Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: CT18yJDKfD2TJocm96I7TtKwFJ6WMOdHSESTvarU/2Q=
Subject key identifier: E6:14:F1:32:A3:42:62:4E:ED:FE:C9:17:A9:DB:60:C5:E4:B5:1C:34
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019A4E8655AB8F61A4F02370F2E6381EBA5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: xpi3ocihvwZDdFDHgi9WSHOAcl1QPzah/WH2Jtyve+4=)
3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=)
4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:55:ab:8f:61:a4:f0:23:70:f2:e6:38:1e:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=e614f132a342624eedfec917a9db60c5e4b51c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:67:3a:6b:01:74:b3:1f:ff:2d:47:8a:c8:
ed:20:ec:55:ee:9d:58:e6:2f:d3:a3:cd:67:09:db:
a7:11:96:2d:2b:d8:a3:46:12:61:00:78:f3:02:a6:
3d:50:41:01:18:10:69:04:c4:52:14:0a:00:ef:6a:
96:24:1e:1d:fd:4d:70:9d:78:10:0b:fb:2e:9d:91:
6f:63:15:d0:20:df:d0:27:bf:70:ec:ec:b8:a7:33:
0b:38:ae:f0:de:34:91:80:29:2c:20:39:01:f3:fb:
c3:23:e0:a6:8c:58:ab:81:0d:8d:c1:70:f5:50:14:
57:54:63:51:8a:94:69:5e:6e:a6:6b:65:02:04:10:
a5:ad:37:78:b5:1d:71:1d:dc:59:74:6f:ea:34:81:
85:69:57:f4:06:58:44:e4:5c:73:dd:94:ef:3d:3c:
cc:36:d1:ee:26:ca:81:9c:d4:86:38:8f:2d:26:4d:
99:92:a9:41:f0:66:7b:c5:42:91:e6:72:1b:9a:4d:
f6:33:9a:d5:88:0b:1e:ca:47:45:50:5f:44:74:9f:
6f:28:a2:ce:fa:51:00:e3:f2:b7:96:9b:a6:43:0e:
6b:df:1e:bd:02:05:5c:29:93:98:cd:05:7b:c8:3f:
a1:bd:18:bd:7f:da:e5:40:c6:d5:d4:58:20:48:b3:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:F1:32:A3:42:62:4E:ED:FE:C9:17:A9:DB:60:C5:E4:B5:1C:34
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bb:ee:97:f8:53:da:33:58:7f:8c:56:f6:1c:85:6d:4c:e4:
8e:89:4b:65:f1:2b:e0:7f:aa:35:c2:6a:86:c3:31:d4:8f:c9:
27:92:86:e4:5c:0c:34:93:a2:8e:16:95:d1:1c:78:a7:52:8c:
25:7d:59:07:93:c4:78:f5:52:2d:6e:e0:8c:9c:26:33:7b:e6:
6d:b5:af:84:91:55:59:93:37:06:7e:b5:52:6c:b9:00:b3:81:
2a:7f:da:e0:73:f9:78:66:dd:bb:74:3f:a4:e7:4f:75:b2:8e:
05:f5:a4:77:6d:8d:72:5d:cf:d1:b3:9d:8b:19:ea:e7:d4:b4:
67:74:28:a6:d4:45:59:ea:0d:2b:e1:97:72:d7:98:68:a8:e6:
7b:2d:ca:4a:e2:5e:d5:14:f0:88:07:85:04:0b:f6:c3:32:9e:
90:ee:0b:0e:ad:25:e9:a8:72:4f:83:33:7e:64:0f:a2:c5:85:
f0:90:07:aa:91:86:5b:f4:71:95:1a:25:65:d3:f2:33:52:06:
39:e6:54:72:92:d3:b7:7b:b9:75:eb:64:fe:50:e8:e6:db:d8:
be:dd:a6:48:1d:9b:f9:99:fb:57:ff:50:cc:37:0e:f1:7d:62:
33:56:df:ef:bd:43:57:8f:df:49:98:72:d5:02:5d:4d:12:5a:
fd:c7:6e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:47 2025 by rpki-client