Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: zHHESZAVvhUNa86hBK0XhrryG8IBEvSKgQp0Me44hro=
Subject key identifier: F1:66:7D:B1:A9:AB:07:A2:82:94:36:B9:A7:73:76:BE:6A:C8:59:6B
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 019A503DA77AF132721DA451C2FEFE7EF2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0FE8
Signing time: Tue 04 Nov 2025 19:00:09 +0000
Manifest this update: Tue 04 Nov 2025 19:00:09 +0000
Manifest next update: Wed 05 Nov 2025 19:00:09 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: HaFYsmYVILsFkzp6B7DYex3SI/SpD7XwueQZer9X5gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a7:7a:f1:32:72:1d:a4:51:c2:fe:fe:7e:f2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Nov 4 19:00:09 2025 GMT
Not After : Nov 5 19:00:09 2025 GMT
Subject: CN=f1667db1a9ab07a2829436b9a77376be6ac8596b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:36:bd:5f:81:65:6d:bd:d6:5a:bc:d5:d9:
14:07:48:e2:60:82:00:53:d1:2e:67:5e:6c:56:53:
f8:e5:97:ca:5d:5b:09:ad:74:ab:49:2c:b8:a2:ea:
3d:79:e6:4c:e7:d6:3d:70:5a:9a:ec:01:2d:7f:9b:
8f:89:63:e2:55:a0:ea:7a:ec:e8:48:db:fa:19:df:
c9:64:e2:a4:69:5d:c6:bf:c8:b9:ef:73:c4:5b:84:
8c:fd:fc:3f:e0:bb:77:67:b4:73:f7:9c:ac:b0:93:
8d:08:5e:ae:0d:2c:d1:ae:2c:60:3f:9c:00:8b:9b:
90:57:b9:ce:39:07:42:e8:b0:0d:00:a1:68:5e:3f:
ad:89:23:7c:e4:22:cc:02:39:26:be:49:5c:22:32:
c2:61:c4:92:69:8f:2d:76:d2:1d:66:af:ee:48:da:
c6:28:cb:77:13:26:da:1f:52:61:35:a8:90:bc:d5:
95:b9:bb:8c:f4:94:82:c1:fa:53:66:90:e7:4b:38:
d4:f4:e8:d0:05:db:17:bb:f2:7a:69:0f:51:77:56:
28:b0:ba:bf:a4:20:84:68:ea:f1:54:88:d3:bc:85:
26:82:61:3a:d2:19:7f:15:0a:60:56:dc:69:63:65:
66:fd:99:c4:c0:85:da:33:3c:41:91:ce:02:65:82:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:7D:B1:A9:AB:07:A2:82:94:36:B9:A7:73:76:BE:6A:C8:59:6B
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:30:6a:5c:b6:94:91:52:39:9a:cc:a1:55:82:e8:c6:e8:50:
00:19:79:dd:e3:15:7c:db:7f:61:7e:6f:f5:99:e2:1f:66:7e:
98:95:fa:f2:e4:ab:65:18:74:7a:44:56:6e:7b:53:78:1a:f2:
4e:7e:82:0f:b8:8a:e5:9d:22:3f:41:d6:24:c3:79:12:3f:cb:
87:4c:95:71:75:03:ea:05:f6:8b:60:d0:0b:d4:a4:06:51:a0:
df:93:7b:be:1a:65:11:f5:6a:0c:cb:a7:be:c4:1d:ae:0a:17:
76:4e:83:37:3a:ec:52:0a:93:de:8c:a2:9b:45:85:7d:b9:3b:
dc:ca:37:0a:54:20:e2:f1:ae:c1:1b:a6:5d:e5:15:f0:1d:c4:
ec:8a:73:7f:0c:25:71:ac:2b:34:8c:a5:a1:15:15:a7:83:9b:
d9:fb:60:60:bf:63:cf:75:f8:1f:c7:c5:c4:38:80:38:20:15:
09:7c:7d:7d:8e:e0:7b:fc:50:34:45:1e:6d:ac:6a:3c:5a:55:
d5:ae:cb:0a:61:3c:26:c7:4c:d4:62:67:2f:fe:1e:30:ea:e4:
ce:d4:b8:6e:89:74:38:34:02:06:c0:d8:d8:b3:18:6c:60:38:
e4:cd:cb:c4:b4:1f:79:e9:ad:13:02:3d:93:25:a6:95:48:a5:
c5:8b:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:03 2025 by rpki-client