Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: NbB4zUSHolZk9+CWa47tjYFgUooNgqFnTa7CfqRpnYU=
Subject key identifier: 6E:CD:64:90:1E:98:52:5E:4D:F5:0D:8E:20:CB:A8:93:E9:C3:95:94
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 0199FAD857C9AC29671A60B11D09B38C97C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0B19
Signing time: Sun 19 Oct 2025 05:01:46 +0000
Manifest this update: Sun 19 Oct 2025 05:01:46 +0000
Manifest next update: Mon 20 Oct 2025 05:01:46 +0000
Files and hashes: 1: IzmeYXYlO_xmlW74WeQyL7gffpE.roa (hash: Z5XX/V/bAHCE8fRhzNUzhUtEMOMQ14B1YoCinHSL1lM=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: IjApEOrgw9sG8CuBZCAcFdYlvQ0O50v6IosBXOm4cgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:57:c9:ac:29:67:1a:60:b1:1d:09:b3:8c:97:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Oct 19 05:01:46 2025 GMT
Not After : Oct 20 05:01:46 2025 GMT
Subject: CN=6ecd64901e98525e4df50d8e20cba893e9c39594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:a5:69:61:c6:25:96:07:42:d9:ee:7e:1d:
9c:79:f2:91:b1:0d:ed:4a:9d:f1:6f:45:e9:2e:23:
16:f9:d8:e3:0f:4b:df:b8:c6:c3:aa:54:1b:af:f2:
b4:63:19:86:9c:5f:c3:df:cb:4d:13:34:22:2a:9d:
74:d9:3d:63:6d:e5:1b:ef:9b:0c:69:86:f1:c3:53:
79:95:e3:c8:25:93:fe:36:dd:1c:c2:48:f1:cb:c0:
8f:d7:db:6d:7c:72:86:82:05:e1:94:b3:6e:ae:4e:
1e:a2:fe:1e:2f:c8:51:1a:88:b0:7e:2f:7e:a3:65:
d7:6f:3e:50:de:39:0f:b7:b8:f7:40:6f:13:15:2d:
7b:29:a3:72:5c:d9:12:15:14:15:f4:c3:a4:fa:5b:
6c:70:b3:f3:58:aa:6d:4c:ae:ea:e8:d2:5d:68:12:
ac:fa:4a:9b:57:35:e9:51:d2:1d:df:29:cf:85:62:
60:9d:36:16:f2:e0:95:93:04:43:5e:a5:69:61:1d:
b7:22:23:b0:65:68:50:b6:8b:84:23:93:91:91:6f:
a0:06:cc:8d:e3:d2:e5:21:f9:72:71:a4:34:6c:5c:
ac:4e:2a:40:dc:08:f7:87:48:e0:73:ba:f5:3e:e4:
0e:5c:c7:1f:46:0f:d1:4b:73:e9:c0:aa:05:b0:d5:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:64:90:1E:98:52:5E:4D:F5:0D:8E:20:CB:A8:93:E9:C3:95:94
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4f:2a:1a:d8:0d:0b:c6:4e:8a:52:86:ed:d7:67:5a:85:69:
8e:c3:7f:80:79:18:4f:24:be:5e:b1:6a:30:67:eb:3e:28:53:
1e:d4:dc:bb:d6:2b:b3:50:2e:58:d9:c5:40:d3:98:7d:6e:e3:
cb:4e:f7:a3:f6:a6:9f:17:4e:36:cc:f3:fa:57:9b:6e:10:3f:
8b:f5:af:a7:59:c4:1b:2c:9d:98:ce:08:32:c6:f6:06:84:48:
7e:15:6a:19:6d:96:92:cc:81:21:af:31:4c:ed:da:e6:e6:0f:
5a:9d:82:d4:ce:48:3e:b4:c1:05:d7:23:ba:7f:34:dd:66:e0:
bb:76:2c:6a:d3:f1:56:5c:76:e7:42:9a:a8:96:cc:10:3d:9b:
96:02:d3:db:12:b2:f6:ca:4d:2b:d8:9f:38:5f:ee:f0:07:33:
41:92:c5:40:7a:66:f2:20:24:66:fe:cc:6a:3b:c8:de:e6:13:
31:26:25:1a:3d:01:17:48:64:83:f4:d3:fa:e9:4b:57:64:64:
7f:d2:68:8d:1d:28:ac:16:1d:09:4b:23:2c:c4:30:e1:3a:01:
a3:b9:d0:0d:b7:28:b7:13:1b:9c:b9:dd:64:f6:69:a9:f2:f2:
eb:26:f4:f6:63:3d:e9:50:67:7e:7e:d9:e1:9f:63:6c:a1:8c:
3a:1f:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:05 2025 by rpki-client