Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json)
Hash identifier: lwyXFfZlUra0IqTmaTCzVe/wxRFM4VFBnhk7mloYY1w=
Subject key identifier: D3:46:0C:A2:6B:5D:F4:CF:CF:D0:36:4E:E2:B8:F1:E1:3A:7C:8B:47
Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Certificate serial: 019A51F5A5532C5BBD3314CE1095F4C73F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
Manifest number: 053E
Signing time: Wed 05 Nov 2025 03:00:44 +0000
Manifest this update: Wed 05 Nov 2025 03:00:44 +0000
Manifest next update: Thu 06 Nov 2025 03:00:44 +0000
Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=)
2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: 3UzMJMOBnmKJmNfotOh8RUEmrlcqujRgrTAr2+ucC4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:a5:53:2c:5b:bd:33:14:ce:10:95:f4:c7:3f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6
Validity
Not Before: Nov 5 03:00:44 2025 GMT
Not After : Nov 6 03:00:44 2025 GMT
Subject: CN=d3460ca26b5df4cfcfd0364ee2b8f1e13a7c8b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:66:4b:78:fe:5f:bd:5d:79:d8:d7:18:9d:
05:b7:f9:d7:23:6d:64:48:c7:db:0a:fa:5a:9a:4c:
84:aa:1b:fc:79:a3:36:ae:4a:71:45:ae:01:40:3c:
4f:8c:df:97:8f:a9:2f:ab:0b:b8:f7:71:2e:2f:57:
68:38:4f:d8:22:96:52:4e:81:a6:23:b6:8b:85:23:
a6:d2:30:11:36:07:6c:0c:1a:80:58:0f:b4:97:31:
68:a7:5b:32:54:86:a4:16:4f:74:b0:6c:3c:a5:13:
ad:6a:01:4e:dc:bd:d5:ee:da:ae:97:03:d6:38:43:
bd:82:93:28:3e:6b:a7:43:79:59:37:42:58:8a:1d:
e9:5f:a9:7d:d9:0e:0c:76:05:34:42:b0:34:4e:53:
2c:6c:85:2b:19:fa:4d:2d:33:8a:ec:41:a8:6a:bf:
22:62:2a:d0:7c:ee:d2:19:71:84:cf:a8:a8:54:20:
09:b1:75:12:9c:b5:ea:7d:3c:20:a8:10:e6:25:ce:
0b:aa:7b:c3:3e:f8:e7:cb:51:13:b4:58:59:a0:25:
1b:4f:11:54:43:e4:f7:f2:ea:a0:5b:dc:57:f1:e6:
61:be:32:f3:5a:e4:d0:b9:07:a6:c9:53:64:04:1c:
bc:8e:f9:2f:75:b9:dd:c9:fd:a2:05:08:80:8e:21:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:0C:A2:6B:5D:F4:CF:CF:D0:36:4E:E2:B8:F1:E1:3A:7C:8B:47
X509v3 Authority Key Identifier:
keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:88:19:54:16:39:1a:ea:40:b6:07:49:bb:c5:21:29:99:8e:
a0:de:1e:03:5b:98:5d:d5:1f:ac:88:00:2a:01:ee:2f:2f:2b:
a2:b7:bd:70:ec:67:f6:75:8c:e2:8b:8d:97:b8:25:dd:56:8f:
5a:85:bc:f2:73:cb:31:0b:0a:4b:66:c9:1e:4a:d8:55:ef:b8:
ba:2d:96:d3:6f:45:37:d8:99:93:74:b3:3c:5e:f3:02:e7:67:
3f:a2:4a:02:a6:ba:bd:79:04:02:a7:d9:ab:08:7f:3e:d2:38:
6f:83:6c:a4:61:79:da:3b:f6:5c:cf:12:39:c5:ec:34:d1:d1:
e9:de:88:29:cc:9c:ca:f4:32:49:e7:51:e6:60:5d:08:5e:8e:
ea:b5:93:07:88:d8:22:b4:d6:a5:91:e9:78:e1:ff:a3:6f:2e:
58:83:ca:4b:32:42:43:6f:db:a9:7a:4c:c6:ee:2a:83:b2:15:
00:ad:61:2c:4e:9b:16:13:34:16:49:a6:36:4c:9c:1c:84:4b:
38:4d:19:5c:45:3e:d7:1d:04:2f:4e:f8:c0:da:24:de:78:8a:
6e:fc:2c:28:7a:0a:3d:c6:d0:dd:2e:2f:f2:73:ae:12:08:2a:
cf:b4:b8:b6:4a:b8:21:03:3c:5d:85:50:71:44:65:f4:47:7f:
ef:71:b1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:50 2025 by rpki-client