Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: JBxNaDzEyW0eEK411PTPdf/b8BHlxYmow/rAyXPzNBk=
Subject key identifier: E1:BA:CD:30:00:86:2D:20:D1:01:26:7F:29:35:E8:E8:0C:E3:06:F1
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 0199FCC6992681CA7645E63DE7C7F179A109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 0E42
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=)
2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: A73ZrfKiv2/1FkMSqskqmYA9uRjkg2D1XHxv7ygxR3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:99:26:81:ca:76:45:e6:3d:e7:c7:f1:79:a1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=e1bacd3000862d20d101267f2935e8e80ce306f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:74:b5:18:74:f5:c9:bf:3f:f5:0d:dc:a9:
ce:96:ff:70:3e:ab:07:4d:3e:57:dd:77:cf:1f:57:
f1:21:a2:fd:06:a3:d5:69:dc:4f:b5:c2:d1:8e:40:
7d:90:b8:6e:c3:78:f6:e9:17:fd:74:64:82:b9:ad:
92:80:ac:b8:51:92:81:e6:13:ae:07:55:b3:f9:4e:
bd:5a:1f:5a:74:c8:50:d6:d4:d3:5b:f0:56:db:a9:
cc:d4:d1:88:d9:9e:bc:29:a5:2d:27:e3:10:80:b1:
77:bb:e6:39:dc:f7:71:bc:1a:d5:eb:4f:3c:2f:01:
68:d5:59:71:14:7a:c5:76:d9:7f:33:59:88:47:38:
8f:bd:a0:bc:74:58:e3:2b:43:9f:af:b4:27:48:21:
6d:7e:c3:18:ae:1e:71:2b:99:a2:34:68:aa:42:c5:
4b:da:b1:ef:7f:3a:64:a3:30:75:85:a4:a7:63:26:
1a:40:fc:ac:3d:5e:a9:b4:5a:ed:8a:14:51:5a:35:
f5:09:ca:98:17:bb:07:6a:71:f3:62:0f:f5:85:cb:
d8:28:32:35:75:26:cd:ff:ec:41:5d:0d:6f:b1:7b:
03:06:c0:05:16:e0:93:28:81:2b:d6:6c:fc:97:39:
bb:0a:60:53:6e:5c:8d:bd:6e:87:0f:b1:29:83:46:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BA:CD:30:00:86:2D:20:D1:01:26:7F:29:35:E8:E8:0C:E3:06:F1
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:3e:a2:4e:b1:16:05:96:05:f8:99:5a:1d:7d:03:70:ee:
7c:b1:67:f8:16:47:63:5b:a4:e8:8c:42:2d:a9:8e:8c:af:66:
17:c2:b2:21:44:0c:49:34:3a:74:0f:da:1a:ec:a7:8c:da:db:
24:13:c1:e5:13:50:0d:4b:60:9c:e4:24:08:4f:00:e2:4e:5a:
06:eb:5f:bf:f4:d7:20:fc:75:95:12:9d:6c:05:8b:5c:21:ed:
ec:46:0c:4c:a6:21:40:a9:cd:e9:9e:93:ac:1a:27:00:4d:85:
2e:3d:88:20:fe:c5:fd:a9:9a:d2:ee:88:48:77:67:f6:bc:dd:
02:ea:80:e5:d7:8b:e9:58:bd:b1:63:1d:76:6c:c2:c9:95:1e:
87:f8:55:b4:fd:67:52:c8:e7:63:55:55:c5:70:ee:32:0f:e3:
6f:85:10:4c:78:64:7d:92:6d:b7:de:02:34:8f:37:ec:0c:ed:
16:63:8f:be:e7:9b:2a:ac:4a:b8:e0:85:3c:26:df:69:42:ff:
16:28:9f:5c:fe:5c:8e:c9:0c:c5:0b:df:86:50:d5:9f:60:71:
32:34:4e:ba:a2:3e:b8:5a:89:11:7a:ea:4a:00:b5:36:18:53:
cf:b5:ff:56:1b:ac:22:97:1f:a4:ca:4c:45:89:0a:f5:c7:82:
be:ed:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:22 2025 by rpki-client