Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: cL/J2xVXspFWliGuq5D8LIHTCBj4JXSAnGXHoQz6qSY=
Subject key identifier: 80:55:5A:B4:84:03:10:D9:1E:8B:BC:9F:40:E2:80:1D:E7:97:18:75
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 019A54F62A16EEC6909A70D0DF242BE8C51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 0536
Signing time: Wed 05 Nov 2025 17:00:09 +0000
Manifest this update: Wed 05 Nov 2025 17:00:09 +0000
Manifest next update: Thu 06 Nov 2025 17:00:09 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: E2a6E1tsLVXHPsQPGz9OT98BkfHbD6Zz9Xb1+Mv2elg=)
2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:2a:16:ee:c6:90:9a:70:d0:df:24:2b:e8:c5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Nov 5 17:00:09 2025 GMT
Not After : Nov 6 17:00:09 2025 GMT
Subject: CN=80555ab4840310d91e8bbc9f40e2801de7971875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a5:e1:d5:fe:5c:45:1d:92:9f:1a:24:f9:eb:
58:a3:db:1d:db:2f:30:09:bd:1c:17:e9:a6:93:2b:
95:1d:7d:b0:45:47:bc:f7:b0:e5:9b:98:94:44:88:
a5:0d:c7:d9:f6:36:0f:46:94:24:7c:ac:a1:a8:7a:
0b:40:b1:30:f8:bc:18:cb:80:51:96:b8:16:fe:b7:
b1:92:83:5c:c2:59:95:14:0b:ef:40:f1:84:12:a1:
a3:ab:68:43:47:eb:a3:b2:9a:cc:a9:d7:31:c0:06:
32:61:06:fc:cf:d4:35:b6:a3:df:8d:39:11:bf:67:
32:dc:40:91:d5:42:61:f3:0f:1f:4a:70:4f:70:d2:
13:f9:f2:57:2e:f4:06:b7:5a:dc:97:bf:3a:9e:4c:
ec:4e:7c:77:b2:81:49:05:cd:17:29:f3:3f:4d:89:
49:0b:cd:7d:9f:d8:b6:9f:f9:6c:86:8a:38:8a:02:
0e:9f:76:38:59:31:d7:fd:a8:f2:da:cf:a6:61:b9:
62:a1:08:48:43:3e:36:c1:f5:d2:6e:9a:3c:d9:a8:
ee:1f:2c:b9:24:7f:4c:8e:d6:db:3e:3a:17:9a:a9:
6b:78:d6:d3:c5:42:70:cc:9e:29:1a:6b:27:f0:c5:
f4:83:53:ce:18:3a:3f:a1:ae:c0:97:5c:32:77:e2:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:5A:B4:84:03:10:D9:1E:8B:BC:9F:40:E2:80:1D:E7:97:18:75
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:06:56:24:58:e6:6d:19:56:e6:4c:85:fd:1c:91:91:1b:17:
17:96:50:e6:b5:5a:62:f3:33:36:ca:14:5a:a1:97:d4:f4:17:
9c:d4:25:01:f0:bc:d6:03:80:de:54:d5:19:1a:a5:d0:cf:27:
d2:5b:98:0d:a8:97:df:fa:e3:e7:93:64:15:39:47:d6:8f:65:
52:70:90:26:d4:03:99:08:5b:cf:d0:6d:84:49:ca:ce:4e:7a:
2b:49:5a:de:04:b8:22:cf:b1:f0:ce:b1:13:04:8b:50:fc:a1:
72:94:8c:e2:08:74:3f:c1:cb:2f:bb:66:77:ff:c1:84:91:7d:
35:04:87:15:ee:57:86:42:16:28:4a:f3:0e:83:95:8d:5b:64:
b4:aa:75:49:55:f9:35:e7:a7:62:40:9e:00:ad:50:fb:4e:8a:
a8:28:db:63:40:9a:b2:22:80:a5:a9:be:b6:c9:49:88:fd:06:
f1:6c:a0:1d:7c:49:04:27:9e:12:f0:49:c3:e4:31:87:f4:99:
67:0b:7a:09:87:f4:d8:db:52:b0:9a:a8:d0:22:c9:85:10:62:
1b:f2:1f:f6:38:59:51:69:c8:50:6a:5d:41:3d:a5:55:85:a1:
50:ca:fe:1f:2f:ae:99:e6:d5:3b:66:49:73:51:80:8a:4c:2b:
b7:e3:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:58 2025 by rpki-client