Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: 2NiXvksH+I+5PO8IMyW+FAZBg8tRP1Emz+UT23NMrfs=
Subject key identifier: C6:EB:22:FD:5D:C6:77:39:7F:8A:F6:3B:3C:FC:DB:8E:E2:F8:24:AA
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019A4E191A99BFC12C7BA7C74A00DA695A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 0642
Signing time: Tue 04 Nov 2025 09:00:59 +0000
Manifest this update: Tue 04 Nov 2025 09:00:59 +0000
Manifest next update: Wed 05 Nov 2025 09:00:59 +0000
Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=)
2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: DWjZ1un8Qdacl7jhZc0gEdTxlWsi8cZkrumHYn7PK4A=)
3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1a:99:bf:c1:2c:7b:a7:c7:4a:00:da:69:5a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Nov 4 09:00:59 2025 GMT
Not After : Nov 5 09:00:59 2025 GMT
Subject: CN=c6eb22fd5dc677397f8af63b3cfcdb8ee2f824aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:24:be:8e:01:6e:13:90:1d:f1:44:6b:78:
e1:d5:83:75:21:28:e4:8a:f3:6c:5a:39:57:86:9f:
5c:e1:ef:a8:c4:fe:d1:eb:ea:7d:6e:19:1d:67:db:
c4:64:e5:2e:65:6e:ec:78:3a:1d:d6:0e:88:a6:ff:
bb:62:15:39:65:b3:53:d0:64:3c:f5:9e:a8:f0:04:
a2:7f:76:d0:e0:b7:c7:91:b5:6d:2b:e9:f3:21:ec:
c3:e9:2c:fb:ea:88:14:b4:fb:73:51:3b:92:6f:68:
0a:86:fa:36:8c:c4:bd:f0:5a:5a:ed:da:5b:8d:ff:
b4:1c:4e:6d:05:e0:b0:2e:43:99:f5:95:f1:8d:f5:
7a:4f:d2:2b:d6:89:7b:be:29:17:de:b4:ba:48:a4:
b4:45:7f:bc:f5:ca:16:f6:4d:f0:52:8b:40:eb:75:
1d:f9:6d:d4:64:c5:cb:4d:7d:d1:68:2d:ae:21:fb:
16:fe:0e:0f:2e:b5:5a:fd:2d:97:b0:51:44:14:05:
d7:5c:20:f4:8f:53:a4:3e:ed:2e:f1:14:c1:34:b9:
dc:9e:13:ee:16:5d:23:00:f6:e2:d3:c5:c4:80:c4:
8b:a1:6f:c7:c2:e7:9d:b6:6f:81:fd:b2:74:63:9e:
8a:97:09:fe:f1:9b:e7:b6:39:a0:b8:fa:5d:f2:b9:
bb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:22:FD:5D:C6:77:39:7F:8A:F6:3B:3C:FC:DB:8E:E2:F8:24:AA
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ae:da:62:2b:11:09:9e:60:bc:98:92:1e:47:01:88:d2:4e:
c3:55:22:20:81:42:53:74:1e:2c:f7:b7:80:d6:05:50:c2:0c:
c2:b6:65:22:7a:c6:95:2c:d2:2c:16:a0:ad:1a:dd:51:5b:4d:
ef:6e:f5:0d:f5:15:fe:20:60:a8:cc:c7:64:06:25:aa:f9:ba:
bc:d8:ca:f5:13:9f:6d:60:a0:be:dc:f6:85:30:b8:b1:60:a5:
9d:bf:3b:ef:2f:7c:3a:0d:dc:61:4a:28:b9:c7:21:05:dd:94:
b8:d7:37:32:38:5b:17:9b:94:50:40:d2:d3:2c:c5:3b:35:8c:
4b:bc:e8:57:ba:d3:e5:b9:ed:ac:fb:6f:be:58:e8:4f:f1:48:
90:a0:d7:a1:f6:83:25:b4:40:d2:28:be:14:f7:c6:61:87:d4:
2b:26:00:1b:0c:a8:3c:d5:e5:da:cb:52:cb:a7:cb:0d:8f:2c:
04:ba:f3:c1:2d:ea:fe:f6:c6:ce:4b:e8:bf:70:12:8f:7f:74:
e1:a9:27:a9:57:c3:39:5a:f4:b2:4a:2e:75:b7:d4:7f:60:40:
91:c7:fc:f6:31:06:ef:06:fb:67:c4:15:35:d7:83:8f:a7:73:
d5:37:9b:53:0e:da:74:36:19:06:b1:31:3a:61:bd:8c:82:d2:
98:3a:4a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:11 2025 by rpki-client