Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier: QBHpf5vebMH0R4rMBiJpIPC4OJx/QU2lvjevpBD1WEE=
Subject key identifier: D2:DD:7C:70:5F:C9:31:7B:A0:59:75:02:F9:94:ED:E4:A2:BA:57:55
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 019A52D1F57E9EB735CF1689F4437487ED13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number: 0316
Signing time: Wed 05 Nov 2025 07:01:22 +0000
Manifest this update: Wed 05 Nov 2025 07:01:22 +0000
Manifest next update: Thu 06 Nov 2025 07:01:22 +0000
Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: /DJVMi5re417O0Pz/d0CLEWsRwylL0TR01mJeQFYNdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f5:7e:9e:b7:35:cf:16:89:f4:43:74:87:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: Nov 5 07:01:22 2025 GMT
Not After : Nov 6 07:01:22 2025 GMT
Subject: CN=d2dd7c705fc9317ba0597502f994ede4a2ba5755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fc:e0:7c:ab:8c:d2:10:95:c9:ae:f7:ea:5e:
65:53:69:2d:8e:b2:11:2a:82:6d:21:c3:43:7f:4a:
77:bf:f7:8b:f5:66:8f:39:10:24:02:ae:3e:30:6c:
82:31:8b:3d:22:86:3c:e3:4d:fb:41:7b:9a:dd:eb:
70:29:bd:de:89:48:3f:40:fa:6d:c7:85:20:e1:72:
60:f2:e6:25:28:bc:f7:a9:1a:05:a5:d6:1f:db:9a:
cb:51:b3:d4:33:74:70:1d:66:25:e7:41:1d:61:3d:
48:0d:45:72:d2:8e:4a:ce:40:23:2b:6f:b8:d1:96:
bb:09:d7:4b:dc:b1:6e:0e:e9:b5:31:a3:90:54:13:
4b:e8:de:8f:ab:93:9d:1c:2a:14:64:da:64:0a:b9:
f4:8c:3f:ce:e5:60:95:cb:a6:a5:9d:24:e9:84:9f:
9e:48:af:f0:58:88:e3:3c:1e:83:0d:e2:c9:41:da:
d4:b2:e0:3c:cc:d7:b1:41:56:49:10:6d:5a:cd:43:
dd:fd:2c:8c:f8:98:6d:7d:1b:b9:e3:e0:00:47:7b:
93:6a:d4:d0:ca:78:3c:a2:bc:14:32:0e:41:ab:be:
6f:95:e8:c3:b7:6d:80:43:fc:f8:69:51:d6:a9:3e:
c6:7c:09:76:cb:e8:0f:1b:a4:7e:84:e7:35:c1:51:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:7C:70:5F:C9:31:7B:A0:59:75:02:F9:94:ED:E4:A2:BA:57:55
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0c:9c:26:56:13:4e:1a:65:0c:58:ad:d0:a2:c4:5c:2a:fb:
b3:f9:2d:b7:4a:cf:e6:02:6f:c5:a7:5f:d7:3a:a9:bd:87:b6:
62:d8:17:6f:f9:8e:6b:5e:f9:4f:16:9e:ed:68:6f:6e:75:01:
2d:50:ff:57:d0:05:ee:05:d0:15:13:d3:c2:27:9f:1c:21:10:
bf:1a:7a:cf:d0:9c:71:63:01:0c:0e:a5:49:fc:7a:cb:4c:4e:
00:85:a1:18:4f:40:38:cb:95:ce:67:4f:89:00:18:4e:c3:8a:
b7:04:3e:d6:62:53:d0:75:68:e7:64:39:b2:0d:25:11:33:64:
4c:1c:5b:08:28:c1:e3:0f:65:6f:46:22:c9:dd:f8:9e:5c:59:
b0:22:89:f3:67:a9:b0:ce:fe:f6:e5:79:56:28:7b:cd:23:de:
0f:f0:b5:2f:67:f5:1b:42:bf:af:90:9b:0d:2c:76:1d:4e:31:
0c:87:0c:50:74:1b:a8:c8:25:14:29:92:df:eb:0b:2f:1b:50:
54:95:ab:37:99:f8:c9:cd:44:af:6b:03:65:bf:23:06:c4:70:
92:7f:f1:64:59:3c:5f:d3:39:37:c8:3d:65:4e:75:6a:dd:42:
7c:15:a7:db:98:9b:a3:ea:89:64:ca:5f:3b:ff:59:b3:28:82:
4f:44:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:21:58 2025 by rpki-client