Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: +H1rP12iyXlnWro8hFQ1SMQDdLLdY/NxC9hWHvj4eRM=
Subject key identifier: 59:31:2C:F5:85:6C:B5:DB:82:68:D8:7C:1B:47:1C:4D:9A:D6:AD:E3
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019A54F65462AAF02B887400E41F45A60F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0D3B
Signing time: Wed 05 Nov 2025 17:00:20 +0000
Manifest this update: Wed 05 Nov 2025 17:00:20 +0000
Manifest next update: Thu 06 Nov 2025 17:00:20 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: pG8UlYMd0ZjObvTGWgHaYBSroqG7V7CuS7jfD+PVZag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:54:62:aa:f0:2b:88:74:00:e4:1f:45:a6:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Nov 5 17:00:20 2025 GMT
Not After : Nov 6 17:00:20 2025 GMT
Subject: CN=59312cf5856cb5db8268d87c1b471c4d9ad6ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:8b:7a:8b:10:b7:b4:db:0b:a5:89:14:5f:
54:da:fa:85:67:12:12:b2:62:ca:e9:62:18:f1:0d:
ca:99:8c:7d:2a:a8:fc:7b:68:8e:8d:28:83:f2:6d:
96:63:f0:e4:3a:3f:e8:d2:d3:da:2e:6c:5d:ac:d8:
19:d1:be:24:a4:76:37:24:28:69:8f:54:44:33:45:
d0:4e:1f:38:02:25:09:fa:91:6e:39:b6:50:59:81:
17:a9:cf:ab:ba:38:a8:28:da:dc:44:80:c3:43:78:
21:88:ee:f7:ab:c6:35:5b:9a:32:97:60:37:9c:5e:
28:aa:40:09:1b:02:1b:90:0f:80:88:7a:30:fb:9c:
68:0d:a3:ee:81:e6:76:f9:42:28:54:ae:53:73:6d:
99:29:49:2f:e8:8e:54:47:ec:9e:e1:b1:6c:3b:78:
0a:9c:8c:93:49:35:d6:cd:66:bb:ed:3f:d3:5e:2a:
ef:90:3e:46:4a:51:79:d1:31:77:db:2d:21:be:59:
1a:73:2e:48:1e:a8:6e:4d:ec:93:83:5e:34:ab:86:
ca:ec:7a:49:5a:75:c6:f8:e7:d5:3a:26:51:2d:33:
46:36:ea:37:c5:4f:62:01:86:5b:10:60:a5:39:de:
1b:25:2a:84:4f:63:a6:8d:84:65:b5:44:98:6d:d9:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:2C:F5:85:6C:B5:DB:82:68:D8:7C:1B:47:1C:4D:9A:D6:AD:E3
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:82:e7:3e:22:e7:92:99:cf:3e:27:d6:63:1c:36:44:33:d9:
5a:81:fb:79:ac:bb:9f:05:ce:6c:c7:d8:cc:b3:f6:16:8c:0f:
34:8a:f9:ea:16:7b:be:cf:59:ac:00:f9:f7:e7:a0:65:3c:7e:
8d:b8:cc:cb:3a:81:bb:2c:5c:1e:30:35:e5:e3:31:1b:bd:08:
e7:b5:4d:9f:24:55:cd:80:2b:42:87:cc:e8:30:66:9c:c9:5a:
09:de:65:30:bf:7e:83:c2:20:4b:83:1e:aa:f9:42:12:b2:04:
fc:18:ef:93:b2:18:aa:10:d9:fc:6e:ef:16:94:9c:d6:9d:b2:
79:68:ca:b9:61:1c:a2:5a:5d:4b:c2:23:96:c4:59:ab:30:01:
6e:51:27:15:c4:f2:4d:f9:84:24:b2:b4:35:ae:24:27:af:de:
63:0e:41:32:37:57:45:7c:3d:fe:d4:a5:e1:61:eb:85:45:98:
f5:f0:36:22:74:9f:cb:90:f5:ea:41:dd:49:e4:a0:40:27:e2:
33:a1:10:20:16:6d:7b:9b:89:dc:f2:1f:33:59:99:0e:78:e5:
44:e6:32:47:ef:4a:70:43:ed:10:6e:99:5b:41:30:1a:b4:cf:
9b:65:fb:68:6d:24:58:63:be:62:d2:86:95:38:f3:29:a4:a3:
f6:87:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:12 2025 by rpki-client