Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
File: _xwhiBHZKUrWMSU6RF7R05WpY58.mft (raw, json)
Hash identifier: kl3YQAksFjoDijOdKjUqLUMn1faw53A0nHNMTiOtAm0=
Subject key identifier: 75:B6:DA:C3:E5:B2:37:13:4F:80:DA:48:FC:9A:7B:A5:D5:FB:39:0E
Authority key identifier: FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
Certificate issuer: /CN=ff1c218811d9294ad631253a445ed1d395a9639f
Certificate serial: 0199FDD951C0600741DBAE8895A911FD5094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
Manifest number: 153E
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: _xwhiBHZKUrWMSU6RF7R05WpY58.crl (hash: QmsqysRp9iOsDuy0roEEwFO/mI4A13CRlx7Tw7dw3Ig=)
2: v5mMLWDyDi7CQki8wtNGLvZaSFo.roa (hash: QY/aaNbMvjreUlmsWUFxIkBwGJaecYw8AUp+m4XK/7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:51:c0:60:07:41:db:ae:88:95:a9:11:fd:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1c218811d9294ad631253a445ed1d395a9639f
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=75b6dac3e5b237134f80da48fc9a7ba5d5fb390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:09:40:82:88:a7:a1:12:86:34:3a:7b:c5:
3d:7c:59:81:76:d8:46:0d:8f:00:66:ce:bd:ad:be:
d4:62:fe:29:0c:ed:9e:71:b6:2c:ab:2e:4c:da:4b:
65:a8:6e:1b:ac:e6:76:bd:95:15:9e:3f:70:c2:13:
fe:a5:96:36:26:a5:82:b0:3a:2f:ba:b7:ea:18:41:
a4:39:13:de:0d:76:96:2a:e8:6b:0f:e5:d1:2f:00:
44:ed:65:38:ee:b7:0d:e5:ae:47:4e:7e:1d:93:fa:
35:5f:2e:5e:05:2f:f0:67:08:c1:95:ed:45:22:a5:
97:fc:fb:ac:e9:56:12:3f:f0:98:81:6c:b2:5f:43:
79:39:4b:b2:18:64:21:c5:f7:28:b4:15:92:f1:5d:
4a:44:d6:84:fe:da:6e:1c:b1:8d:4e:39:19:4c:86:
10:c2:33:46:85:4c:26:ca:6f:d1:4f:4c:b9:de:22:
8b:5e:35:58:06:2a:0c:a9:b1:97:13:3e:ac:bc:50:
2d:db:4e:08:c8:d8:a4:91:e8:df:f7:37:7c:20:ec:
53:02:de:90:a0:48:df:b1:65:f1:b2:f8:d6:36:48:
ef:62:5a:16:c3:b3:7f:8c:cb:8a:42:91:e3:35:d5:
69:fd:33:fe:ca:25:fc:fe:40:4a:b6:4b:38:2a:c5:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B6:DA:C3:E5:B2:37:13:4F:80:DA:48:FC:9A:7B:A5:D5:FB:39:0E
X509v3 Authority Key Identifier:
keyid:FF:1C:21:88:11:D9:29:4A:D6:31:25:3A:44:5E:D1:D3:95:A9:63:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xwhiBHZKUrWMSU6RF7R05WpY58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2c6b14-7e87-49c7-a3b3-a0a60bb9cd9b/1/_xwhiBHZKUrWMSU6RF7R05WpY58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b4:31:98:85:c3:82:6b:4c:4c:f3:70:0c:0a:dd:87:7f:e5:
58:49:c8:fb:a0:53:cc:2f:48:97:bd:e8:a1:33:e1:2b:ea:b3:
50:7f:ff:9d:37:1d:0e:a8:8d:b5:6d:5b:da:5e:e4:ba:b1:0a:
f6:da:1d:2f:88:e3:97:3a:65:52:9b:06:36:2a:50:52:d1:f6:
47:f9:82:8d:c3:33:ae:89:7c:f2:24:4c:80:dd:73:0c:cb:dd:
45:f8:68:d5:62:eb:ee:32:64:89:26:da:b0:57:eb:6a:b1:1b:
17:30:ee:82:0c:fa:62:b2:ba:fe:99:a7:f9:97:54:30:a8:15:
32:ca:60:ca:58:65:1a:28:15:bd:ee:fc:7d:b3:69:8d:32:75:
91:30:01:b8:bb:6b:9c:d4:cf:b8:2d:b0:5c:75:18:8b:eb:e0:
d6:b3:ce:db:5d:60:be:21:a8:12:8b:c8:4f:ce:b5:b1:3a:ea:
d6:49:56:7e:61:5f:01:6c:d9:2c:80:42:92:ed:f0:23:af:36:
10:c1:d8:9e:66:53:98:f2:cc:fb:11:c9:c6:0e:01:d7:41:ef:
21:39:81:aa:cc:55:2b:22:ce:42:72:09:97:72:55:05:c2:95:
50:94:ad:bf:81:01:08:aa:40:c5:99:c7:37:95:e8:fd:ff:39:
ab:92:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:50 2025 by rpki-client