Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: 4IGY0CqmJlu1PIPk/s6/izpRoDPqpN7nJ6TiVrIGaUw=
Subject key identifier: C0:CF:3E:CD:8B:B9:DA:C9:C4:64:FC:46:54:31:00:10:19:71:9B:4F
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019A4F62C06DBFA4DE6A405CA15586355262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0729
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=)
2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: TzmE/ABMcyVXj4fW159HnypVsYlAQ0QpzeK9TTQC5gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c0:6d:bf:a4:de:6a:40:5c:a1:55:86:35:52:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=c0cf3ecd8bb9dac9c464fc465431001019719b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d5:52:80:12:ab:43:eb:98:2f:69:87:6c:45:
cc:c7:36:00:80:05:54:5c:86:87:8d:3e:e6:6d:27:
79:8a:a6:20:a1:c3:7f:63:ab:3d:1f:4e:10:d5:16:
e1:64:51:5b:a5:27:43:b4:07:c4:a6:25:77:83:17:
4a:68:f3:cb:2f:22:7a:70:5e:31:fe:21:20:6c:4b:
51:10:d9:69:2a:60:9b:45:2e:8a:50:78:a2:27:b9:
de:b5:c0:33:12:58:0f:a9:3c:de:14:9e:ba:96:81:
bd:2c:57:d0:94:47:8c:5e:76:fa:ba:ce:39:39:6b:
39:c0:d8:17:16:aa:95:c7:ba:fd:fb:b0:cd:c1:18:
e6:4d:51:ba:8e:50:02:f4:a1:43:00:45:67:66:f0:
cd:a8:50:6e:f5:af:78:47:47:4f:f8:34:6a:28:35:
f4:b8:cc:62:12:48:94:10:76:a3:08:78:db:06:b0:
68:4a:9f:4a:26:ac:3c:d4:14:73:4c:ef:19:b9:81:
60:ae:80:50:1b:7e:b2:a7:48:88:b7:45:fa:a4:db:
05:ca:a0:25:56:c9:bc:a2:27:db:52:40:a3:71:61:
04:50:8f:71:12:a5:7c:a0:c8:11:8a:43:3a:33:80:
6e:77:bd:93:95:bf:fc:96:4c:64:1a:6c:13:9b:03:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:3E:CD:8B:B9:DA:C9:C4:64:FC:46:54:31:00:10:19:71:9B:4F
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9a:6b:b5:5d:26:fe:99:19:0a:1e:31:4e:ef:bd:eb:e2:10:
6e:1e:f1:a6:c2:43:4f:38:cc:24:1b:10:dd:82:72:6a:60:2c:
4f:b7:1f:94:95:ea:8c:b8:b6:b2:be:bd:37:84:5b:a0:38:96:
c1:b2:f8:d6:73:f8:7e:13:2f:85:c1:5c:f7:04:fa:8a:74:87:
6f:f2:69:81:47:18:1d:a1:d4:3d:a3:19:09:c2:70:bd:58:2a:
56:94:fa:8e:9a:53:28:91:48:33:db:fa:de:16:d8:73:05:7b:
82:60:d0:4e:bb:26:c9:81:f5:25:cd:e3:ca:7c:a7:35:71:24:
ef:1a:20:e6:4f:d2:37:a3:b0:ae:7e:ad:7f:c5:cd:01:5b:f9:
15:f7:3d:0b:d1:94:bb:8d:64:70:09:12:5c:30:ea:f6:a5:10:
ea:f1:50:f9:96:00:61:91:ff:09:e8:19:7c:37:58:e6:c3:97:
13:76:59:41:81:7b:30:26:88:55:5d:55:3a:f2:53:cf:82:b5:
86:61:cd:f7:9d:e2:4d:83:23:e7:64:54:de:24:2a:b5:c9:fd:
1b:e4:37:32:9e:56:d8:68:2b:a5:10:f1:7d:24:ef:2c:2f:24:
ee:32:ab:60:1e:ff:0b:31:c4:5c:1a:7a:a7:9e:06:a7:04:e2:
db:ae:85:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:12 2025 by rpki-client