Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: W8ajshQ77m5cyph2/7dRK58Jsl7TvbDGGzovaOj2tFg=
Subject key identifier: 1C:1E:9D:E2:47:3E:E6:D5:FB:C7:CF:4D:3C:E0:4E:01:88:D9:6F:A6
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 0199FC58B554B539556ED6740C41A51493A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 01E0
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: G4BOz5rIEt9X4f9CBLbLcc1rlyhVm9dwduGXpVLkbe4=)
2: Zwspllzg46eGGBAmk75fKGUNIMs.roa (hash: SP7acjr2fc/Seb508pgEvQAcmNKQjk7dz5FLGa5z8Eg=)
3: lWrjnOhkdLngH_rNw8_j4YqaRQo.roa (hash: K4bxS+l7j2oByKFzgDdI5RTjLvC4BrOSJXUtlpmQdfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b5:54:b5:39:55:6e:d6:74:0c:41:a5:14:93:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=1c1e9de2473ee6d5fbc7cf4d3ce04e0188d96fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f9:ed:50:86:b3:82:bd:0f:9b:26:36:72:fb:
d9:14:bd:fd:97:a1:50:f4:82:eb:a8:eb:96:39:58:
ff:4f:4f:f7:74:ed:88:67:f6:fb:f6:d0:a7:8c:ae:
4d:04:5e:ef:d9:ab:19:69:9d:a0:6c:c3:07:13:a0:
27:34:ab:80:bd:b9:db:ae:80:36:3d:13:f7:72:0e:
23:6a:17:0b:e7:eb:24:dd:80:c0:a1:95:e7:28:c7:
5b:33:e1:c0:6b:5f:98:27:9c:63:cc:2e:bd:92:35:
33:82:71:a3:20:f5:ea:09:a6:b9:32:44:2a:4b:83:
8b:4d:aa:ae:26:ad:89:76:f4:90:f4:3d:ab:ce:71:
dd:e9:2c:b7:a2:a6:97:0a:f0:f3:62:a3:7b:4e:87:
18:aa:99:e2:fe:c3:b5:db:0c:a3:db:36:36:e8:fd:
33:d4:1c:a9:de:b6:0d:8e:36:7c:fd:04:81:0f:00:
c4:1a:90:2c:75:fe:19:cb:d6:1a:87:69:bb:52:9d:
03:7c:97:29:2b:36:95:f8:6d:89:2a:6b:11:1c:d7:
d5:50:d2:f3:4d:8d:fe:85:39:34:6b:02:d1:df:96:
c9:30:c3:f0:0b:18:8b:73:c4:3c:71:74:ed:c4:0e:
11:42:81:99:d1:d8:aa:86:7a:b1:0e:a7:ee:4b:52:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:9D:E2:47:3E:E6:D5:FB:C7:CF:4D:3C:E0:4E:01:88:D9:6F:A6
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:21:63:ce:db:ab:af:32:aa:27:b9:5a:1b:4f:5b:3a:d8:28:
c4:21:84:39:3a:ff:9a:b4:3b:85:34:ee:0e:8b:66:b3:7a:a4:
da:85:e3:0d:84:43:1a:30:f8:70:0f:cb:17:4d:66:c9:0a:1a:
6d:b5:a6:f2:d4:7a:e1:a2:32:7b:92:99:1c:dc:42:70:d5:8c:
d9:5d:81:b2:46:df:1a:7f:a5:c0:bd:ca:fa:ff:19:55:b9:c3:
e9:44:47:77:02:d0:12:71:9e:66:94:49:b9:ff:ad:a9:94:ca:
62:06:15:46:32:92:47:46:b0:5b:aa:df:ea:c9:fc:3d:c8:9b:
39:36:b7:97:19:9b:2b:46:a5:d7:fa:78:bd:1b:c4:8b:6e:d6:
a7:d1:b4:94:55:2e:fe:f6:cc:15:aa:81:fc:39:4c:d8:12:09:
27:0d:2b:d7:f8:73:9f:00:9d:15:18:58:ba:a6:17:fc:f6:90:
38:c0:a7:51:e1:55:c9:35:e9:16:81:b1:62:ac:bd:f2:fc:f8:
35:bd:ad:6c:a5:3a:15:c9:ae:2b:7e:33:dc:51:7e:d3:2b:5c:
da:24:ec:16:fb:8a:4b:80:c4:e6:99:c5:2a:78:54:05:96:e8:
fd:a0:37:19:aa:5c:b8:29:61:13:83:52:24:eb:44:48:47:13:
35:c0:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:12 2025 by rpki-client