Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: WZFn1DwZxnoEeVB0w3atmCebkbUmuzRUMudLU2CnNT8=
Subject key identifier: D8:24:55:AC:94:F1:A8:FE:D6:CB:5D:28:B9:32:EF:5D:41:BB:6A:9E
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019A4EF5587533AFC704F040D91E51D95061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:30 +0000
Manifest this update: Tue 04 Nov 2025 13:01:30 +0000
Manifest next update: Wed 05 Nov 2025 13:01:30 +0000
Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: abWR5har3grs8xjcCQo+IkMhXNUXj/C3UD4dXb/ikJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:58:75:33:af:c7:04:f0:40:d9:1e:51:d9:50:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Nov 4 13:01:30 2025 GMT
Not After : Nov 5 13:01:30 2025 GMT
Subject: CN=d82455ac94f1a8fed6cb5d28b932ef5d41bb6a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:8d:44:f2:4b:75:bb:49:ee:d9:92:d7:e6:
82:53:a7:10:54:d2:6a:50:e8:ff:25:c2:c4:85:82:
56:cd:c4:fb:21:aa:8b:ef:a5:29:f6:a3:cf:02:12:
e1:23:e6:6e:f3:99:88:14:98:f9:24:98:ab:ce:bb:
8a:68:4f:73:43:87:b2:6d:9e:85:0d:ce:45:85:d1:
96:71:90:ea:cd:c9:fd:1e:34:09:96:27:98:55:34:
d3:61:5b:48:87:db:4b:4f:49:fd:80:fd:77:62:bd:
f5:0a:e5:ac:07:18:b2:32:55:8f:cd:5a:a6:94:ea:
4d:35:13:67:f1:ba:d6:d8:39:da:bc:20:18:74:d6:
80:dc:99:4d:9b:ce:69:64:c9:95:af:e7:cc:c6:17:
be:9a:e2:ff:1a:1c:b8:c7:f9:7f:ed:6d:0d:df:fd:
10:f2:b5:5c:39:75:64:13:d3:dc:bc:60:ac:37:0f:
50:65:1d:2d:41:de:1e:56:f8:48:73:3a:2b:93:0c:
59:46:7f:77:c2:97:da:a3:48:16:65:60:1d:75:57:
30:ad:7d:74:eb:70:fa:82:33:59:49:3e:61:71:a5:
49:de:80:fd:26:ee:fb:0b:01:c3:b5:63:72:10:12:
c9:61:40:46:63:30:a4:c4:9b:55:d6:4a:72:3b:d8:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:24:55:AC:94:F1:A8:FE:D6:CB:5D:28:B9:32:EF:5D:41:BB:6A:9E
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:eb:16:b3:cc:35:f1:22:51:18:c0:d9:cb:35:ea:89:ab:96:
cc:6a:f2:c8:ea:d6:cf:90:8c:b8:d5:80:eb:2b:91:df:63:0a:
d8:af:31:58:78:44:d2:38:98:9b:1d:88:00:de:33:ad:70:d9:
d0:55:1c:4a:42:b4:0f:c5:c0:da:9b:6c:f7:10:89:98:58:07:
98:52:f8:0f:f4:3e:a9:52:86:a4:a3:5f:fb:f9:78:27:7e:ee:
e2:24:f0:42:7a:d2:95:1d:f3:58:1e:b1:b7:4a:2b:c1:f9:07:
19:09:ca:c4:14:f8:3c:a2:cf:18:43:db:8d:6d:43:29:1f:30:
39:50:3f:96:7a:76:bb:77:e6:20:a9:34:aa:d5:48:3c:22:80:
5a:5a:0a:04:18:8d:01:a1:d0:9d:8d:b5:7c:06:f1:b4:fc:a1:
65:99:19:38:ab:d8:35:a5:3d:a5:be:8d:19:ed:a6:3d:51:41:
ba:bc:19:a7:ce:aa:a3:0f:81:1f:e6:74:e9:12:81:52:3c:2f:
69:b0:6d:d7:a8:69:cd:e8:0b:9b:32:0b:ce:ff:77:95:8a:2d:
e0:cc:9e:c9:08:a8:13:ca:a8:e5:fd:15:b3:ca:1b:27:47:8e:
40:b0:d1:b2:d4:c9:3b:6e:22:ec:d8:a7:91:07:6a:1d:a9:19:
ae:83:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:37 2025 by rpki-client