Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: ZpOlSlhGJi2VnByLHI/zaZq0Si94QtlEEd9jB7060Lw=
Subject key identifier: 42:B1:A6:A4:38:A2:17:E0:45:A3:22:48:F3:5E:DE:72:B6:1C:E5:8B
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019A4DE1F417D382BFAA0A7A79270B764252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 06CD
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: 2xyaeCXskQiP9fS12Ud1uOlcpIenQPgcNog4KZRTOdg=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f4:17:d3:82:bf:aa:0a:7a:79:27:0b:76:42:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=42b1a6a438a217e045a32248f35ede72b61ce58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:cd:a3:ad:e7:24:a7:44:70:20:0c:58:7b:
a7:cb:45:91:f3:95:d7:2a:1e:68:32:bc:ee:cb:c8:
43:ef:fa:d4:80:31:3b:f8:fe:43:5f:40:0b:66:8f:
31:44:e8:94:77:61:c2:7e:37:f3:6e:b2:b1:a2:4e:
84:20:03:e8:e4:44:ec:cb:cd:55:81:84:27:43:cb:
29:a2:55:ad:a1:cb:bf:29:a3:6b:62:55:b5:c5:f2:
76:e9:6c:b1:33:2c:04:1b:83:4b:80:d8:12:d6:e9:
cd:1d:0b:d7:89:02:b3:75:ac:75:e2:e4:41:3f:3a:
51:83:89:e4:a1:15:70:b3:47:c8:22:87:8c:9f:22:
ab:16:bc:98:94:65:45:8b:ca:1e:00:fc:69:d5:15:
59:af:a1:a0:d6:71:88:7d:83:cd:52:62:8e:75:03:
fc:89:0f:9e:23:3f:a4:f6:f9:2b:df:c6:f9:c3:d0:
c2:66:ea:75:57:03:c9:49:6d:6d:24:d9:80:10:fd:
87:73:44:30:9b:04:03:35:bf:68:a7:1d:d9:83:ee:
9c:88:82:0c:23:6e:41:d8:68:b0:03:e7:c7:65:ac:
a6:25:2c:2c:d5:68:06:d6:3c:a7:f4:a6:73:05:77:
e2:d6:1e:f1:c6:d2:58:86:c6:90:b2:36:44:38:01:
05:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:A6:A4:38:A2:17:E0:45:A3:22:48:F3:5E:DE:72:B6:1C:E5:8B
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:87:2f:c0:32:95:47:50:a0:ae:ab:5c:74:59:9e:4c:10:2c:
4f:e0:71:8d:ef:bd:1e:87:00:a9:3a:7e:cf:dd:30:fb:48:da:
ff:e8:a8:ce:df:2c:bf:c1:b9:04:2d:4b:d2:f6:6e:68:32:1c:
80:48:2a:16:b7:04:66:d7:a9:e9:1f:63:56:77:d5:64:cc:10:
71:e3:0d:6c:84:96:01:b6:0a:5b:a3:92:72:42:dc:0b:1a:8a:
5a:f9:57:be:1a:c9:c8:e2:a2:ba:b8:ac:72:f2:4a:48:1c:88:
6d:42:74:0a:dc:9c:98:65:10:0f:94:49:d7:3f:01:63:64:93:
d9:62:cb:01:c5:cb:01:d4:6a:58:c8:c0:cb:b3:21:b6:85:e9:
1b:39:a4:91:c7:f4:ab:24:2c:b9:62:57:72:d1:26:5e:e2:1a:
6f:47:e5:65:05:b2:f6:65:58:94:fe:8c:cc:52:8e:c4:20:da:
9e:4d:d6:7d:f6:86:8f:56:22:ff:42:74:a9:e0:83:bc:be:af:
8e:6d:5b:95:47:9c:f0:dc:df:44:e8:fd:4d:a6:6a:df:aa:de:
2e:9d:38:42:97:cb:24:40:5f:68:49:d2:36:d7:ff:12:7f:b4:
17:04:d5:d6:73:8b:61:4e:47:fe:1a:c4:c7:9b:13:0e:85:cb:
f7:84:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:36 2025 by rpki-client