Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: EA978c/Vx54tfxr8gzzmoNcT0rv1MGTicOnoYlxhxF0=
Subject key identifier: 00:76:30:84:DB:0B:1E:01:82:5E:DF:E3:14:EB:EB:7E:D9:C5:1E:D2
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 0199FF22E5473DD3096E35F328CB53EE6C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0DCB
Signing time: Mon 20 Oct 2025 01:01:40 +0000
Manifest this update: Mon 20 Oct 2025 01:01:40 +0000
Manifest next update: Tue 21 Oct 2025 01:01:40 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: 0+i+5Gux89+qCj4tcDEQhH/IO7MxSHzEu9JQeug3nsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e5:47:3d:d3:09:6e:35:f3:28:cb:53:ee:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Oct 20 01:01:40 2025 GMT
Not After : Oct 21 01:01:40 2025 GMT
Subject: CN=00763084db0b1e01825edfe314ebeb7ed9c51ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:a0:52:f1:b8:54:cb:cd:da:35:9a:de:9e:
e5:12:35:12:4c:9b:96:af:11:53:7b:db:f1:fa:2e:
1b:54:fb:72:41:57:6f:8d:38:78:b4:ed:90:2d:1d:
26:f7:b7:0e:a6:09:9c:b3:d0:88:23:ff:fb:bc:e7:
b4:9d:ed:f9:3d:19:99:cf:f5:fa:c9:e1:00:09:41:
90:b6:31:45:8a:b2:ba:a3:9c:88:78:53:75:4b:e9:
7a:91:05:9d:6d:81:7c:9a:9b:09:41:d4:ac:d5:4d:
ce:7f:24:5c:19:83:e0:93:de:9e:4e:56:3d:c6:a1:
89:6a:76:95:32:2a:0b:e0:87:f3:b8:85:12:86:02:
e3:22:6f:56:b4:0c:19:61:19:25:b0:68:62:dc:ab:
54:55:06:a1:cb:94:47:8b:1f:36:32:76:22:a7:0a:
d9:91:9a:fc:c3:61:b0:85:cb:00:8b:13:0c:18:6a:
84:34:3b:0c:67:de:25:4a:f5:e0:3e:2c:22:ab:5f:
99:ed:cb:93:bf:47:20:55:3a:c9:1a:2e:d0:97:5e:
f8:34:5b:da:23:05:a7:74:9f:67:6a:01:0b:96:1c:
49:71:20:dd:dc:07:11:14:69:27:93:d6:a3:80:7b:
40:c4:94:bb:70:d9:27:a5:6a:82:47:01:5d:6a:4b:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:76:30:84:DB:0B:1E:01:82:5E:DF:E3:14:EB:EB:7E:D9:C5:1E:D2
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e2:67:85:5c:67:38:4f:8f:e5:a4:81:cc:4e:06:db:12:95:
f6:f2:8c:78:e4:d0:6c:34:65:5c:b7:e8:6f:0a:8b:80:63:e0:
65:c9:df:db:35:14:86:34:36:60:b7:82:70:a6:ea:d8:51:17:
cd:b8:22:0b:0a:39:01:61:e2:34:4d:28:28:32:4e:18:77:98:
7c:04:bf:62:51:99:7b:1f:71:03:17:66:4a:e7:0a:e2:1c:85:
d8:20:db:0d:ce:f7:72:ac:38:d1:90:33:ae:b7:6f:b8:71:9a:
c3:5e:ae:04:58:7d:18:27:ea:55:44:7d:75:da:ae:a5:13:ef:
22:9c:cf:14:e4:e2:f2:5e:a1:dd:d6:b2:02:de:d5:59:ec:d6:
1e:6d:f7:7b:14:b0:95:17:c1:02:c6:4b:a6:f9:9f:69:0d:91:
b1:0f:57:df:32:fd:90:64:e3:f5:c0:97:27:93:5a:52:77:9f:
37:df:f2:af:3e:95:bf:f8:df:2d:71:26:95:46:4f:91:9c:0a:
f7:20:3b:aa:79:1d:b2:88:3a:dd:a7:3c:6a:d6:fc:3a:5c:48:
b4:e2:ef:c0:1f:de:f5:44:f2:8e:9f:6e:db:7b:11:ef:42:6b:
61:f5:36:82:1d:ff:f8:1d:8f:4a:87:99:3c:a4:57:30:26:81:
d2:62:79:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:36 2025 by rpki-client