Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier: W+6WOndNxwlIvGm+k/ycYaZN/HcifLwRFUWrsZw5Ju8=
Subject key identifier: 00:05:CA:DC:CA:26:58:0E:3E:D3:45:7C:F9:3F:36:54:DD:22:54:BD
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial: 019A518761870E06CAFBAE45DADEFF375B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 01:00:18 +0000
Manifest this update: Wed 05 Nov 2025 01:00:18 +0000
Manifest next update: Thu 06 Nov 2025 01:00:18 +0000
Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=)
2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: tNeWxJF5dnNOQ9UrgeIhdsxpmY/ZKam1HVYR1uJKvF0=)
3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:61:87:0e:06:ca:fb:ae:45:da:de:ff:37:5b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Validity
Not Before: Nov 5 01:00:18 2025 GMT
Not After : Nov 6 01:00:18 2025 GMT
Subject: CN=0005cadcca26580e3ed3457cf93f3654dd2254bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6c:ed:7f:23:c7:1f:40:32:3d:21:d9:12:86:
25:e7:ed:67:6a:c6:4d:28:40:99:8b:39:31:8b:21:
8c:26:f0:98:bb:f2:da:5c:98:32:ba:73:64:21:dd:
11:0a:f5:62:bc:81:30:c6:d0:3b:3b:45:a0:c5:da:
24:2c:f9:b7:21:5f:21:57:a8:0c:f4:18:06:ac:fd:
1e:2a:fa:8e:45:d5:8f:7f:66:78:8e:e9:43:19:8e:
5d:e8:f0:9c:eb:d4:3f:26:9c:b8:80:64:02:39:28:
0c:71:0a:ba:f8:a1:24:eb:37:22:68:5a:70:12:f9:
93:29:d2:7b:57:d4:07:b8:7e:42:ac:df:12:5f:c3:
7d:8f:85:58:d0:87:6f:ed:1a:7c:3f:34:bc:49:80:
de:4c:4d:25:a6:d4:0f:d3:68:d8:bf:5a:0f:cd:aa:
09:3e:64:78:61:31:4e:33:e5:23:af:3f:09:a7:83:
12:b8:1e:c9:92:0f:be:9b:b3:ee:83:f3:26:24:25:
77:e2:c9:dd:49:91:9f:8a:da:a5:fc:cb:0f:4b:bf:
1a:22:fb:c7:9a:99:23:9c:46:17:8f:64:98:78:57:
e5:45:38:78:21:c3:e3:64:6a:35:e4:cf:a7:c3:20:
df:33:08:e1:a8:ce:0f:0b:27:37:5a:d1:1d:91:68:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:05:CA:DC:CA:26:58:0E:3E:D3:45:7C:F9:3F:36:54:DD:22:54:BD
X509v3 Authority Key Identifier:
keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:0a:7e:5d:2c:17:19:0a:f3:cc:63:1d:4f:c8:55:9e:e1:
d2:fe:7e:62:62:a2:17:37:45:93:cb:5a:16:a6:8d:1e:66:f6:
0e:c8:a2:c4:26:54:58:d3:23:57:4f:3e:a5:77:7e:65:25:7d:
fd:7d:1e:8d:ab:8b:eb:09:8f:06:f2:11:cb:97:b3:60:b9:9f:
ad:c7:1c:83:b6:30:f0:b2:4d:bb:63:42:71:3a:89:41:49:44:
0a:94:78:33:ba:d7:3e:14:a4:cd:1f:61:12:f5:b7:bf:88:54:
d2:93:61:09:60:3f:09:3b:c0:21:fd:21:59:ca:c1:cc:f4:cd:
f6:e4:4c:c0:74:6b:da:15:4d:06:ba:6d:97:5f:d0:6c:40:4b:
d6:32:18:e1:25:6d:9d:f5:87:43:8a:32:1b:09:c3:ec:d5:63:
e2:cb:a0:d1:d2:79:54:b7:eb:f0:ad:ef:f8:ec:ce:2f:c1:bc:
59:44:69:3a:db:6c:f5:98:cd:24:43:b8:e5:4a:53:ba:3b:8c:
a1:88:f2:9a:d0:d9:22:33:71:bf:fd:6b:3e:e2:74:21:f6:a8:
42:97:da:ee:13:fe:6a:a7:70:db:5b:ec:72:e7:23:2a:ff:ac:
c1:b7:5c:77:85:51:d3:13:21:cb:69:06:af:e1:fa:ef:d6:4d:
6c:1d:3a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:49:35 2025 by rpki-client