Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier: qsuHzEVAwX4ensWCDJ/A4cNyoJgO5Qr+MbUZYMyZZFs=
Subject key identifier: 14:27:B4:BE:E4:08:0A:07:0B:63:61:A0:14:16:86:2E:45:DB:1F:A5
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 019A4FD016F567D2001BF77E69C483CBFEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number: 0E8A
Signing time: Tue 04 Nov 2025 17:00:28 +0000
Manifest this update: Tue 04 Nov 2025 17:00:28 +0000
Manifest next update: Wed 05 Nov 2025 17:00:28 +0000
Files and hashes: 1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
3: EtBWv7v42TBRx3xi5if6zm6OAdo.roa (hash: wUjEWMJsxkGqfJP8Q+fyLu6SEzpYpLZd1/pV8n4as7s=)
4: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
5: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: Q5eXDnNtNLgtoUA1sVO7lKVMiyUIPIm9DrOGyVh2GNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:16:f5:67:d2:00:1b:f7:7e:69:c4:83:cb:fe:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Nov 4 17:00:28 2025 GMT
Not After : Nov 5 17:00:28 2025 GMT
Subject: CN=1427b4bee4080a070b6361a01416862e45db1fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:be:f3:b9:ee:1b:09:9b:d1:ae:63:2a:16:f5:
d0:74:46:37:e8:82:2e:8a:13:b8:2f:57:f1:4c:80:
ad:c5:92:11:e6:87:4c:53:7c:a8:c1:c1:fa:51:c8:
ff:33:7b:f9:4a:10:24:eb:b8:cd:68:4e:9c:77:c9:
d3:c3:8e:ac:b8:f0:46:cb:72:aa:d2:22:7e:54:eb:
36:0a:27:d2:c3:24:67:18:64:da:ef:19:61:bc:25:
91:2c:b4:4a:8e:ef:b2:94:72:47:96:4c:f2:df:40:
d6:a9:f6:14:22:7a:b0:4d:65:93:81:9a:49:98:77:
f3:54:9b:b7:9b:95:e6:55:93:77:b1:6d:fd:82:af:
c5:fa:ee:3f:1e:80:9b:4c:73:71:97:7d:e8:1a:c0:
fb:e3:fa:05:63:e1:d3:22:c9:90:30:3e:46:45:10:
0c:4c:ba:03:b6:f1:7d:ac:5c:26:0d:38:15:c7:16:
53:17:e7:6a:f5:f5:4c:c2:23:63:75:26:72:ec:4f:
9a:96:61:8a:07:3a:62:bc:a6:36:e7:a3:ac:79:1d:
37:a0:c2:20:f4:f3:67:ab:c0:f8:9b:7a:72:f2:f0:
65:ee:6e:cf:e9:cc:c5:1a:f6:c5:6a:99:ae:49:00:
a8:23:3b:17:e0:20:cc:fc:c5:94:22:1b:6c:42:04:
ef:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:27:B4:BE:E4:08:0A:07:0B:63:61:A0:14:16:86:2E:45:DB:1F:A5
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c9:82:80:26:89:a9:9a:e8:87:22:54:37:9a:a5:84:c2:aa:
3d:4d:58:44:48:b4:f6:cd:54:32:01:9a:68:83:8c:a4:b5:67:
da:b5:f3:85:8c:35:ff:30:91:40:02:5e:0a:64:42:dd:e0:75:
77:87:8c:22:50:9c:30:1a:87:64:96:87:7f:a0:81:e0:24:cc:
e5:22:91:56:73:56:ab:65:53:d7:0b:c2:36:14:52:60:82:58:
af:21:8f:c2:83:33:ae:76:6d:9f:9f:09:49:24:7e:d9:15:9c:
d2:54:5f:40:ba:56:97:84:dc:23:ad:5f:68:2e:61:e8:bb:f2:
32:7c:bc:bc:6d:13:60:57:08:e6:05:7a:d3:35:c7:2e:20:ad:
4a:2d:7f:2e:7c:4e:a9:3d:05:03:d1:c5:c0:1d:48:7f:7f:c8:
d1:5a:08:46:da:1e:8d:36:d1:e5:7c:1f:60:36:de:b0:b9:31:
57:d1:7c:e3:f3:fd:22:63:d1:48:14:86:c3:5d:1b:9a:c2:5b:
f1:41:b3:d2:1b:0a:ea:c9:b4:1c:58:83:f6:b3:96:9a:79:14:
ff:be:0c:c4:d0:32:df:ac:68:47:cd:dc:c1:e2:4a:64:96:37:
7e:8c:b3:92:bc:3d:10:af:46:4c:60:d7:bd:17:0e:50:b4:ea:
4a:34:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:08 2025 by rpki-client