
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File: Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier: eLCGzsrgduPOPH3G58Bj2MOTJwUSZ2jBwbfIfKzTa2Q=
Subject key identifier: AF:65:D7:60:E4:01:11:B6:C7:EE:34:B3:41:92:3C:B8:AA:38:46:F2
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer: /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial: 019A51876F4B37B5A777D53DADF22B72DB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 01:00:21 +0000
Manifest this update: Wed 05 Nov 2025 01:00:21 +0000
Manifest next update: Thu 06 Nov 2025 01:00:21 +0000
Files and hashes: 1: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (hash: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=)
2: H6gjp969pDik2dbvAHkeDvA39EU.roa (hash: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=)
3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: JxMdG1agQ5BCvSmX+NTeF5MhGPE5IcXxv5KR+CZPsC8=)
4: lZXduURQIAy8fdzIUaz-JWRizD4.roa (hash: vA2TeloqgyuxxL+VT++WEALS/lCOLQ2+y5IcVHn+2Aw=)
5: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (hash: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6f:4b:37:b5:a7:77:d5:3d:ad:f2:2b:72:db:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Validity
Not Before: Nov 5 01:00:21 2025 GMT
Not After : Nov 6 01:00:21 2025 GMT
Subject: CN=af65d760e40111b6c7ee34b341923cb8aa3846f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:35:d6:1e:39:14:7b:b7:eb:66:ea:da:36:
af:e0:74:06:1a:6f:44:c3:67:97:8e:64:17:71:03:
4e:96:8a:fd:0a:7f:a8:9e:43:d9:e4:9e:53:ec:48:
b4:a3:2c:ba:36:94:8f:82:1f:75:04:f1:5b:ff:a6:
28:01:11:9e:3b:0d:5d:c2:ad:cf:34:e7:de:7d:58:
57:77:5b:ef:47:e8:82:b3:d1:0c:39:65:8a:2d:b8:
57:3c:3e:df:b4:42:38:5f:44:5b:88:5e:c4:7c:e1:
12:a4:d8:99:b0:a9:b4:45:1b:a2:7b:6d:ca:2b:2d:
f1:5c:a3:ba:5d:4e:67:8a:e4:c5:8c:9f:fe:76:d5:
9d:94:58:cb:21:e1:66:52:5f:78:15:a3:7d:20:7e:
55:93:ba:ad:5b:3d:e7:be:ad:4d:d8:7e:fd:77:18:
c9:0c:10:6c:a0:a8:6b:3a:1d:c5:b5:6c:27:a9:ed:
8d:a4:02:2f:08:9b:87:cd:72:b2:e3:ca:9a:95:a1:
60:23:cf:aa:9e:73:74:b2:6d:c7:ff:af:15:61:3b:
2f:d1:3d:69:f0:71:90:bf:75:e5:09:3f:8d:14:03:
a4:ea:f3:52:1f:4b:b9:fb:9b:e8:2e:73:b6:77:bf:
f3:50:6c:a6:17:41:31:a8:49:25:cf:34:d1:e3:5b:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:65:D7:60:E4:01:11:B6:C7:EE:34:B3:41:92:3C:B8:AA:38:46:F2
X509v3 Authority Key Identifier:
keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b3:6e:1c:03:9d:0d:72:f8:2c:02:56:c7:e6:e0:95:fd:56:
dc:eb:02:c7:7c:1c:c7:66:0f:1e:e4:37:75:45:8d:c4:a6:bb:
0e:4f:b9:2a:e7:5e:9a:4c:91:89:25:6c:2e:f0:dc:d6:61:41:
0f:da:67:ca:6e:bd:52:a8:1e:9e:b3:b5:35:c1:d0:95:04:df:
c5:68:04:62:d5:0a:5a:86:4c:81:f4:a2:c2:57:bb:1f:dd:60:
97:18:cf:7f:4a:8d:69:bb:bd:f2:82:b3:84:78:4a:08:d5:a7:
20:60:0a:3c:3f:7e:6c:41:36:95:67:93:bf:19:f7:b2:06:9d:
5f:7d:20:c4:f9:e0:a9:df:5b:af:08:15:2d:a6:c0:85:ce:84:
fb:28:e3:15:ea:62:a1:35:9f:2a:cd:b3:2a:3b:bf:c4:5e:7f:
b5:c8:20:d9:83:30:a6:70:fa:39:8e:2c:c5:aa:04:f5:01:50:
a1:a4:3f:8f:4c:aa:bf:17:f3:a0:77:77:ca:ad:29:49:33:78:
e1:da:c5:b0:d4:c3:93:ae:2f:1a:ca:3c:ed:a7:51:35:0c:5b:
b4:91:a2:ec:9b:2e:26:5b:f6:ad:05:89:c9:f6:a2:8d:77:9a:
8a:61:08:8d:b6:4c:ec:0c:f4:6a:f9:ec:36:16:bc:bb:0b:f0:
af:24:fc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:40 2025 by rpki-client