2:13:1c:1d:4b:27:ca:9e:95:a5:66:9f:
fa:ed:e7:0d:0a:b7:33:c1:77:b2:cd:3f:2e:9c:db:79:28:82:
8f:7b:ce:23:ea:b3:3b:2e:55:31:43:1a:7f:19:8b:48:67:70:
6a:61:15:c6:85:fa:f7:1c:f8:f8:2f:f6:59:43:b4:c3:51:72:
7d:1b:f6:b8:eb:f1:8d:cc:72:0e:a8:f3:c5:8d:02:3f:28:4e:
60:c6:80:6b:b2:3d:53:46:b2:08:5f:58:be:59:fa:8c:69:9a:
ef:ed:7a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:55 2025 by rpki-client