Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: Tg4nKO0Yp/SWV0k/f7TZsMgJilBTycMF1mwzyewG1JA=
Subject key identifier: 30:B4:AA:76:B3:46:A0:B7:C1:CC:B8:3D:28:A9:78:C2:88:06:A8:55
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 0199FB7C70820DFE9E8BA2028BD4EDD0F815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: fznUwlFwnhILWa7I494f4J+P6VFZr49xPFdqtuyh8pY=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:70:82:0d:fe:9e:8b:a2:02:8b:d4:ed:d0:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=30b4aa76b346a0b7c1ccb83d28a978c28806a855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:94:93:84:16:a0:16:5b:bc:4b:fa:dd:a9:
b1:d2:60:06:99:16:fa:fb:62:28:32:f3:1d:5b:08:
8d:17:4f:fe:84:2f:1f:d2:a3:2b:f9:4e:05:5d:a2:
d3:6a:f8:1b:0f:7e:d2:29:e8:35:7b:c6:25:05:3a:
bf:3f:b8:6e:15:74:9f:96:2b:09:cd:dd:91:f7:2e:
ff:dd:d0:da:16:19:02:68:df:76:04:81:20:22:49:
61:f5:a5:10:06:b3:ca:99:3b:13:6a:4e:36:14:c3:
5d:cd:e0:13:0e:94:d3:31:07:64:44:3e:16:44:b5:
03:b6:83:39:25:f1:00:22:52:a3:85:c6:55:6b:1e:
88:67:79:fd:0a:12:63:5e:f7:f8:e7:81:11:43:66:
d3:9b:56:1f:fa:c2:93:a5:ea:7b:42:2b:6f:f6:7f:
42:13:dd:8e:27:06:49:8f:87:08:96:5c:47:b1:57:
9e:13:bd:76:b2:2e:f2:af:74:c9:03:e2:6e:cc:f3:
13:2d:bc:68:4f:1d:9f:fa:74:c2:e2:de:08:6b:fd:
37:44:e7:6f:25:42:39:f1:82:7f:ce:8a:2e:12:3e:
34:c1:73:8b:42:1c:1c:e1:19:56:6e:50:ad:37:b8:
3a:48:5f:05:56:3f:f3:85:1c:b5:f0:02:e2:5f:aa:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:AA:76:B3:46:A0:B7:C1:CC:B8:3D:28:A9:78:C2:88:06:A8:55
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ef:34:97:72:ab:09:54:b8:f6:6d:30:b8:34:e3:8a:b2:b7:
10:02:8f:d3:ae:66:f0:ee:7f:85:4b:5e:00:56:c5:b7:ed:91:
a6:ce:ca:7e:17:d3:f6:fa:97:eb:ec:3c:d0:03:f6:b7:6b:15:
6d:df:ed:15:90:47:9f:78:23:66:5e:77:48:9e:8c:50:f3:f3:
30:c7:a4:2a:41:76:04:63:ef:ec:8e:da:0f:12:b6:03:36:60:
72:ae:ae:29:bb:55:fd:99:73:98:0b:50:61:79:2c:48:33:05:
01:5f:b9:da:c3:6f:e7:91:14:81:78:0d:46:8c:fa:0c:d9:6b:
2f:e3:f8:89:bd:07:66:76:16:28:b6:43:d2:6d:b4:f7:ba:2e:
64:87:a7:e6:38:5f:7d:1d:5c:ba:16:33:bc:a8:2b:3a:64:fb:
98:b6:39:40:14:f2:7f:19:bd:6b:9e:8c:9e:f0:2f:63:47:ab:
ee:4a:a6:3b:90:f7:52:e4:c3:61:bf:07:ac:3b:58:b5:40:11:
76:8f:fc:60:a6:9e:dc:07:01:bb:f0:39:c6:bc:ae:66:59:7a:
0b:2d:84:a5:27:ed:8f:75:7e:6a:6e:07:84:28:30:9b:37:7a:
ee:a3:e9:53:57:37:08:2b:9f:b5:8c:5b:33:73:56:5d:ab:11:
9c:5f:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:48 2025 by rpki-client