Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
File: X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft (raw, json)
Hash identifier: FvVZOFWUeDpn9nIQW0I92U+icJBlYawLZxQEfL1Regc=
Subject key identifier: F9:AB:64:22:C0:5D:9A:E1:7E:0E:2B:9A:2D:B8:E4:2A:E8:76:3A:60
Authority key identifier: 5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
Certificate issuer: /CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Certificate serial: 019A4FD08F7F44F0C0E297F2B7ECBD8374F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
Manifest number: 060E
Signing time: Tue 04 Nov 2025 17:00:59 +0000
Manifest this update: Tue 04 Nov 2025 17:00:59 +0000
Manifest next update: Wed 05 Nov 2025 17:00:59 +0000
Files and hashes: 1: Ngryz_JDCTWxsZghCdDW2bggtbY.roa (hash: OLqWc5pDqp3VYp84vSGxFeZ1JPG4ouAU9S0kjVUHjeY=)
2: X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl (hash: 3t399HwF83OE+I4ge8ejoLT3ckj2wpULB7pzG9rk0CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:8f:7f:44:f0:c0:e2:97:f2:b7:ec:bd:83:74:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7179eff5e0e67d0337aa8912f95a687fd44089
Validity
Not Before: Nov 4 17:00:59 2025 GMT
Not After : Nov 5 17:00:59 2025 GMT
Subject: CN=f9ab6422c05d9ae17e0e2b9a2db8e42ae8763a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:ea:3f:38:d9:0e:da:0c:92:f6:37:6e:32:
12:e4:6d:0c:67:ab:ed:74:32:f8:84:62:6e:aa:ad:
0b:e9:a4:85:58:6d:92:77:07:e9:48:55:8f:e8:6a:
12:b4:34:4a:86:00:89:17:ee:26:57:67:33:36:07:
8d:9e:29:2b:51:f5:f2:83:5c:30:b5:d4:b0:9d:6f:
cc:61:14:69:97:3b:a4:e5:8c:55:15:bb:bf:09:53:
d9:7d:59:65:34:2d:3f:23:85:0e:37:70:26:f8:92:
4c:27:b7:82:69:e4:56:8f:9c:00:fd:a7:1d:f7:9b:
45:4b:60:03:a6:b2:c9:9e:c0:0a:90:fd:70:e4:d9:
e5:8e:2a:5a:d8:34:76:41:94:5f:96:c9:a7:ca:74:
06:e9:a4:f0:5c:9c:ce:ee:7d:ca:44:00:2c:9f:23:
8d:5d:0c:9f:28:72:99:61:c8:7c:78:25:6d:ca:3a:
50:99:bf:aa:da:cb:d8:46:af:f7:91:80:38:bd:b2:
c0:a0:2d:63:83:15:76:df:99:54:15:b8:62:ad:d7:
8c:bb:67:31:20:7a:8a:c3:61:59:58:ab:b7:30:6e:
84:ee:b6:1d:97:a3:c9:d0:c9:1e:59:e0:89:a0:ec:
d4:8e:c1:ed:82:23:86:e1:43:13:e7:3a:08:e5:7d:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:64:22:C0:5D:9A:E1:7E:0E:2B:9A:2D:B8:E4:2A:E8:76:3A:60
X509v3 Authority Key Identifier:
keyid:5F:71:79:EF:F5:E0:E6:7D:03:37:AA:89:12:F9:5A:68:7F:D4:40:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3F57_Xg5n0DN6qJEvlaaH_UQIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c44d93-1695-4ab1-9142-4296d7abd3d1/1/X3F57_Xg5n0DN6qJEvlaaH_UQIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:cd:93:5d:1a:5a:23:cb:50:b5:c0:1e:02:b4:81:51:1a:
71:5e:ab:1e:47:1e:79:8e:51:61:35:e4:67:d5:db:47:e1:89:
8e:4a:d8:40:b1:73:c7:4b:01:c3:dd:18:c2:ae:7d:49:85:a9:
2b:cd:63:0a:6f:a0:89:ec:70:54:d6:58:b0:43:19:d0:09:ea:
c2:9a:e3:9c:04:a0:8d:bc:94:10:78:23:7d:98:20:b4:1b:30:
6f:e8:e8:39:07:02:8f:20:59:dd:78:72:c9:c6:31:da:e2:f2:
7a:92:d4:67:cc:ad:82:c2:f0:31:51:24:cd:3e:99:32:40:10:
53:fe:f9:a7:0f:c7:36:7a:58:3a:54:46:ad:8c:ab:b5:b9:9b:
06:b2:87:2a:c7:55:59:66:d8:1d:9c:05:5d:2c:71:46:17:7d:
56:6a:42:d9:fd:8e:df:c3:f4:92:a5:84:61:16:dd:fa:95:0d:
04:e6:87:a6:73:cd:b4:a8:06:b2:02:fa:51:b9:26:3d:ef:eb:
cf:ef:98:1f:99:1b:e7:b7:46:14:de:ed:5b:b2:73:cf:2b:f0:
b5:de:7f:e3:d0:94:66:20:aa:df:46:7a:7f:60:6d:ca:45:2a:
75:dc:2d:33:ae:f7:fa:c3:e7:6e:46:24:9b:05:ff:47:4b:f0:
21:8c:95:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:07:59 2025 by rpki-client