Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json)
Hash identifier: tfKrNnOvi/t2XL2oJzXM69RAulesECGgUyds+2MUyQA=
Subject key identifier: 4D:1B:22:22:8D:71:CB:1B:D9:29:2B:43:26:62:43:FD:3B:F9:F7:9E
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 019A518767A0230E40852ABDBBF60EA438FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 01:00:19 +0000
Manifest this update: Wed 05 Nov 2025 01:00:19 +0000
Manifest next update: Thu 06 Nov 2025 01:00:19 +0000
Files and hashes: 1: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: F1AKYIaW3Emdg7fhI/deNPQZBV0mAX9nP7AkvmNCrmo=)
2: yPiwl9qBas0_CWwr3HhvXq6bAGE.roa (hash: yb05fvQGJfFhNZnnjkljRSCUExMNOud+I+YEv/Cdk1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:67:a0:23:0e:40:85:2a:bd:bb:f6:0e:a4:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Nov 5 01:00:19 2025 GMT
Not After : Nov 6 01:00:19 2025 GMT
Subject: CN=4d1b22228d71cb1bd9292b43266243fd3bf9f79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:3b:a6:90:ff:80:87:43:40:0f:77:65:27:
70:9a:96:48:9c:28:82:5c:5b:99:49:99:78:a5:66:
db:3f:31:3d:84:f9:59:c8:5d:8e:01:15:e9:1f:c5:
7c:80:bc:fc:e0:35:eb:9a:fb:37:c2:c3:43:fe:08:
5c:cf:bb:15:f2:ae:27:d0:33:e3:ff:f5:81:a6:ca:
5a:3f:9b:73:fb:7f:bc:ce:bf:fb:52:16:fd:77:e7:
22:20:c1:03:40:42:a6:20:50:3d:d2:a1:87:78:d4:
9c:de:d2:c3:4c:fb:0d:c2:f2:96:ed:ec:d9:f1:70:
cf:af:b4:61:b6:15:b0:fb:17:83:df:1b:c7:06:7f:
4d:f3:69:5f:b5:04:f7:2d:ff:3b:1d:33:47:20:8f:
87:a6:77:34:12:24:5d:42:09:65:9e:df:d5:b2:2d:
d6:f8:79:18:5a:b1:dd:c1:ba:b4:59:50:3e:57:ad:
c1:43:6a:28:56:78:b6:da:51:27:5e:1e:d5:9b:f0:
57:2c:97:6f:b4:ef:d6:74:db:5f:1f:d4:d9:f7:73:
1c:25:1f:b0:36:bd:d1:be:a9:16:2b:50:7f:e8:90:
69:1f:e6:ca:dc:8b:de:04:f2:65:ae:98:44:25:b6:
ad:4c:8c:de:87:6c:c0:3f:58:8b:53:6b:73:7d:af:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:22:22:8D:71:CB:1B:D9:29:2B:43:26:62:43:FD:3B:F9:F7:9E
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:83:b7:6b:87:7e:82:e3:94:ba:36:17:af:1e:a1:10:05:
8e:35:8d:6c:6e:e3:07:62:8b:b3:ae:bc:59:b8:2a:08:4e:1d:
aa:21:0e:d2:37:9f:f2:9f:c6:1a:1f:1f:76:9c:8c:5d:0e:60:
b4:0a:67:ef:32:74:00:0d:1c:af:18:b1:c5:56:10:91:6b:b8:
4d:a2:8e:8c:68:22:6d:6c:af:8d:56:f6:a2:59:71:96:bb:03:
03:76:be:2d:8b:1c:c0:ca:c1:ad:8e:fa:64:c8:1a:5b:a4:7e:
73:f8:b1:00:5c:81:6b:33:d6:b6:56:e5:7e:b5:e2:e1:ca:80:
c5:15:fd:58:c0:6f:76:73:d9:53:96:2d:a0:0a:7e:72:ee:d7:
a5:5b:78:2f:1f:5f:e9:13:c3:38:08:d4:41:a0:92:06:b1:45:
60:30:2d:e4:89:c4:8f:62:13:d9:f8:3e:b8:c7:99:e5:6b:99:
8a:8b:0a:28:83:27:92:25:34:be:bb:34:69:a5:c3:b5:ac:8d:
a9:0f:dc:9e:92:04:00:3a:73:f2:bb:cb:64:a7:af:a6:fb:e7:
0e:14:da:50:11:6a:91:79:66:9b:1b:1e:70:4e:0c:fe:77:0f:
ba:35:51:ed:4c:4d:c2:ba:1a:08:7d:5d:57:33:e3:87:c4:ad:
10:9b:0c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:38 2025 by rpki-client