Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: cjbKh1w/1d8kcwqvth61W0BjZvdU5OcmfB5nWuc5+ro=
Subject key identifier: 40:B6:29:F4:70:46:38:FE:42:59:9E:0C:B1:C9:D7:A8:24:AB:7B:1D
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 019A4D747D03DC1A5378C88E53A383920A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 111D
Signing time: Tue 04 Nov 2025 06:01:11 +0000
Manifest this update: Tue 04 Nov 2025 06:01:11 +0000
Manifest next update: Wed 05 Nov 2025 06:01:11 +0000
Files and hashes: 1: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: VoUNNjeqOumsC2thzbe3QELnQyX5H2we2yhiKBykUjo=)
2: jokJ4cI7eIPzST9EcLtOSM-xX_8.roa (hash: TCebbhEEB8T5cCXDYMCJ8S4mvXhrW2F1v0Z6DU/4YuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7d:03:dc:1a:53:78:c8:8e:53:a3:83:92:0a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Nov 4 06:01:11 2025 GMT
Not After : Nov 5 06:01:11 2025 GMT
Subject: CN=40b629f4704638fe42599e0cb1c9d7a824ab7b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:a7:6e:07:06:5d:f4:17:2e:3f:05:aa:4c:
c3:7a:c9:82:b6:5a:3f:f3:5f:41:4f:7d:40:16:da:
28:bf:5d:c4:b8:05:61:5d:38:1c:c6:26:73:87:f5:
79:13:43:b4:ad:76:5d:0f:49:a4:26:bf:da:94:94:
44:af:3d:89:06:4d:b8:a0:d8:f0:3b:72:94:52:c7:
e6:62:0a:9b:b3:ce:37:bd:60:3a:72:e2:32:de:f9:
aa:24:61:80:82:db:22:33:0c:d4:7f:6c:b1:92:cc:
0e:2a:2f:ee:1a:4b:3f:4a:9f:12:f6:ee:5e:1f:88:
69:56:2c:10:e3:be:8b:d5:4a:09:c2:bb:df:d6:aa:
d2:1c:af:c3:e9:ed:d7:a3:29:05:a5:5d:4f:e3:44:
e6:20:9a:c2:ed:3f:fe:04:a4:8a:33:22:00:16:9b:
da:44:bf:4e:a4:b6:7e:66:86:cd:16:fb:e9:8b:ae:
c8:ee:59:d6:d4:ca:84:09:e6:52:b3:5d:9f:96:ab:
96:51:53:9f:bf:6e:e8:7b:c5:12:06:cf:ea:11:5a:
c7:56:66:95:44:43:14:af:41:95:eb:47:68:bf:b8:
8a:2e:5f:26:83:99:a5:9a:e0:cc:9e:26:9c:0b:79:
9a:68:65:65:9b:33:8b:62:4b:29:c7:47:eb:91:b1:
e5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:29:F4:70:46:38:FE:42:59:9E:0C:B1:C9:D7:A8:24:AB:7B:1D
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:4f:54:29:f7:92:56:39:20:9c:1b:49:a7:bc:fa:dd:f8:
37:79:5c:25:5b:00:5d:6a:17:10:56:0c:d5:0c:00:77:9d:b1:
63:70:33:90:c8:cd:bf:0d:be:d0:8c:62:02:2b:15:0b:4a:39:
43:8e:a0:ff:ea:39:55:38:95:06:37:5d:34:8b:d6:45:bc:12:
bd:b4:27:73:44:62:7b:06:96:e7:92:e6:a4:fc:cf:5a:d6:a0:
dd:04:f2:bb:c1:23:05:ae:72:1f:45:46:d5:4a:03:76:8b:79:
bd:37:7c:a7:1e:ea:22:ee:db:e9:1c:32:77:7f:be:6e:39:cc:
24:b6:7e:84:77:e4:ea:02:87:8a:cd:af:cd:60:51:f9:a5:43:
69:f4:73:71:88:61:b3:2c:72:74:ec:85:f0:9d:ce:8f:29:2d:
62:36:e3:23:17:b9:54:ee:05:8e:e9:75:cf:64:9c:c9:ec:5e:
5c:67:2d:c9:1d:11:42:d3:31:9e:d7:c6:24:27:c1:d7:6d:21:
84:75:f2:12:89:c8:0e:db:c3:58:44:4a:53:05:4d:44:fd:18:
4b:05:8e:b2:1f:04:4a:09:d1:9d:2d:8b:86:55:96:49:3d:57:
59:42:c3:2e:ec:ad:ce:10:72:0b:70:aa:e7:da:74:d6:9f:9d:
05:39:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:09 2025 by rpki-client