Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
File: XPMa_DbLaVUAf-l-1KXjGF0icbo.mft (raw, json)
Hash identifier: HLXnuSy/LtqNE9gyrkWmq8Enzmk1eJOCWH9KcDt40Pc=
Subject key identifier: 0B:65:F5:3B:FB:68:66:5F:E1:99:9A:8D:46:72:4F:66:98:90:57:DA
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 0199FC8FAAE53B3E83A971449747DFF16379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
Manifest number: 16F5
Signing time: Sun 19 Oct 2025 13:01:37 +0000
Manifest this update: Sun 19 Oct 2025 13:01:37 +0000
Manifest next update: Mon 20 Oct 2025 13:01:37 +0000
Files and hashes: 1: 0LO0qT2-0L6mWDwJ3dVrGvaEEOA.roa (hash: m3gjbEV2ZPpf1SrIWWEpb/lM9m2SeM9EF+s0bK96n04=)
2: 3TSrnVPCjyw6LodRykSs6RR28tA.roa (hash: zGSnutgCi7aRhsrnKssjXI5Z238+gDkkfWPc6h8G0+I=)
3: CXLJsfdv2mQYEw_nRCBRyHgGrls.roa (hash: gIlLTUkZL/5+bXwsRESHghLIgWvhwbD5U5vB0n4lI0k=)
4: GZyq4JhiMN6IbDxHDi387ilVO3Q.roa (hash: RAmDxoFTdOQGRBWibMySEyO1+N/egEhlrBt73Hj0G1U=)
5: XPMa_DbLaVUAf-l-1KXjGF0icbo.crl (hash: AN5IvpWmu1wqkvCZdV/0bqnX3OF/Jj1Q0hPDq06d+iU=)
6: XsnL58BowN54P94Hq8ZFELardLk.roa (hash: HNbFuOKPa1T82T8LpW7Qm3FZ0tR+dmMImgYgvtx3m4g=)
7: Zz42OKsTm8e7N4-UL7iAE7WQUo8.roa (hash: 5tp1DE1mgaUL43CN7zGdBuvgS2VFLrFuAK++O/dGYog=)
8: aCmXnOhdIWHZjR6YD1Rod6YvGNc.roa (hash: iW+Z/yl7UOD6yvlgUZgO+TZmSZwkPpW3YOaIuSe/RJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:aa:e5:3b:3e:83:a9:71:44:97:47:df:f1:63:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Oct 19 13:01:37 2025 GMT
Not After : Oct 20 13:01:37 2025 GMT
Subject: CN=0b65f53bfb68665fe1999a8d46724f66989057da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:0c:87:6b:09:7c:9d:82:7f:ef:39:a2:81:
b5:23:e7:d5:0a:f3:54:f6:13:9f:9b:1c:dc:cb:9b:
df:fb:f7:9e:4c:a1:31:bb:f9:31:2a:07:ef:58:e2:
5a:a7:58:76:33:d8:a7:5b:3d:bc:26:7a:ed:0b:2c:
07:2e:e7:9d:b6:30:92:00:41:4f:30:dc:0e:0a:19:
44:6a:45:1c:54:b4:b6:4a:b1:9b:4b:39:34:30:ef:
07:49:2f:e2:96:6a:c3:a2:1a:4f:ad:dc:05:c3:21:
ec:ab:a9:fa:07:4c:51:f1:0b:cb:12:af:0c:9a:e7:
b5:cf:d2:71:b8:58:7b:f5:46:6c:d7:36:36:62:11:
95:77:8e:08:e6:c5:9c:88:5b:d4:4d:b4:10:c6:f2:
0a:3a:30:33:68:40:33:c7:36:38:5b:10:f2:4f:56:
cc:e5:1c:57:5d:59:dc:16:ff:83:ee:2d:51:e6:85:
fe:00:24:6a:aa:aa:57:b0:25:ba:29:6d:5e:a5:b9:
57:37:ae:a5:dc:ef:1c:4a:89:7c:cc:3f:53:4f:b1:
29:f7:a2:e1:3d:0b:34:c3:d7:fd:17:2e:de:78:4a:
b5:96:1b:7b:22:70:27:38:6f:fa:55:31:e7:5c:ba:
fb:e1:1f:7a:77:15:ea:cf:4d:25:f2:1c:9f:7c:1e:
fd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:F5:3B:FB:68:66:5F:E1:99:9A:8D:46:72:4F:66:98:90:57:DA
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:b4:33:a2:2f:9c:e6:b8:fd:9c:39:f9:73:ed:43:4a:01:
2a:a4:84:2d:9f:a7:80:b3:38:8c:18:64:85:f4:d7:6e:fa:8a:
10:d1:b3:47:6f:67:85:42:ca:4d:91:28:0e:47:07:da:a6:27:
11:4c:8f:b6:b0:76:ff:ca:f8:f4:1e:dc:48:c9:0a:8f:a3:24:
da:75:05:5d:46:c8:a0:80:48:a6:10:4b:fe:05:06:c5:16:28:
eb:fd:97:67:cd:04:c9:aa:04:e4:cf:44:65:32:c7:b9:19:38:
16:af:d4:2d:59:23:0f:5a:9a:82:07:f4:1d:74:cf:ba:c7:96:
5c:83:c6:be:cb:f6:ec:06:e4:09:a3:0e:0a:6c:fe:0b:47:1a:
92:cd:4b:13:87:d0:a2:24:9d:12:5e:91:6e:0b:16:a9:f5:8a:
d6:08:6c:3c:d9:a6:ea:7b:9a:96:15:56:d8:08:8c:5e:6d:bf:
54:83:00:b8:32:f6:37:e2:7c:69:59:77:eb:83:d9:b9:6d:ae:
00:a4:56:5e:fe:f6:04:f9:11:19:5c:db:db:16:25:cf:27:56:
fb:a8:3a:78:9f:51:9e:a5:99:13:21:dd:5a:ca:29:cf:a6:11:
8e:32:f1:72:ca:d1:2e:50:4a:8a:64:8e:52:b4:8c:76:56:eb:
ac:13:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:41 2025 by rpki-client