Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier: DBTuMtMK6kSnqelul3HS0QGwRGgvdylF0R1RvyHPBPo=
Subject key identifier: B1:05:B4:83:DC:58:D9:9E:91:3F:8F:43:67:F1:6C:BB:39:08:1F:57
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial: 019A4DAA781D62175C6244FDFABD9A1192CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number: 0ECC
Signing time: Tue 04 Nov 2025 07:00:08 +0000
Manifest this update: Tue 04 Nov 2025 07:00:08 +0000
Manifest next update: Wed 05 Nov 2025 07:00:08 +0000
Files and hashes: 1: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: ZU40ZGv6GNeT8OSbjoBIaQMxD2SNIz2kL7hqxgMjfgE=)
2: d0esey8AL3oqWdpXKQi0WyV7ktQ.roa (hash: J4cOoBAYf62aaAeG5Hi7u+/pYelZ41GqNxwzMAQ75xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:78:1d:62:17:5c:62:44:fd:fa:bd:9a:11:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Validity
Not Before: Nov 4 07:00:08 2025 GMT
Not After : Nov 5 07:00:08 2025 GMT
Subject: CN=b105b483dc58d99e913f8f4367f16cbb39081f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:88:2c:7b:ed:9a:6f:6b:49:8e:9f:16:99:
85:90:cb:cf:ad:41:65:32:5b:43:bb:5c:12:46:60:
5d:43:f4:16:da:ff:c5:db:e9:e1:2e:76:25:4b:f5:
c0:55:26:be:ae:56:9d:ca:4b:c7:25:e8:7a:f5:ea:
2f:50:66:72:f1:23:07:8d:5a:a9:dc:13:99:9d:60:
36:4c:2e:26:90:9e:78:2d:0b:3e:39:b7:bc:95:07:
7a:ca:85:90:0c:96:a5:63:fb:6f:7f:bb:35:db:79:
bc:51:25:ab:04:3b:7e:95:91:e8:f0:53:45:52:2e:
5f:3e:1e:f0:c3:31:fb:9b:e4:9f:59:85:f6:a9:08:
f2:82:8b:b1:e6:22:d3:50:ef:7d:7d:ef:a4:ad:03:
a1:dc:01:3f:fd:fe:5c:df:92:0f:0a:e3:21:d6:84:
9c:25:e2:dc:dd:85:25:6e:0c:a1:41:32:fd:97:71:
bf:57:1b:9a:f4:f9:96:db:ec:d5:5e:40:a3:e7:55:
e1:08:34:d3:39:b6:8d:a6:b0:96:85:0d:ca:30:6b:
9f:36:44:c0:bc:48:b4:d5:87:16:c2:97:b8:13:40:
c6:d6:9d:bd:42:56:6d:f5:d1:ec:f8:15:eb:fd:19:
dc:72:03:c1:a6:bf:dc:fc:30:ff:f4:9d:28:1e:6b:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:05:B4:83:DC:58:D9:9E:91:3F:8F:43:67:F1:6C:BB:39:08:1F:57
X509v3 Authority Key Identifier:
keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3b:79:98:48:37:fc:d3:77:a8:6b:e0:40:22:e2:c9:9e:35:
45:0e:48:1d:03:1b:73:f4:59:0b:87:7b:fc:62:1f:b0:93:ba:
02:e7:44:af:ed:5d:9e:25:ea:ed:de:4d:5b:a4:53:9e:6f:63:
b9:b0:f1:27:7d:74:72:e1:08:ed:a5:75:72:cd:39:bf:2e:da:
3a:61:ae:ca:13:2d:ab:af:ee:b8:b0:85:9d:29:17:5e:50:5c:
e7:1e:31:bf:33:91:f0:5a:e8:e7:49:da:99:25:83:e5:c8:88:
ce:42:05:24:f6:64:d0:62:f9:8b:6d:08:4a:56:a8:bf:ca:e7:
44:b9:e2:f2:ee:f3:65:45:4c:42:b0:ea:07:8a:52:71:e9:f8:
94:fc:3d:f2:ea:9c:e7:c8:f4:96:3d:e6:a4:f0:de:3f:58:ab:
49:e4:5e:be:87:6e:85:b8:9f:b7:6a:49:81:7c:c6:77:c7:75:
4d:21:b9:1a:96:c2:ee:34:a0:59:67:e3:05:53:62:e7:28:96:
98:5f:64:f5:34:46:38:22:4f:d1:48:ae:54:6f:1f:55:13:3b:
04:d5:99:ed:27:0e:44:43:7c:ed:37:8f:33:de:69:b4:19:ea:
bc:9b:12:b9:c5:dd:a1:fd:d4:25:56:ed:49:5f:14:0e:7a:b0:
11:28:5b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:36 2025 by rpki-client