Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: W9qIZUfTq6pdkXrbc2ydCsMgxQt9jOP5A6D1hmcxCxk=
Subject key identifier: BB:52:E1:84:59:1F:0B:50:2A:BA:2C:8A:AA:FF:D3:16:20:4A:B6:1A
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019A5150E48578A17C46189273169735781F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 0500
Signing time: Wed 05 Nov 2025 00:00:47 +0000
Manifest this update: Wed 05 Nov 2025 00:00:47 +0000
Manifest next update: Thu 06 Nov 2025 00:00:47 +0000
Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=)
2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: YcfIjEmnstRgsTDVTg+GJVMb0tyyrOaj38QEGqWMr84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:e4:85:78:a1:7c:46:18:92:73:16:97:35:78:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Nov 5 00:00:47 2025 GMT
Not After : Nov 6 00:00:47 2025 GMT
Subject: CN=bb52e184591f0b502aba2c8aaaffd316204ab61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:53:58:fb:93:e6:b4:5a:06:8b:33:0f:6c:4d:
13:a7:e8:32:6f:b3:c0:d1:95:23:03:f0:6e:65:0b:
0f:2f:36:6c:5c:bc:ba:66:bc:d6:b9:3e:b5:b8:a0:
74:ce:f2:91:b8:2e:fe:50:66:0a:1b:92:5f:03:67:
76:eb:fd:c4:ac:f5:a0:58:6e:29:39:13:b2:ac:51:
38:08:8f:8b:d7:63:c7:bc:eb:3d:f6:07:a2:ba:47:
02:57:3e:0b:02:99:99:d5:f7:b8:1e:01:20:e1:b4:
52:18:4a:29:98:0c:e7:44:0d:ab:64:1f:55:b1:03:
eb:57:12:cf:cd:42:e9:de:fa:72:2a:ca:a9:e5:e5:
f3:41:55:8a:1a:9b:ea:e4:d8:be:62:f8:f6:66:7e:
ba:cd:15:4a:84:a1:3b:1a:d7:6d:cc:8e:ba:f6:86:
b8:69:01:c6:6e:02:3f:d4:72:fb:b3:ec:ed:7b:d8:
71:09:dd:8c:eb:66:28:0c:2c:a5:d1:81:d6:cc:d9:
e7:39:d6:f0:85:73:83:3e:60:c4:ee:e2:5b:ac:49:
17:3c:36:e6:e1:a6:70:cd:f0:b1:e7:e3:1e:37:35:
1c:0c:d9:a8:e9:93:ab:9b:8d:8a:6a:f8:89:d7:eb:
1c:93:29:30:58:bc:81:4a:b2:ec:b1:e6:bd:05:72:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:52:E1:84:59:1F:0B:50:2A:BA:2C:8A:AA:FF:D3:16:20:4A:B6:1A
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:cf:78:62:bf:19:27:d2:40:00:b7:75:78:05:d9:68:7d:1f:
20:ec:b6:bb:99:4c:77:d6:95:4e:42:ae:38:70:49:63:9c:40:
f8:58:34:ab:52:b8:eb:5d:53:88:e9:81:92:30:ff:37:07:ac:
77:ee:d5:7d:20:26:74:4f:f7:d3:14:19:d0:cd:79:99:2b:89:
a6:d9:57:55:84:48:35:6f:8d:f1:5c:3f:14:ff:43:a5:e7:1d:
a5:9f:6e:37:1b:4b:41:2d:f3:80:1e:cd:e4:c5:df:f1:1c:8d:
1d:cb:37:5f:c3:f1:b4:8f:43:29:8b:dc:91:58:8c:f2:85:55:
95:10:0c:70:15:99:19:5c:3b:63:ec:73:2e:d3:10:59:aa:2a:
67:cf:af:66:03:05:d9:e8:d2:93:18:59:7f:1d:e6:8b:ac:71:
83:c7:cf:b9:91:e3:23:44:18:b9:7e:a0:77:f8:ca:ed:fa:ad:
0c:2e:b9:a7:da:13:a2:0c:7c:55:6a:d7:d3:af:05:97:41:8a:
10:86:bb:6e:c0:1b:dd:91:55:52:f3:52:3e:b0:ea:0c:7c:fa:
99:e4:0d:fd:26:5f:8a:02:35:b4:d8:9b:a5:be:77:44:c7:4b:
0e:d8:b3:ff:e0:84:3c:0c:dd:6e:7f:ea:23:b1:6a:8f:61:aa:
ee:9f:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:28 2025 by rpki-client