
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
File: X5PadXwX_jig5s1wJ1xzyMaciW4.mft (raw, json)
Hash identifier: 2p5tp4ODb89X59hRxJpVpB9118hFd4XiGldDlpA+Quw=
Subject key identifier: B6:4B:97:ED:D2:45:7C:ED:15:FE:D4:0F:A7:15:01:46:41:E3:1B:1D
Authority key identifier: 5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
Certificate issuer: /CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Certificate serial: 019A541AEB7384DFD9362642A277215A9675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
Manifest number: 0ADB
Signing time: Wed 05 Nov 2025 13:00:41 +0000
Manifest this update: Wed 05 Nov 2025 13:00:41 +0000
Manifest next update: Thu 06 Nov 2025 13:00:41 +0000
Files and hashes: 1: FFbUWYwdC98UV9f9LgiYYBOYjz4.roa (hash: qHQMRtEIE6PEk6OgWACfwNz50T8j2hZuZAIlDNeAQBs=)
2: X5PadXwX_jig5s1wJ1xzyMaciW4.crl (hash: DdAhjKMsfKBjKPRQyCUeK47pEh9z0Go55tNni0wvA0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:eb:73:84:df:d9:36:26:42:a2:77:21:5a:96:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f93da757c17fe38a0e6cd70275c73c8c69c896e
Validity
Not Before: Nov 5 13:00:41 2025 GMT
Not After : Nov 6 13:00:41 2025 GMT
Subject: CN=b64b97edd2457ced15fed40fa715014641e31b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:7a:13:72:00:f4:55:03:30:79:87:50:5d:
ad:3e:45:a2:d7:7f:27:f4:64:d6:c0:43:54:14:ed:
9b:b1:d2:a1:86:40:94:1d:7b:45:00:29:1b:dc:67:
54:a9:c8:30:70:b0:54:c9:7a:4d:e8:fe:6a:e6:34:
f6:e9:2d:cd:44:36:15:2c:3d:f2:2d:2f:9a:c4:53:
e4:60:21:ed:1d:75:57:ce:de:4b:c6:69:5a:fe:44:
e1:b1:e0:4b:4e:9e:57:bb:58:d9:08:76:fe:3d:1e:
af:d3:b5:5f:61:ab:e6:59:ec:1a:7f:2d:2a:67:a7:
c2:5c:3f:c5:f3:0b:2a:9b:78:9d:cd:02:84:4f:e5:
a0:90:d4:49:00:14:b2:14:3b:58:fb:8e:26:27:ad:
1e:d7:1b:31:e3:7d:68:fc:18:c7:6d:42:5e:63:42:
67:6d:8b:64:05:5f:31:4d:71:2c:50:41:46:ea:69:
45:1b:e6:01:ae:f4:bf:79:3b:5b:1e:de:9c:6f:72:
dc:4d:13:37:e9:b4:39:6d:a9:92:35:96:22:5e:6d:
f4:de:56:d0:f0:6f:51:df:bd:7e:f0:52:ab:16:51:
b3:64:7c:c4:a0:03:af:47:bf:dd:da:35:1b:c6:96:
ca:3f:e8:9c:96:b9:92:25:b8:b7:32:56:f3:19:3e:
9e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4B:97:ED:D2:45:7C:ED:15:FE:D4:0F:A7:15:01:46:41:E3:1B:1D
X509v3 Authority Key Identifier:
keyid:5F:93:DA:75:7C:17:FE:38:A0:E6:CD:70:27:5C:73:C8:C6:9C:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5PadXwX_jig5s1wJ1xzyMaciW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/79e439-fc0b-4e6e-8b06-39fb66a26ef8/1/X5PadXwX_jig5s1wJ1xzyMaciW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:53:c0:0a:16:71:1b:d9:29:96:9b:bc:ad:61:04:e7:ed:5f:
9d:bf:6b:48:1c:d9:e8:bf:21:29:28:c6:fd:86:48:7b:bc:a3:
95:af:5e:9e:8f:42:c0:3d:55:de:2f:a2:4f:ce:a5:bd:be:c5:
81:1c:5c:4d:51:09:8d:0d:db:54:6c:4e:80:fd:26:9d:86:cf:
9e:2f:9c:05:32:19:98:b6:22:73:75:50:23:ee:0e:57:8d:d2:
1c:e2:72:0d:bd:ce:2d:2c:37:f1:7a:2c:a5:0e:ab:81:87:0e:
22:1c:13:10:09:b5:9f:91:f6:45:43:20:d5:e0:05:a6:1d:3a:
fe:92:ac:c1:b1:3c:78:bf:11:7b:78:9e:69:37:f4:50:1c:c2:
fc:2a:2b:05:7f:54:f6:0d:f1:20:e8:57:1f:1e:3a:29:88:1b:
83:31:91:12:86:30:64:f4:96:54:86:e5:a0:41:c6:71:55:be:
fe:dd:73:cc:46:76:73:43:9d:3a:aa:2d:de:dd:fe:5b:0e:39:
d5:8f:8f:a9:bc:52:46:e3:2a:09:ce:4f:25:bf:a4:81:fc:e0:
08:74:59:2d:18:3e:d6:0e:aa:ea:2b:bc:93:bc:7b:61:42:d4:
c5:95:22:c7:3d:bb:54:fb:8e:38:85:7e:a1:bd:ee:da:b0:01:
65:6e:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:12:38 2025 by rpki-client