Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: a9IGksYYHqY94+56hREqtU+SWu5twOSEHU/EVL7D/VM=
Subject key identifier: 71:CC:1F:1F:A3:8E:77:08:CE:C1:23:70:8B:B7:C2:70:74:40:1A:67
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 019A4D0707C5377DE67918320BD005228AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0BC5
Signing time: Tue 04 Nov 2025 04:01:37 +0000
Manifest this update: Tue 04 Nov 2025 04:01:37 +0000
Manifest next update: Wed 05 Nov 2025 04:01:37 +0000
Files and hashes: 1: O93k6bKhYCgLqm1pwPcFwndFJfc.roa (hash: mGQ92ARMuHfH2tnd6YZOf6zGRFHFURqcW968Yoazf28=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: 5koHyFXTJariezelUDVscGbZUw8F2GC6WQKLl7vVKMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:07:c5:37:7d:e6:79:18:32:0b:d0:05:22:8a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: Nov 4 04:01:37 2025 GMT
Not After : Nov 5 04:01:37 2025 GMT
Subject: CN=71cc1f1fa38e7708cec123708bb7c27074401a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:fd:56:87:92:37:ad:e6:39:de:d4:82:21:
b1:14:f8:b0:34:8e:0d:ba:08:a8:90:e0:23:b3:3a:
f1:b5:62:19:d3:e4:63:b9:9a:17:19:fe:c6:d3:49:
bd:d7:0d:ac:8f:ab:63:e1:c8:1c:84:97:04:36:d4:
19:ee:f3:32:fc:6f:72:18:32:39:c5:eb:5e:58:c2:
d6:d2:db:9e:f0:c0:61:15:54:7d:16:36:e0:71:09:
11:f4:08:09:63:9d:bf:99:8f:a5:29:16:27:00:83:
6c:6e:19:a4:9a:71:0c:c5:1e:2e:21:98:b9:69:b0:
0d:c2:4a:7f:b5:92:3b:20:45:4d:d8:43:61:34:a1:
d1:30:99:00:2a:14:0d:e4:42:ff:18:0f:ab:a2:52:
0c:93:2f:e5:14:24:0a:fd:4f:6c:8b:79:c0:25:7d:
90:2d:fb:1e:9c:57:f3:a0:82:fd:06:02:6d:da:a4:
4b:87:71:47:bf:65:04:39:87:df:68:c5:ce:25:b7:
d1:9e:45:b1:93:1f:5c:68:59:00:09:b9:16:f2:17:
30:4d:d6:78:86:bd:45:8e:57:a4:0c:b9:f5:25:76:
cc:11:6b:a9:6f:7c:3a:fd:a4:78:37:a0:e1:03:3f:
bb:f7:84:de:65:d6:8f:10:e0:46:d7:c6:b5:aa:6f:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:1F:1F:A3:8E:77:08:CE:C1:23:70:8B:B7:C2:70:74:40:1A:67
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:d2:33:1c:58:55:eb:e2:b8:82:ab:df:7c:cd:71:ec:d6:77:
3a:7f:7d:16:17:37:c6:ad:b3:ed:48:bb:41:c1:73:49:74:fb:
a0:cd:cc:8f:e9:36:9a:56:6d:cd:d6:85:10:6e:a3:57:fd:e2:
f0:a0:43:1c:7e:18:69:1f:e8:ca:e4:7c:9f:66:fe:d4:dc:15:
d0:48:8d:b3:d7:6f:ea:28:97:39:8b:c8:7b:64:3c:a0:b2:df:
c8:ef:d7:f7:c9:37:7a:7d:11:e5:cc:08:01:bd:c8:e0:8c:0e:
66:09:64:a3:f3:7e:e4:db:a1:96:b7:72:6a:28:17:14:d0:46:
0d:c7:7b:5c:71:29:a6:31:6e:e0:5d:6c:40:d9:9b:85:78:0e:
06:2b:70:1b:ca:6c:77:98:47:a8:1d:dc:5f:3c:7a:16:e7:7b:
6c:cc:6d:1b:38:7e:6e:dd:94:5e:30:6f:45:cc:f1:06:51:27:
bf:05:2b:d1:f8:b8:d5:3a:b3:02:a8:7c:22:b7:fe:76:5f:55:
d2:f9:6a:81:06:3a:b2:a0:6f:25:16:8e:64:d5:ce:e3:81:d4:
c1:88:98:7d:76:be:59:33:e2:15:af:5e:e8:d6:c0:b1:a2:1a:
52:a8:16:30:a0:c2:d3:69:f8:66:33:83:bc:a1:52:57:23:19:
f2:94:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:35 2025 by rpki-client