Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: O7JI6aep7cgljvuSNSfWigZVCMWQQW2FDuQzNnErOpc=
Subject key identifier: 99:D2:BE:C8:2B:E1:E9:02:FE:F2:AE:3E:45:64:9D:A7:BB:A9:1A:E4
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 019A515094F1FDA7865C7143F9DB29D36099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1718
Signing time: Wed 05 Nov 2025 00:00:26 +0000
Manifest this update: Wed 05 Nov 2025 00:00:26 +0000
Manifest next update: Thu 06 Nov 2025 00:00:26 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: d2RcVLP2uAnEArbGkw78XfM8F6EQGCrbHjco5qn0X9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:94:f1:fd:a7:86:5c:71:43:f9:db:29:d3:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Nov 5 00:00:26 2025 GMT
Not After : Nov 6 00:00:26 2025 GMT
Subject: CN=99d2bec82be1e902fef2ae3e45649da7bba91ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:5f:b9:49:21:57:52:69:35:62:72:ee:5b:
98:f8:50:b4:79:50:50:52:a5:56:1b:94:b4:22:e2:
65:7f:c2:26:07:64:6b:f6:95:8f:ba:24:33:99:cc:
1f:d8:fa:d7:d9:e4:ba:86:7f:00:01:dd:7c:f3:45:
2a:5c:f7:d9:c6:b2:0f:c0:35:45:f6:e7:0d:c3:38:
86:b0:9e:47:db:bc:ef:d8:51:72:dc:0d:2e:8f:60:
d7:1d:80:19:2c:22:36:09:23:06:12:6c:e3:78:e7:
0e:e3:70:6d:f4:5f:a3:99:74:8e:ea:80:ff:5c:c9:
c6:19:cb:c7:d4:cb:8b:34:6f:c2:49:92:94:93:1d:
ed:fd:a8:0a:2a:7b:42:b6:be:e4:d0:93:e1:d3:94:
93:d4:42:37:70:68:0f:e0:66:74:fd:83:d1:de:a9:
47:47:3d:c5:3b:e5:39:f8:3d:c1:62:04:78:2e:7d:
aa:10:ca:cb:9e:08:c1:bb:a5:7e:22:3b:a2:64:27:
ca:a9:88:48:9d:00:24:48:b2:0e:25:e7:8f:40:ce:
80:eb:3c:43:09:e6:4f:06:68:ce:f1:06:b6:0f:24:
6b:f3:c7:5e:b8:c7:57:19:d1:b2:28:27:db:e8:36:
f2:32:21:17:f0:cf:65:b1:23:a8:86:46:bc:a9:75:
ac:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D2:BE:C8:2B:E1:E9:02:FE:F2:AE:3E:45:64:9D:A7:BB:A9:1A:E4
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:74:3c:32:7b:64:5d:09:f6:45:d5:d8:b6:4f:7d:c2:9f:f4:
0b:cb:27:94:85:81:a3:31:1b:25:aa:80:98:ba:4c:e9:6e:8c:
68:9c:64:da:ca:f0:1d:49:aa:66:c8:e8:a6:32:13:47:0c:f4:
01:4f:af:0a:01:c5:87:59:b5:ed:3e:04:d6:f1:d5:5f:44:5a:
d0:84:7a:83:12:ca:ea:e1:ae:c7:ae:dc:29:a8:01:8c:b5:a8:
48:7b:e5:60:69:0b:6d:4b:e9:82:5b:4f:67:79:7a:e5:67:0c:
ab:eb:f5:c8:16:71:f7:0d:d3:8a:a2:53:39:5b:54:9e:c3:87:
28:eb:6e:06:13:50:e7:55:1b:46:96:6f:a8:22:47:e4:43:9d:
68:28:36:73:20:79:cf:5f:b1:f6:60:b7:d3:69:46:ab:8b:78:
e2:da:28:aa:1d:3f:55:90:b2:72:61:3f:96:b6:b9:bb:91:89:
dd:de:3d:5b:2e:30:f0:17:c1:d9:fa:de:3a:bb:52:b6:c5:80:
72:10:0d:79:35:ad:ff:22:1b:0e:5e:e4:ca:2e:7a:a4:56:d2:
64:ec:d0:2b:a3:00:f2:c6:5e:d6:c7:8c:4f:26:01:a8:0d:1c:
bd:ae:39:bb:dc:51:34:60:a2:d1:71:39:81:6c:ef:01:3e:c7:
97:ef:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:25 2025 by rpki-client