Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: PCzUPckDgSIY8RTW5LuXDSrwTqDyr/K8wS2ODTgQyqM=
Subject key identifier: 03:FB:47:40:31:E8:24:30:6D:DA:48:E6:B5:01:B6:42:22:AA:80:09
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019A4D3CF0E86FCF6EE77D7DB277C148869E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: SRX9IKEEjT5oSeB-7SJhSMjZVJU.roa (hash: JogYdyXTs6jUeLci5HV5dPXTp8hackvCsA5/0iZx0fw=)
2: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: pynVaUoCq86ZRgdbrdHGhfWBKLaVMDz3XrPlqgEbWH4=)
3: wl9SNv70naNlxlbGYA9UwaRdUUM.roa (hash: cBLc9nicdCyrqpLVSvLzNsHxSpcCPqY4HcbtkzPI2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f0:e8:6f:cf:6e:e7:7d:7d:b2:77:c1:48:86:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=03fb474031e824306dda48e6b501b64222aa8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:eb:7e:bd:52:92:27:bb:2a:31:06:2b:df:
d8:a0:4e:5f:6f:3f:d7:f5:bd:c4:e2:74:ec:5d:4e:
7f:7b:ad:db:bc:09:90:c1:b4:d1:9d:7a:31:05:3f:
5a:cc:1c:dc:16:ef:d0:1f:4e:b2:77:d1:38:5b:a9:
37:ad:b7:25:4e:98:68:25:3f:a0:45:31:b8:ce:ee:
95:61:78:df:d6:22:b7:a0:54:e4:d0:50:bb:21:7d:
58:ee:5c:1a:c8:f2:7c:e9:5d:b8:3e:ba:4d:39:79:
11:eb:e1:b5:b7:ad:6a:f8:32:21:8d:ee:52:0c:27:
e3:f6:27:4f:01:bf:d9:27:a0:1f:9f:61:00:22:a0:
39:74:0f:cf:95:15:45:c1:52:16:0a:59:29:88:8b:
26:92:f2:97:85:cf:78:e5:5e:d2:04:fe:e6:5b:35:
7b:77:30:e5:39:e2:d4:27:17:a6:dd:3f:41:f8:46:
3b:35:a4:0c:b0:c3:bf:9d:1f:a4:46:89:71:ad:ac:
29:ef:22:78:c0:b8:a4:dd:5e:ae:ed:78:5a:8e:3f:
87:4e:f9:bd:0f:14:f0:d9:bb:10:cc:d7:7a:b6:3f:
75:ce:bd:ab:83:25:7a:a6:fd:56:b4:c3:79:5b:a0:
ec:2d:4f:88:bb:e1:62:70:fb:4d:c2:ad:13:7e:b2:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FB:47:40:31:E8:24:30:6D:DA:48:E6:B5:01:B6:42:22:AA:80:09
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2f:52:5c:71:be:0f:49:f3:75:88:fd:06:28:d9:8b:8b:4c:
3e:ca:f6:34:c5:2e:0d:3c:92:c1:ef:fd:31:a0:4f:5f:ca:91:
2e:8f:9e:93:ec:b5:99:6d:6a:76:89:63:eb:56:f4:8f:30:e2:
5e:fb:5a:85:69:9f:0e:55:27:48:da:87:33:60:85:22:a7:54:
d3:bc:c9:23:6a:3f:c9:1a:9f:ae:e3:1b:d6:c1:3c:d5:9b:79:
46:c5:99:cd:b3:4b:57:ad:c9:76:2f:f0:b4:6f:3d:24:5e:d1:
f5:92:2e:62:c9:7e:f0:5a:49:91:66:b8:44:0c:c2:84:bf:1d:
b7:dd:15:b1:6f:c2:b8:c8:87:a9:1c:dd:04:ff:b1:60:81:a4:
4b:e2:d7:40:58:5e:da:c6:ec:d1:10:06:41:37:1e:5b:7e:a1:
b1:62:d0:f5:cc:58:9f:dd:67:6c:c8:13:8a:00:55:18:6b:cf:
f4:39:2c:50:dd:a8:3d:e3:d4:07:69:e8:b5:4b:c2:a5:1d:3f:
c8:d3:3f:40:f2:09:15:ed:34:66:5b:d9:83:cc:e4:95:60:70:
cb:ed:44:31:9e:10:03:28:4a:f1:fd:f9:43:dc:2d:65:1c:1b:
62:0b:6f:c9:92:5c:9c:5f:99:1a:5c:4e:a8:d1:e5:d1:0a:81:
43:1c:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:20 2025 by rpki-client