Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: 2eKVfBzyrtrLSvOdOI9/zT6/GT7efl3B7qKaogewgyY=
Subject key identifier: FF:03:66:6D:B5:C6:C2:E8:4E:8C:3B:3F:7F:F6:78:43:FE:67:2D:B3
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 019A4E868934D52AF03972DDAFA8296AEAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:31 +0000
Manifest this update: Tue 04 Nov 2025 11:00:31 +0000
Manifest next update: Wed 05 Nov 2025 11:00:31 +0000
Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=)
2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: IVLkUk/OrJN822CRFliMdM+JA+DSZtccDxjHnrbbHxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:89:34:d5:2a:f0:39:72:dd:af:a8:29:6a:ea:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Nov 4 11:00:31 2025 GMT
Not After : Nov 5 11:00:31 2025 GMT
Subject: CN=ff03666db5c6c2e84e8c3b3f7ff67843fe672db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:91:75:4b:9b:d2:03:a7:5e:0d:d6:2e:05:
2a:ec:d8:ab:d7:06:32:f1:53:99:4d:98:0e:24:46:
94:5c:e4:ab:36:c3:18:82:e8:56:12:59:e3:2a:e8:
5c:57:d0:df:86:f9:d8:37:45:46:d2:20:96:1c:2b:
5e:a2:26:92:6c:ea:c5:4a:9e:f6:9a:5a:fa:56:5f:
10:5b:bc:a3:b5:ed:70:1d:1e:19:85:d2:82:06:4f:
7e:05:67:68:70:2d:39:78:91:77:96:de:ed:33:8a:
a9:d4:a6:c4:54:33:67:2b:e1:76:fd:16:aa:48:d6:
ad:47:5a:ba:b3:7d:eb:25:84:a7:76:98:8d:52:38:
e2:9e:e2:50:4d:34:c4:78:ed:62:d2:84:5a:38:d6:
97:98:ff:8c:94:f5:5b:5b:2b:ad:9a:f6:7b:97:6e:
76:ae:69:d9:a6:41:88:3d:f8:81:69:eb:f4:af:40:
2c:41:5d:e0:de:24:76:7e:a2:85:6b:eb:e5:41:7d:
c5:d7:2e:6a:94:4e:86:0e:8f:0b:6e:f6:0b:ed:e2:
b7:e9:02:82:09:da:96:2f:ff:d0:f1:c1:3a:53:31:
41:bd:94:0e:70:af:e9:77:59:27:b6:28:4f:4d:82:
85:6d:39:a0:51:df:e0:78:5d:b1:3a:d0:a7:a9:c0:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:03:66:6D:B5:C6:C2:E8:4E:8C:3B:3F:7F:F6:78:43:FE:67:2D:B3
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b5:c6:59:d8:b3:77:4b:55:13:72:81:e1:47:20:d4:1c:ec:
c3:c9:53:49:2a:6d:11:5c:e1:e9:ef:fe:19:9e:3e:da:f5:3f:
fd:ea:0c:71:be:2b:f4:48:69:93:3d:b0:f3:91:f1:07:83:99:
81:ee:30:ab:aa:01:8b:b0:58:0e:2f:ad:94:2e:8f:cb:a3:28:
6c:d3:a4:99:47:66:31:ea:40:68:7d:e3:4c:e5:e1:d2:5b:04:
6d:d9:03:b6:43:29:41:ac:08:5a:8e:b4:86:5d:df:b1:09:eb:
bc:71:83:2e:71:85:a4:1b:1f:1b:34:73:75:ce:a7:ee:6a:e1:
aa:4f:bb:67:d3:49:ac:0b:6f:6c:fe:de:6e:4b:e7:8d:7c:98:
a3:48:3d:4a:ce:5d:fd:91:b4:88:ad:3d:f7:e4:75:99:75:dd:
ba:95:e6:59:a3:ff:93:f6:10:fc:89:a0:b6:e9:e9:d3:03:1f:
13:d3:d1:d4:61:dd:56:ac:3b:0d:ae:bf:0e:8b:b7:cc:53:1f:
f6:f6:8f:b4:f1:b6:af:fb:58:b0:d6:7b:2a:ac:93:a5:b6:37:
b9:5b:5b:f4:bc:3a:0d:34:c8:c5:12:42:f5:5c:98:14:15:8e:
2b:37:6c:9f:62:ea:b4:08:f8:35:f3:2b:cb:da:ea:63:db:ce:
1a:fa:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:08 2025 by rpki-client