Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: wYKttXjwbZTPS6e0pWal9XI0ZyRI2v2yMoCtTUigZo0=
Subject key identifier: BD:A1:D4:46:9F:4B:B9:97:79:68:7D:69:EA:D2:A0:AE:25:C9:8A:E7
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019A4E4F6CE06FEED55ED20781F74F6B71DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1447
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: dZfvZeBH0Yno3g193osToG5DA93XRVBTimpPi91M/Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6c:e0:6f:ee:d5:5e:d2:07:81:f7:4f:6b:71:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=bda1d4469f4bb99779687d69ead2a0ae25c98ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:47:6c:ce:3a:d9:b3:22:76:44:d7:29:de:
8a:d1:0c:8b:1c:13:c2:ad:27:38:1a:7a:86:21:2e:
d0:52:10:2d:dd:05:3e:fe:8d:b4:6d:c8:26:1b:6f:
e0:90:dc:1b:5a:af:1e:9e:e9:26:30:1e:00:bf:64:
c0:6a:f3:b3:c1:7e:f9:ee:60:52:43:80:df:96:79:
ac:5b:40:60:99:77:13:95:6a:f7:0d:5a:ff:7c:fb:
17:7d:c8:0c:d3:ed:3a:95:29:70:d3:7c:79:ee:a3:
a5:b0:00:13:5e:bd:36:7e:62:84:64:d5:54:06:0e:
c7:32:a2:14:e5:59:14:f1:87:09:a6:bb:4d:95:71:
77:da:9c:90:6c:d2:3b:69:59:06:e8:dc:12:57:51:
f7:a7:73:1b:cb:62:b2:06:ad:27:c3:d3:8a:b1:f3:
ee:45:66:4a:4b:20:15:21:07:1b:07:b7:01:98:b6:
45:b7:a2:0e:93:fb:cb:82:90:ce:7a:75:38:db:f1:
c5:e8:ee:a2:0f:67:e9:ed:5c:f8:25:e2:1b:50:55:
1d:30:12:75:39:64:5c:9e:05:02:19:d5:89:99:f3:
59:0c:25:13:0c:00:e3:bd:ad:17:0c:37:59:02:ff:
2c:50:98:7d:f4:76:d9:c1:b5:ea:c0:e4:a2:5c:3a:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A1:D4:46:9F:4B:B9:97:79:68:7D:69:EA:D2:A0:AE:25:C9:8A:E7
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:25:91:04:78:73:18:2f:f4:31:5d:76:61:5f:75:bf:4f:
3f:d7:92:2c:d4:8c:fe:20:1a:02:a8:4a:09:1b:95:95:3b:03:
34:70:d5:96:0c:c7:e4:d9:18:e3:66:5f:82:0d:a7:68:40:e2:
61:55:c2:ce:6c:76:48:27:5a:e6:20:4d:79:77:4f:01:d9:89:
9f:89:b2:9e:cc:55:97:43:c9:73:1f:cc:29:ad:d1:db:11:ed:
3a:f8:1c:9e:a7:a0:5b:e6:81:46:a0:0e:64:e4:3a:09:99:52:
c7:12:d0:b8:47:88:7d:fb:cb:4b:0d:ba:8f:e5:7f:0c:95:03:
28:f1:33:5c:d4:41:68:ce:59:1b:83:9e:ee:14:1f:ef:94:e8:
1e:22:4f:9b:86:e1:17:c6:15:4d:66:c4:d1:c8:9d:a7:5d:6c:
d1:fb:d4:1b:b0:e2:3e:ed:08:70:10:32:62:3b:10:d7:3f:da:
f8:db:d9:ef:c5:49:e8:fb:4d:9a:7d:4f:9d:a4:bb:97:15:27:
a3:53:b2:c1:7d:12:23:90:28:d3:75:f5:cc:7f:36:ea:e2:ef:
6b:b2:b1:58:14:70:89:c9:1c:a4:0d:77:bc:ef:bc:dd:2e:07:
e7:c9:ce:d5:04:5d:ec:5b:fe:b4:4a:4b:c1:8d:26:96:27:4c:
12:93:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:31 2025 by rpki-client