Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: aBXNVrPbahsSnU2FZMBQy+pDAtF6vdvVXGP72gxtYNw=
Subject key identifier: 09:3F:9B:64:04:4B:ED:AF:9E:D5:99:6C:9B:C2:12:AD:25:1B:D4:30
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019A50E3589B65B24CA81C52FC7380211501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 22:01:07 +0000
Manifest this update: Tue 04 Nov 2025 22:01:07 +0000
Manifest next update: Wed 05 Nov 2025 22:01:07 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: AAX/SYzvw8lS+E53woMP/wMz2g79ILTc3DnrY9ENxNo=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:58:9b:65:b2:4c:a8:1c:52:fc:73:80:21:15:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Nov 4 22:01:07 2025 GMT
Not After : Nov 5 22:01:07 2025 GMT
Subject: CN=093f9b64044bedaf9ed5996c9bc212ad251bd430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4e:39:ea:b4:90:ac:86:2f:22:35:02:c0:71:
de:ef:d0:51:c2:5e:3f:de:62:87:9a:71:af:e5:ee:
38:0e:72:3b:53:ba:39:49:80:74:de:a2:9a:af:01:
0f:00:b2:c5:52:62:21:ff:1e:01:10:43:8f:92:90:
47:c0:9e:95:3c:f9:e0:e8:9c:00:1c:8e:d3:59:02:
a1:fd:78:c8:42:39:c9:6f:b5:e6:35:ac:b0:c7:a3:
21:46:db:e4:0c:f5:4c:97:06:4e:d8:9b:21:f6:ac:
30:8f:95:85:94:65:ea:b6:bf:ad:04:47:0a:fe:70:
1d:42:b6:37:c6:3f:6f:57:cb:0a:88:c3:1d:06:ec:
46:82:cd:7c:45:3e:c0:f8:de:66:3f:6c:8e:94:bb:
02:83:96:67:21:bd:90:0e:fc:a3:c6:e7:cd:46:49:
27:45:4e:4c:96:d8:59:c1:7d:eb:bd:53:b6:10:9a:
23:da:ae:a9:c8:08:7b:84:f4:03:57:fd:a6:9c:4d:
0d:41:fe:5e:37:c9:7e:87:69:75:3a:f9:d7:50:2a:
5c:a4:e5:9c:3c:a8:1c:e4:79:f0:a1:a8:30:99:88:
9c:10:dd:5c:60:3e:00:eb:62:bd:13:d1:33:32:9a:
43:ec:76:8f:cf:41:a6:48:e5:b2:42:63:e0:70:ec:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:9B:64:04:4B:ED:AF:9E:D5:99:6C:9B:C2:12:AD:25:1B:D4:30
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0f:67:c2:cc:bf:51:5c:1e:37:13:5f:f9:5b:0e:1e:84:79:
1c:38:36:bd:47:11:8e:b7:88:3b:c7:67:be:2f:9b:3c:00:e1:
c5:9c:3d:a8:0a:ad:4b:37:c7:6c:22:60:a9:c4:fe:b7:d0:02:
9e:a9:c8:3b:90:8f:ae:d8:c4:ed:71:71:b0:c6:47:33:0a:43:
76:0f:00:7c:24:38:bd:7d:fa:bb:74:70:20:13:ff:9f:35:1e:
86:fc:3d:dd:4d:eb:87:fa:e0:a0:e9:72:8a:4f:fd:18:e4:be:
73:b2:d3:04:ef:c4:29:bc:95:0b:40:24:ce:36:c5:a4:17:7b:
15:8d:e2:78:9c:14:44:8e:dd:a1:44:50:23:dd:b1:93:72:f8:
a8:da:94:92:aa:49:1d:c0:39:7f:8b:c7:f5:d5:e6:85:42:2b:
23:31:e3:03:3b:57:7a:5d:0d:23:57:03:23:24:1a:30:86:1f:
fe:1e:fb:35:a7:24:1d:c9:13:e8:85:e4:1d:23:ed:96:93:c7:
c1:c6:45:07:b4:29:07:48:35:06:34:b6:cb:dc:62:82:59:02:
9c:c1:8a:de:3a:4f:07:b0:1b:60:ce:3d:32:17:ce:7a:c3:fd:
3f:d8:5c:a7:35:c2:b3:f2:1b:a1:fe:f8:4d:4a:0e:19:96:24:
7c:a0:36:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:20:48 2025 by rpki-client