Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: Kp9NI7MBx+28/Pe5BdRmaqbsx+JN1owJ7rywto8BOgo=
Subject key identifier: C2:A9:13:51:2F:DC:4B:A5:9B:AA:21:92:DA:F7:85:AC:D8:70:5F:ED
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 019A503E1632CAC3A757D07FA535B08E5BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0DF5
Signing time: Tue 04 Nov 2025 19:00:37 +0000
Manifest this update: Tue 04 Nov 2025 19:00:37 +0000
Manifest next update: Wed 05 Nov 2025 19:00:37 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: +A1Xap1Rw9fwyKiAO786ylFpgo7fV9+jzn+5t4VtIv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:16:32:ca:c3:a7:57:d0:7f:a5:35:b0:8e:5b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Nov 4 19:00:37 2025 GMT
Not After : Nov 5 19:00:37 2025 GMT
Subject: CN=c2a913512fdc4ba59baa2192daf785acd8705fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4e:90:0c:91:6e:d5:d2:64:0a:ed:f9:29:6a:
87:0e:df:25:e5:a6:c2:6b:f4:c9:02:df:f9:3c:ca:
d6:c2:c0:64:a1:6b:7b:6a:5e:06:b8:23:0d:48:f1:
ff:5e:3f:eb:a6:dd:1e:20:cc:37:f6:a3:63:90:7a:
ca:7e:18:7b:a5:0d:74:96:3f:18:a3:df:95:9a:c8:
19:13:73:6e:27:c9:96:03:5b:d6:60:db:a0:bb:d6:
e4:25:44:4b:5e:4c:d7:25:8a:53:6f:82:25:a3:d4:
90:a5:2a:d9:20:07:1a:ad:b9:de:43:f2:58:a8:89:
71:1c:35:57:b8:96:a7:13:79:40:0a:d0:d2:33:ca:
a9:77:ec:32:b9:52:07:13:11:e9:fb:30:58:24:23:
6d:50:84:0f:f2:a8:21:04:bf:ab:50:f6:40:4e:2f:
b9:fe:0b:0f:ab:6c:fa:40:60:b5:5e:04:92:c5:1b:
c5:49:3a:e1:d8:5b:38:81:47:44:17:a2:e7:3b:ed:
14:0a:fe:44:dd:f0:42:6d:92:da:0b:01:4a:f3:4b:
4a:ac:4b:3d:2d:22:d2:d5:27:ad:af:d5:7c:e1:e2:
05:e6:2d:b6:0f:39:3f:77:49:64:89:c8:f1:1c:10:
98:a1:25:09:9d:b5:c4:23:cb:f9:7e:a7:25:09:5a:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A9:13:51:2F:DC:4B:A5:9B:AA:21:92:DA:F7:85:AC:D8:70:5F:ED
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:fb:9b:d5:7a:1e:b1:93:df:e4:8c:79:05:22:1a:75:c2:
f8:ae:e6:16:d2:98:48:73:b3:72:e6:8c:a1:20:8b:d7:1d:88:
87:41:18:af:59:ce:50:cf:80:f5:de:bc:fa:92:4f:55:ce:82:
95:09:e9:53:e6:2d:49:ef:de:dd:99:8c:24:f6:dc:9b:95:1b:
55:3b:52:77:a9:1e:24:75:bd:1f:48:d8:07:06:df:9a:23:65:
e0:58:76:5b:30:a2:f3:1a:b1:19:5e:bc:fa:b8:ad:65:46:90:
4d:e7:3a:4d:ea:2a:35:1f:72:02:48:6a:3b:04:cc:37:f1:78:
99:e1:c4:4a:f6:c7:d2:16:22:4c:60:f7:c7:bd:2e:36:bc:23:
e8:72:e9:68:b9:cb:d2:d5:0a:b3:f6:e1:48:78:d2:11:c4:7c:
c5:af:00:2f:81:8d:96:88:c6:4b:df:3e:f0:41:86:3a:9d:9f:
8f:0b:81:b1:e8:20:eb:80:9a:87:c7:09:11:b4:58:c6:cb:d3:
b2:dd:98:fc:ab:ad:f2:92:d5:6a:91:c5:2f:93:e3:fa:ea:a0:
f9:bd:ec:4e:49:1d:fb:90:69:80:53:11:57:30:c3:b4:10:2d:
16:d0:46:72:d2:1f:39:bd:0d:c8:e0:21:b1:c3:7f:6e:94:98:
85:5d:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:25:18 2025 by rpki-client