Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json)
Hash identifier: 9Sv6J5XJemXrBGpR54YBqkdMeDZk7llfVbjvtkDY9Uo=
Subject key identifier: D2:66:E7:66:25:A8:38:8B:CA:53:57:C7:85:E4:BF:D4:B0:79:33:D8
Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Certificate serial: 0199FD6B20C38B9769D67D6C5A18703D3FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
Manifest number: 1344
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: VjmaQeTSQmYgi4s/TjpdV0cwb8BHEDmUchA0L5Vt5Bw=)
2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:20:c3:8b:97:69:d6:7d:6c:5a:18:70:3d:3f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=d266e76625a8388bca5357c785e4bfd4b07933d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:5c:8d:0e:7c:63:a7:d5:a4:4c:4f:4c:d5:
d6:0e:e7:0e:29:17:dc:fb:37:1e:a1:b1:bb:38:cd:
a3:72:5f:9e:73:13:fd:d6:24:13:7f:50:17:a1:27:
a8:a1:8b:fe:04:2e:3f:da:c3:56:f9:78:3f:a2:e6:
d1:bc:a1:04:59:3e:89:31:d5:b0:78:3c:4b:f9:f2:
fc:8f:f1:02:07:26:cd:e5:ec:ad:ba:47:16:1c:11:
64:6a:02:52:2d:ef:84:79:79:4f:d6:3a:d4:fd:a1:
69:9e:c5:51:98:aa:d2:73:14:ce:38:19:54:da:51:
f2:4d:72:cc:9f:ca:ac:f0:de:0d:da:b9:16:70:f6:
59:b1:87:87:f3:4e:37:93:13:ed:5c:fe:3a:37:18:
aa:9f:06:67:23:99:5b:51:17:54:53:82:72:60:a7:
41:55:42:c9:c3:aa:c4:1b:ae:78:c6:ba:19:65:29:
30:00:dc:50:3c:50:36:a9:9c:b2:8f:c4:f6:11:1d:
d3:aa:b8:93:e4:0c:96:8d:c6:7d:68:c6:13:22:c0:
49:53:e0:d8:56:52:4c:82:51:f1:af:26:d7:32:f9:
0a:9d:08:bf:7a:d6:5b:f7:05:28:5c:07:b1:85:e4:
74:a3:06:ea:49:95:6f:f6:06:2c:7f:d0:fa:b1:8a:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:66:E7:66:25:A8:38:8B:CA:53:57:C7:85:E4:BF:D4:B0:79:33:D8
X509v3 Authority Key Identifier:
keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:32:92:0d:ef:86:22:34:2c:61:a1:fa:cc:4b:8f:84:92:f4:
40:54:b4:7c:35:77:c1:3f:5d:9f:4b:f0:79:8c:15:dc:c2:0d:
8f:b8:64:5e:f0:5b:42:d4:92:96:41:24:6f:19:bc:a2:c4:63:
2e:8e:bb:0d:90:0c:bc:96:d9:a8:c2:54:3a:21:b4:3c:83:5e:
cd:80:6f:95:f4:8a:2c:34:3c:a0:91:64:32:43:13:ed:18:ea:
09:a6:00:7d:a4:03:ce:af:17:e2:87:78:c7:bc:2e:96:ba:2f:
05:ba:69:6a:03:e7:e3:79:be:bb:aa:dc:1b:be:de:25:d4:e1:
a2:bd:3e:c4:17:82:ec:d7:0c:69:fc:c2:53:57:03:fc:45:40:
e3:e7:be:7a:38:ed:8c:aa:6d:a2:5b:90:de:d4:ca:5e:a8:8e:
c0:83:35:70:55:a5:7c:04:c2:29:2c:87:d6:43:49:7d:b7:46:
1d:78:ae:e5:6c:24:4b:8f:bf:ff:35:c7:ab:c1:8f:3b:2b:8d:
02:7d:40:9c:37:d5:b2:73:1f:5d:39:a6:35:ff:0f:83:82:d9:
a3:34:26:52:81:c1:e1:8c:0b:14:9a:c0:f0:1e:fc:87:69:58:
a1:b3:96:8e:f4:a0:c2:24:a7:f9:3c:97:29:a7:d4:82:95:d8:
a8:d3:90:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:27 2025 by rpki-client