Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: yq7arG7SCRFhq99Vzf+/D1A8byVfQb8PrKA5AXRBF0M=
Subject key identifier: BB:5A:B9:93:5D:5E:D4:9D:7F:90:E9:A3:42:80:C1:0E:7B:8D:33:C6
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 019A4E86347FFCE10CA6439DAC1E8EB1BB25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 12AC
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: TimZOVCDVL7ewMiGx2EqD0bUhuUJYWouuNO1wt8ymXQ=)
2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:34:7f:fc:e1:0c:a6:43:9d:ac:1e:8e:b1:bb:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=bb5ab9935d5ed49d7f90e9a34280c10e7b8d33c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:89:31:f5:17:8b:d8:b8:e6:98:13:d7:70:
ca:d8:85:34:06:d2:88:a3:11:40:1f:d4:84:5a:e9:
1e:27:72:6d:50:05:40:d2:3c:5c:fc:84:d1:9b:9d:
9d:dd:7e:4e:06:0f:cd:f9:3e:24:ba:aa:3c:f6:6f:
cb:5d:f2:52:2b:22:e8:d1:75:1c:aa:40:ae:d4:57:
d6:eb:59:81:bc:a9:d3:b7:99:b3:cd:ce:14:f5:25:
41:15:43:b2:bb:e6:b7:cf:af:a5:56:05:58:18:e8:
26:b7:d0:75:57:e3:fb:9c:0d:a0:fa:ab:59:06:15:
20:6b:3c:5a:9e:50:97:a7:9e:5b:25:32:17:fa:47:
68:60:8b:90:ba:30:d5:f0:02:08:cb:6a:f6:38:ba:
de:51:69:e1:69:cc:6e:e0:0f:91:38:e6:cf:f9:44:
b9:18:41:f4:e8:9c:f8:27:be:71:13:8a:60:90:7e:
c6:7e:59:4d:d4:0b:02:c3:35:a8:82:5e:95:b4:72:
a7:a8:db:bf:98:8e:0e:7c:5d:00:c7:4e:e1:d6:59:
a1:99:8c:9e:ec:2e:40:69:b7:e2:27:f5:59:a6:0f:
04:f8:aa:27:52:a3:f8:b6:dc:26:57:55:e8:46:51:
78:f9:1c:74:bc:1f:1a:ef:39:0b:1d:96:10:71:01:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:B9:93:5D:5E:D4:9D:7F:90:E9:A3:42:80:C1:0E:7B:8D:33:C6
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:89:7e:d2:dd:d2:27:e9:a1:85:46:c9:46:e5:52:25:94:67:
0f:a1:fd:19:19:99:db:e5:a8:3e:53:80:ad:f7:92:6f:26:fb:
4e:dc:9f:50:2f:97:dd:0b:2f:46:77:49:9f:4d:dc:2b:25:21:
47:8e:c5:02:33:08:45:b2:13:29:a9:62:ca:c7:17:cc:cd:78:
b8:ed:c5:b1:65:b8:02:55:48:31:53:f4:a2:84:20:9e:42:4c:
6c:52:bc:74:1c:a5:df:36:92:d5:4e:ad:b8:cc:cf:d6:3b:63:
1e:a1:17:1d:55:da:95:88:22:0d:8a:90:c7:24:9a:d0:63:b9:
83:51:eb:d6:ea:e6:35:5c:9f:9f:5e:d6:74:03:f6:0b:d7:b2:
41:31:81:fc:8f:13:f0:53:68:0a:3e:fa:7d:85:5b:35:81:1f:
c0:8a:2c:41:eb:c0:dc:ad:ec:3b:b4:56:95:ef:92:12:cf:40:
ff:c2:d9:94:47:70:00:a4:79:1c:ae:98:ad:a9:3a:16:31:6f:
ed:5a:c6:48:1c:00:d8:9f:fb:c2:d6:d6:2f:4e:15:a7:a9:3d:
81:0e:f2:e3:86:01:84:94:00:88:d3:51:24:3e:5a:85:2c:21:
20:47:f9:0c:85:e1:f5:88:f9:bc:f3:47:af:ba:2f:3d:a7:37:
8c:4f:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:44 2025 by rpki-client