Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: JFvT9HnbDAUO190HxHcRoNzxycXQ5/iOyCuLzlf3Yjk=
Subject key identifier: C9:59:5C:E1:02:90:C3:DC:86:BF:46:14:59:B4:6F:6E:40:9E:23:69
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 0199FF594C534BDBD07692C4F9E7D83A48C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 02B2
Signing time: Mon 20 Oct 2025 02:01:06 +0000
Manifest this update: Mon 20 Oct 2025 02:01:06 +0000
Manifest next update: Tue 21 Oct 2025 02:01:06 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: QgTrBeDpdK4s8Ffy12ATIoqfV2njLniyAuHUupcH3nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:4c:53:4b:db:d0:76:92:c4:f9:e7:d8:3a:48:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Oct 20 02:01:06 2025 GMT
Not After : Oct 21 02:01:06 2025 GMT
Subject: CN=c9595ce10290c3dc86bf461459b46f6e409e2369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:d2:ea:94:0f:a5:45:30:da:f2:84:f2:79:
13:1e:1a:93:ac:48:22:59:b6:5d:17:39:be:81:82:
1f:77:8e:98:2c:0d:98:8a:b0:f5:a6:70:be:7b:e3:
53:75:bf:b1:94:81:ec:61:d0:67:25:1f:10:bb:ba:
09:b1:72:d5:82:c7:1e:8b:b8:99:20:40:ac:d8:6c:
d3:53:bd:6d:42:60:09:09:9f:e8:c4:54:0f:76:69:
c0:9b:ee:e0:85:20:27:9f:6a:2c:aa:99:d2:ed:1d:
95:db:30:d2:7f:14:7f:ce:cb:54:3a:bd:33:59:cb:
86:d3:3f:59:65:1a:42:1d:b7:93:5d:7a:db:8d:8a:
32:bc:45:4e:30:0b:2d:0d:09:e2:f6:0b:dd:5a:9a:
d3:04:a7:37:cb:80:7e:40:f0:ec:b3:c7:7e:23:18:
cd:d4:ba:36:0e:c4:54:86:c6:0c:9d:7a:fd:bd:ab:
64:bf:18:78:1f:d7:27:83:8c:05:49:e5:7e:a1:2a:
bc:a5:c4:8b:86:59:bb:33:dc:7e:b0:57:a6:05:09:
20:bc:e3:f6:54:b9:d9:70:e0:f9:7d:b3:ff:e5:5d:
c2:d8:e0:c1:63:d4:c2:49:67:62:63:8f:88:42:59:
ed:d6:67:66:9c:10:c0:43:d8:f4:92:b8:d9:9a:9c:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:59:5C:E1:02:90:C3:DC:86:BF:46:14:59:B4:6F:6E:40:9E:23:69
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:de:a9:8b:89:51:80:9d:7d:b1:6e:26:09:8b:1f:e8:e8:58:
cc:68:7b:64:d2:7e:aa:d3:6b:c3:bf:28:ce:e7:c7:d2:46:98:
59:45:c4:9b:b7:b2:5a:58:95:bb:cb:ef:ae:c6:58:60:d8:d4:
e7:49:f6:d3:10:5b:f7:59:a9:fe:35:b1:22:c2:10:dd:28:87:
f1:8c:29:7e:14:4d:7e:5c:f9:0a:4b:34:a3:aa:76:dd:12:af:
8c:5a:40:3e:68:49:78:1f:9b:1f:21:f8:f1:13:55:43:1e:85:
59:1c:a9:46:2c:38:d6:92:af:82:3d:33:80:ce:4e:e0:73:64:
ec:91:05:a5:62:82:c6:c2:20:a7:b8:4a:20:97:cb:95:58:7f:
b1:c0:4b:e4:9c:43:2e:65:e1:8a:92:76:c6:33:7b:7a:8a:17:
4b:94:24:25:cd:10:81:17:8a:74:ea:88:ef:fa:66:63:50:b4:
94:65:f0:59:84:70:f5:e5:45:32:e2:53:2f:b2:d8:40:33:78:
2f:ff:ae:a1:1e:b0:fe:fc:45:39:81:2d:02:df:23:73:7c:f4:
c6:61:36:b6:37:92:bd:c5:82:32:43:e9:bc:bd:89:17:3e:b7:
5a:b1:b6:75:40:62:1e:85:3a:20:b6:4f:86:87:26:07:36:04:
9c:9f:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:24 2025 by rpki-client