Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
File: XzHZebcQ7eIGiCOIGqYRrROvVFk.mft (raw, json)
Hash identifier: NLaTk3c9rH65bekVWaqo6cDpZODGPdJjKgZB82Xcsho=
Subject key identifier: 46:B3:23:F6:7F:A5:8F:EB:49:B1:A3:1E:C0:1F:DF:13:FA:BE:5E:86
Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459
Certificate serial: 0199FDD9C6F0D0142DDD5C6A4FED4A7D2342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
Manifest number: 0C98
Signing time: Sun 19 Oct 2025 19:02:11 +0000
Manifest this update: Sun 19 Oct 2025 19:02:11 +0000
Manifest next update: Mon 20 Oct 2025 19:02:11 +0000
Files and hashes: 1: 7VePb56Lb2mDp_DoHqAJOVOs_T8.roa (hash: V7IpcMoqQADg7SX3r725vYH2jPknDmi+ikdfBjQyP5c=)
2: XzHZebcQ7eIGiCOIGqYRrROvVFk.crl (hash: C/I2lQ3kFBmp/k7MpJAE3rWM6t0B56SY41g2hhm8Re8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:c6:f0:d0:14:2d:dd:5c:6a:4f:ed:4a:7d:23:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459
Validity
Not Before: Oct 19 19:02:11 2025 GMT
Not After : Oct 20 19:02:11 2025 GMT
Subject: CN=46b323f67fa58feb49b1a31ec01fdf13fabe5e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:2a:c3:e2:d6:39:f1:c0:e3:e6:d7:41:be:
eb:11:d7:4b:da:20:16:5b:fd:a0:82:f2:29:78:34:
d9:1e:3f:ff:d9:a5:b2:7e:6c:87:df:89:d1:87:99:
30:a2:1e:1a:9a:ea:b9:a0:11:22:43:52:df:60:29:
5c:08:c8:d5:31:92:e6:eb:8f:51:c8:96:89:41:a5:
02:ce:65:f5:0b:cc:19:d8:fb:75:47:94:32:dc:52:
df:45:d4:5f:41:20:a8:bb:cd:f9:86:82:b9:f9:88:
31:95:b5:1e:b6:6d:a4:35:bb:5e:b7:91:5e:0c:8f:
92:ad:10:28:f0:1a:a4:9d:01:db:ca:36:d3:c7:7c:
0e:91:cf:7d:0e:66:f1:f7:6c:91:fe:4b:20:6a:de:
54:4c:1f:ec:0f:d9:e5:08:b6:7c:30:6a:51:b3:a4:
eb:b9:37:75:de:8e:9e:69:a1:e4:27:d0:2b:c5:9c:
83:dc:ea:02:0e:1f:db:27:58:2d:d5:d3:65:e9:9c:
9d:2b:01:d5:1a:ff:29:db:27:af:c9:2c:26:40:4d:
e1:24:62:a5:0d:8c:86:c1:a1:25:2b:38:52:c2:87:
5f:59:c6:5c:88:41:b2:64:4e:73:d7:cb:35:13:5a:
fe:8b:14:3d:1f:af:b2:34:86:1d:ca:dd:75:6a:8d:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B3:23:F6:7F:A5:8F:EB:49:B1:A3:1E:C0:1F:DF:13:FA:BE:5E:86
X509v3 Authority Key Identifier:
keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:62:3d:5c:9f:0f:76:f4:a6:b8:5f:87:c5:ee:72:d1:03:8d:
07:85:9a:1e:40:47:c0:05:bf:08:42:52:80:6f:ff:77:12:06:
95:00:94:c4:70:40:c1:b3:75:11:5d:99:ba:37:a7:fe:aa:12:
f1:02:67:30:70:69:12:51:f3:80:76:c0:08:9d:05:08:78:c9:
12:6f:ee:fe:79:1d:4e:9b:61:50:7a:e8:c5:c1:66:43:97:08:
dc:43:9c:75:d9:93:8c:2a:ea:a7:7f:41:b8:d1:bd:d1:bb:10:
43:11:45:f4:09:35:8a:80:d7:91:69:04:a4:04:c4:c6:52:4d:
db:f7:0c:ac:9b:6f:4b:6c:0e:08:69:48:1a:da:cb:83:9b:6e:
2e:8b:f3:f9:5e:8d:80:63:ae:93:d5:8f:a0:34:20:56:38:7c:
8c:48:8d:6a:20:5a:34:55:6f:c4:8a:0d:72:78:e1:da:cb:a1:
a9:49:52:91:03:f7:40:76:5e:0c:98:cb:b9:d0:d6:2d:d7:39:
6a:96:29:17:0c:01:6e:6a:42:4f:7a:55:b9:23:de:51:c1:ed:
e3:c0:f7:8c:58:45:0d:9f:bb:41:ad:c5:81:04:5b:9d:c3:3d:
c9:3b:ef:13:b7:2e:4f:f1:60:ca:16:4c:32:cb:27:4e:cf:7f:
d1:97:ce:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:03 2025 by rpki-client