Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json)
Hash identifier: LvtWlh2jvn/UbcF7tIZ/HkCMCGLATuAQ1SqD0DRlGfg=
Subject key identifier: 5B:6B:30:49:4B:75:15:BA:89:CC:D8:02:00:98:AD:41:D9:EF:C0:3D
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 019A4DE17C80B26330420121A0AC42549863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
Manifest number: 100F
Signing time: Tue 04 Nov 2025 08:00:14 +0000
Manifest this update: Tue 04 Nov 2025 08:00:14 +0000
Manifest next update: Wed 05 Nov 2025 08:00:14 +0000
Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=)
2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: peZu5B0LhXs2mGZU5Dtk9XIP2F+xT4JY8mCmeQddc5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7c:80:b2:63:30:42:01:21:a0:ac:42:54:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Nov 4 08:00:14 2025 GMT
Not After : Nov 5 08:00:14 2025 GMT
Subject: CN=5b6b30494b7515ba89ccd8020098ad41d9efc03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:f5:be:1b:d1:86:a0:8f:67:2f:d3:aa:e6:
6a:48:7d:00:81:26:85:ba:1b:2c:8a:98:92:9f:32:
fe:e8:80:16:06:e8:7c:d0:10:a2:b3:9d:6f:52:19:
24:29:5b:53:9f:ac:b5:4b:eb:68:c7:2c:6b:ed:fb:
50:c8:39:91:29:f4:c9:05:c9:9b:bb:58:61:33:16:
85:bd:15:14:3d:70:de:6e:a7:cf:a6:99:3b:c6:7b:
c5:51:b4:d6:5f:cb:f5:91:11:33:2a:e6:6c:2a:82:
2b:4f:f7:6c:dc:84:f9:d9:d9:ba:56:db:a3:85:46:
a8:d0:f9:7d:5d:dd:de:93:19:e3:bd:28:5f:24:b8:
31:48:95:67:ad:24:14:6c:6c:01:5c:32:8e:89:14:
fe:ee:75:eb:d8:bc:63:6a:c4:66:f0:8d:71:2a:6e:
a9:1a:4b:42:9d:3d:0e:93:c3:60:71:a2:bf:ec:e5:
91:20:e7:81:8b:13:9b:08:63:fb:f8:8f:e8:e8:1e:
30:2f:cf:8e:1e:d3:49:20:13:25:5b:29:53:a2:54:
ad:38:02:ac:ce:bc:e2:4d:9f:d4:e5:bc:6c:62:33:
86:71:f8:4b:4a:d3:4e:36:70:0c:a0:bc:9f:d8:d5:
8f:18:d0:5b:c6:6a:81:86:8a:05:bc:a7:87:b4:58:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6B:30:49:4B:75:15:BA:89:CC:D8:02:00:98:AD:41:D9:EF:C0:3D
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:c8:e4:1b:91:0b:ed:97:c4:3b:5e:61:48:74:ab:ab:e4:
61:a2:5b:c1:a7:b6:a1:03:c3:65:75:90:af:bb:70:7d:ee:b8:
31:8d:6f:6b:0c:37:f6:10:f4:f8:cc:83:86:b7:7b:d3:ab:b0:
4d:2d:66:ff:ce:2f:65:6e:9a:05:42:51:53:5e:a6:8d:f8:77:
1a:de:4a:cf:92:e4:55:43:e8:d7:09:98:27:3c:b8:be:b2:d7:
cf:e8:44:2d:07:0d:d6:c8:23:91:b7:3e:e9:e3:91:dc:f0:59:
f9:2b:e3:3c:b2:47:34:d7:f3:71:61:85:de:39:ac:5f:5e:43:
9e:97:3e:dd:24:68:23:e2:60:35:94:1a:9d:de:80:62:c5:fb:
e2:83:00:14:a0:49:bb:38:fe:09:38:cc:71:5e:4a:8c:43:c6:
42:88:8f:68:07:59:28:98:1d:80:4d:f3:9e:7b:06:9e:5a:be:
e2:d7:b9:b8:6d:2f:c9:44:4e:a2:d2:56:92:9c:45:8b:7d:56:
0f:30:63:3a:3d:5a:71:f0:01:29:af:d6:6e:bc:68:44:b4:67:
16:14:85:f2:89:b3:5d:18:d7:1f:5a:b5:62:9f:a5:50:97:42:
80:90:e4:e1:e3:aa:ca:74:1b:e2:e3:23:76:a8:cb:ca:d8:da:
97:77:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:52 2025 by rpki-client