Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: s9ibGpWOCK7AmlU+s/wS6EjqIdHhD+gBwGNCfGDoQHA=
Subject key identifier: 07:6C:15:06:10:D9:52:E6:A3:33:7A:B2:5C:B7:BB:C3:FE:66:02:C6
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 019A4F995D14ADA6D41DC138E86194A5FCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 16:00:42 +0000
Manifest this update: Tue 04 Nov 2025 16:00:42 +0000
Manifest next update: Wed 05 Nov 2025 16:00:42 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: nj68Wa0NIdV4GnB3A2t3+acQHg/z3TKwOSm3KHtSgyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:5d:14:ad:a6:d4:1d:c1:38:e8:61:94:a5:fc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Nov 4 16:00:42 2025 GMT
Not After : Nov 5 16:00:42 2025 GMT
Subject: CN=076c150610d952e6a3337ab25cb7bbc3fe6602c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:98:c6:4a:be:33:81:dc:9c:e9:c0:28:8b:
73:74:a2:aa:35:05:8a:18:28:cf:c5:77:24:2a:d8:
f6:8d:ab:e7:3a:45:55:33:8a:32:6d:30:41:53:9f:
3d:81:a4:8c:dc:6c:b1:c5:1c:7a:06:77:54:aa:d5:
6c:af:e5:92:40:a1:d1:1e:5f:d8:77:88:07:28:77:
d6:5c:ca:99:a3:46:c5:be:0e:98:0c:8f:fb:bf:0e:
a1:81:9b:dd:9a:09:19:58:80:82:f8:1b:3d:ed:7d:
b9:b9:1f:64:d3:80:df:d6:0f:5b:a7:04:62:95:3e:
49:42:ff:f0:28:a4:ee:05:b4:50:80:0d:7a:09:0a:
58:b5:62:88:26:8e:61:fc:26:72:61:38:0b:d0:eb:
38:1e:fa:48:56:51:1c:94:b3:b1:28:ce:59:78:5d:
85:27:84:36:42:65:19:77:1f:91:9c:fb:8c:f2:9e:
bf:5b:c9:61:3c:5a:92:74:71:5f:02:94:73:e4:ff:
b3:a3:8a:22:b5:95:d3:e9:ba:18:d6:07:f8:aa:b6:
1b:31:2d:21:84:eb:49:e2:de:f9:1a:88:8a:cb:b4:
a5:47:61:3c:22:54:30:6e:85:40:b2:2d:1c:2c:d2:
19:e3:2d:ed:12:46:31:d8:f4:fc:72:4d:8c:34:d2:
4a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:15:06:10:D9:52:E6:A3:33:7A:B2:5C:B7:BB:C3:FE:66:02:C6
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:1f:5a:3a:8b:52:ba:27:59:ea:ab:8b:13:08:11:f8:68:
4a:3a:26:5b:5e:53:ab:76:a7:8a:75:3f:ef:b7:ae:7d:81:9d:
51:6b:20:b4:57:da:82:75:5e:fa:e7:b8:c9:97:cd:ca:d3:0f:
6b:48:d7:51:d5:5e:7d:85:0b:6e:e9:32:e9:f0:a0:e3:6d:3d:
3c:87:f4:44:a5:08:0b:cc:5d:a7:27:30:3e:79:73:8f:49:5d:
4a:3b:b3:33:fd:1e:29:a7:c5:b3:f5:0c:05:9a:6b:c0:76:6a:
0b:f6:c7:66:a6:4a:2e:39:94:aa:2b:9c:11:f1:ac:c6:68:a7:
bb:8d:c8:3f:1e:c5:7f:16:71:84:6d:c5:67:5d:e9:c3:05:21:
be:83:87:a4:7f:a8:fe:27:b5:01:40:85:26:00:0a:6a:ec:54:
97:ae:77:7f:58:06:df:e6:94:fb:21:0c:ba:57:56:b1:a1:55:
ce:fc:93:bc:97:7a:1b:22:db:f4:71:ae:55:da:90:0a:0c:1e:
0e:27:f8:36:f2:b9:e1:62:9b:b6:46:d6:60:3c:7a:ee:64:f1:
ce:77:d4:93:e6:fa:70:4f:82:a9:5b:d1:7b:7c:e5:17:23:83:
18:0e:22:60:93:ef:03:7b:50:9f:b0:d1:59:2f:2c:d2:87:46:
23:11:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:24:58 2025 by rpki-client