Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
File: xdXOafzPDGu44rJmfh44-5QPPSY.mft (raw, json)
Hash identifier: 0VU2TRRJ0NzYnn8rYYRit8BiEGQiG9RAoz+91gWPN+4=
Subject key identifier: 7D:C3:F8:A2:05:FD:4D:FE:70:72:6E:9C:FC:6A:F1:65:74:2A:30:00
Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Certificate serial: 019A4C9866B478987295E174520604D90D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
Manifest number: 0B77
Signing time: Tue 04 Nov 2025 02:00:47 +0000
Manifest this update: Tue 04 Nov 2025 02:00:47 +0000
Manifest next update: Wed 05 Nov 2025 02:00:47 +0000
Files and hashes: 1: 6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa (hash: Qmi5vwRBC8G/em6HsgOnkDIH/4egeMg5iAbwYtXG1+s=)
2: xdXOafzPDGu44rJmfh44-5QPPSY.crl (hash: 5jxiACo/8sPDvh8oRYjGV5WAUeSfp0uvIl/OwPT/GKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:66:b4:78:98:72:95:e1:74:52:06:04:d9:0d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26
Validity
Not Before: Nov 4 02:00:47 2025 GMT
Not After : Nov 5 02:00:47 2025 GMT
Subject: CN=7dc3f8a205fd4dfe70726e9cfc6af165742a3000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:ac:c6:62:e7:bc:21:cb:a5:5b:02:7f:c3:
3b:76:0a:dc:60:4a:be:10:f8:68:6a:60:ae:cd:6e:
12:51:a5:b6:2e:9e:85:21:2f:42:b8:2c:74:30:4a:
79:12:5a:44:11:23:20:fd:0e:64:67:19:d9:18:09:
a2:ee:98:29:6f:d5:40:e0:c9:1f:47:2d:b8:7c:d5:
fb:61:91:1f:4c:d6:e4:d7:75:ed:ca:73:24:61:54:
c8:b5:c2:0b:9d:fb:a9:b0:28:d0:c0:94:4e:dc:e2:
54:3b:91:61:c1:bf:35:9c:4d:53:58:e1:d8:f3:d1:
d9:a6:5a:55:06:42:d7:ba:e7:0d:f2:ef:49:a9:af:
31:b9:49:f3:65:8d:3c:01:84:e7:35:08:1d:02:e7:
4d:9a:b9:fb:f2:8d:57:ca:97:66:70:9b:3f:71:c3:
32:8c:e2:eb:27:a0:4c:b2:64:81:8b:20:c9:e2:b9:
b7:9d:94:a2:d8:9a:3d:7b:fa:95:35:ea:5f:0d:5a:
5e:42:e5:de:f3:ee:2b:a0:46:78:38:49:f4:81:8e:
d1:82:ca:2d:32:f0:9c:4f:e4:44:e4:0e:49:f5:a4:
c3:81:e9:84:ea:24:cc:05:87:78:4b:6a:7f:83:18:
5a:de:e1:fb:1f:ce:8c:13:20:4c:f9:9e:49:73:cc:
b8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C3:F8:A2:05:FD:4D:FE:70:72:6E:9C:FC:6A:F1:65:74:2A:30:00
X509v3 Authority Key Identifier:
keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:e8:a2:19:bd:99:f7:f7:7c:50:8b:d7:09:e6:8a:2e:c2:
89:0e:9d:e4:af:00:e4:2b:77:73:15:c4:dc:bb:4c:24:ed:af:
15:49:21:79:1e:8c:9d:63:d7:7f:2d:02:bb:17:3b:c6:1b:4f:
0b:18:68:0a:42:dd:0c:6c:9a:63:59:36:a2:02:13:0e:3c:91:
3f:54:33:4a:f1:93:7e:7e:33:a3:f2:b8:f4:b5:bb:2e:07:41:
cc:51:6e:d5:55:fa:66:32:e7:f1:c0:5e:f5:2a:96:c4:7f:6f:
67:99:99:bd:7a:51:45:6f:93:57:17:e6:58:34:e8:75:0f:48:
5b:0e:c8:49:e2:e9:30:19:b5:8e:60:99:05:ee:8d:23:a0:03:
73:c5:dd:ee:3b:eb:15:8b:f9:37:83:2d:6e:ef:83:bd:42:0c:
ee:bb:ff:1c:da:ac:0b:1d:50:6c:e7:3a:3e:5c:55:14:00:31:
79:55:af:43:89:31:55:11:3a:bd:02:ea:f5:93:f1:d6:40:a9:
ba:31:dc:8a:c1:ad:19:2a:07:ec:13:82:3b:80:a1:a3:3f:e8:
71:4d:71:2e:45:0e:a2:e2:2f:b4:4c:5a:d7:66:99:39:1f:09:
c8:d4:31:79:82:ca:87:bb:12:85:8f:fe:29:25:f5:d6:21:e6:
ba:b4:c6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:53 2025 by rpki-client