Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: hg70MNVGaiBLa2cd8i0LxTFOMR/5EHaMjRw1qLvyLLQ=
Subject key identifier: 57:83:88:B5:0F:88:30:AE:EB:49:60:18:4A:56:9F:41:90:8A:E3:C3
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 0199FBEBE392D79BA135FFF9FB34224D2F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0A78
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: Jg_jfBjHb0Vu6fkwZ37mMS91qI4.roa (hash: TfhNhqloOoAsI4fDNQ7bFxjaWUIihAJVfn4SJGIonjE=)
2: RAYhGqxG90i3Xl4IbOmBMXLaWWU.roa (hash: PkL3yCHqeCepv6d1R3k2egY2vgT3zl8lcQ+M9WOKBkE=)
3: WhuuzI-giOvU0WJGmRMWrjSlbX0.roa (hash: sWWRUBfHkfBvOOVFSvoXP3yUbe11I9qeTgURb62iypo=)
4: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: 82AoyY2EyxLO5pwGGJ0GMxOK79GKB65PFcGzrNgID2A=)
5: cu8YZEomM6yhTT6rKGZD0EswcrA.roa (hash: E+q2Kh42Kr16IAejR3Z8uLwJmIfrudkWS/YgHicEZAY=)
6: shFSKFhffIiUAgxysGmRtXRHjKM.roa (hash: dQvH9QymMjpXXdgyrmMvhjbB83wD/WfhP9dhFWk+qZg=)
7: syw_ZhTYU1w7NStTQl6XEtYJ7iw.roa (hash: vh0bYcr2sbcc1SgjyRRRbNDSidOSKXW4Nng93TqNAKw=)
8: ycVnM1zp10CMEnPemmwHq5Kmb7k.roa (hash: X47wni4QutejMcFMTFg2gNEEKNeesZr+QmIkUicE1Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e3:92:d7:9b:a1:35:ff:f9:fb:34:22:4d:2f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=578388b50f8830aeeb4960184a569f41908ae3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:c9:7f:02:f0:4a:b9:1d:50:9f:d5:14:bb:
c0:9e:ed:46:ed:60:42:fb:ad:60:ed:c8:20:91:46:
7b:b7:3e:f5:3c:f6:e2:c6:f3:9a:7a:00:99:7b:e0:
2a:1b:58:01:c5:f7:40:3e:40:3b:18:70:51:0b:ab:
ed:6a:7f:d0:df:9b:a0:32:60:77:61:a5:04:17:b7:
00:69:be:74:6f:ff:b0:72:ec:68:10:3c:6e:c2:aa:
a5:db:fa:97:87:a3:fa:0f:21:38:e7:79:ed:33:a5:
03:38:d0:13:d5:48:4f:19:7e:75:d5:64:e4:06:59:
48:6d:c1:8b:4d:38:9b:45:cd:17:c0:5a:fb:92:33:
4c:61:29:8d:23:56:8b:ed:bc:6d:12:0a:a0:03:25:
fb:2d:23:2f:b0:78:d0:46:88:df:99:2f:87:b5:aa:
f5:fe:d1:5c:bb:fa:6c:fc:b8:ab:dc:6f:27:8d:bb:
a3:85:ab:cc:9d:5c:59:87:f5:ee:df:28:87:f5:c5:
71:f4:50:16:77:21:0b:df:6e:3f:f7:6b:b7:dc:c8:
dc:62:73:c3:f0:a9:42:e6:dc:b6:9d:b5:34:20:b5:
5d:9e:ba:4a:65:af:2e:cd:c0:aa:26:2a:a4:a8:43:
4f:57:2c:1f:6b:58:ae:6c:9a:bd:40:ad:d7:0a:76:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:83:88:B5:0F:88:30:AE:EB:49:60:18:4A:56:9F:41:90:8A:E3:C3
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0f:d2:0c:9a:c2:fc:66:a1:23:09:53:4b:5e:ad:6a:00:98:
78:a0:10:01:ea:71:92:8c:e4:7f:b9:6d:7f:95:53:6e:99:61:
9b:a8:b4:52:08:b6:b2:76:a7:3c:11:a3:32:76:2e:7f:97:a1:
6e:b3:e7:05:b7:2f:71:5f:a6:f0:02:97:13:6a:62:d5:92:f1:
9c:05:c7:c1:d4:bc:04:03:36:6c:33:43:a9:cc:7d:e5:7d:6b:
f9:47:1a:43:31:96:62:04:2f:fc:bd:d6:5c:a4:1f:de:97:52:
5f:35:ed:22:00:0f:c8:76:7d:79:2b:88:df:3e:56:7b:a5:59:
c8:c4:05:a8:51:55:ee:bb:b4:18:93:e6:0f:46:3a:59:66:6b:
c2:a5:96:31:d8:90:84:61:72:e1:1e:61:a0:72:cb:13:c4:be:
e3:dd:48:8e:e6:0a:bc:8e:0d:13:2c:e5:29:e2:38:03:18:f8:
4f:6d:e2:0d:27:d1:55:00:d3:0e:9c:77:4a:0a:07:04:1b:c4:
2a:ed:86:b7:de:08:a7:5c:cc:40:f4:81:60:6d:4b:d9:1e:da:
54:5b:ce:9e:10:c1:52:64:db:48:a3:b9:91:48:76:a9:0e:81:
e6:8b:82:0c:ab:32:fc:f8:dd:48:34:09:14:15:ff:82:88:c8:
c2:e9:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:18 2025 by rpki-client