Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: Y+ZNLA/xdtmOByCqz3GJJtGRg+BmI0Lue6vDAIZKr3E=
Subject key identifier: DE:CF:D8:67:91:72:16:4F:10:C4:CA:6E:67:04:4C:4E:05:1D:90:8C
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019A5151483D87F353F2AFE24E01DF76E0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 0E2D
Signing time: Wed 05 Nov 2025 00:01:12 +0000
Manifest this update: Wed 05 Nov 2025 00:01:12 +0000
Manifest next update: Thu 06 Nov 2025 00:01:12 +0000
Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=)
2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=)
3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: yCe+zqa3Vb5gRMgGbx1AeKnvhSgU2o0zSq7/JqaCtbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:48:3d:87:f3:53:f2:af:e2:4e:01:df:76:e0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Nov 5 00:01:12 2025 GMT
Not After : Nov 6 00:01:12 2025 GMT
Subject: CN=decfd8679172164f10c4ca6e67044c4e051d908c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:e0:2d:47:c2:48:3a:0d:6d:da:62:65:c9:
fd:6d:e1:04:54:1e:31:6d:de:fb:b1:20:16:f8:1b:
d2:de:88:99:81:36:28:67:84:ca:a5:73:12:9f:40:
7e:58:c3:e2:23:45:b9:cb:3e:ab:5e:a4:5f:52:8d:
c6:3e:4d:2e:10:72:d8:38:c9:f9:71:1f:39:48:96:
14:b4:43:04:41:93:31:db:5b:dc:34:5a:e6:99:86:
de:69:39:c2:82:b4:6e:6b:3f:d9:b4:8e:e1:f0:c3:
7a:f4:6f:4f:68:95:f3:2f:b1:61:fe:3a:80:35:18:
df:69:16:68:9d:b9:6c:57:14:a3:27:24:62:04:1d:
bb:64:33:74:ca:48:cb:ca:cb:9f:68:9d:6e:cd:31:
22:f7:17:f7:8a:c5:9c:75:ca:c9:7c:91:d9:7a:40:
75:4a:7d:32:3e:c3:2e:0b:62:a9:28:28:c0:4a:ac:
99:8c:0b:d0:8a:ed:8d:9c:17:0e:7d:8f:ac:c3:72:
3f:43:d4:76:c1:a3:22:dd:b9:70:0f:a5:f3:fd:f0:
d8:6f:4b:5d:8a:bf:12:67:63:c3:5b:bc:04:ef:a0:
ed:e2:a2:f2:d0:71:46:7c:6a:92:8b:30:4e:d2:d3:
5e:22:4c:ee:98:36:f0:df:56:2b:06:55:e3:7a:00:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:D8:67:91:72:16:4F:10:C4:CA:6E:67:04:4C:4E:05:1D:90:8C
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:11:60:7a:77:9f:15:b7:a9:ed:a8:68:77:5b:6e:dd:70:51:
1d:7c:67:c8:e0:3d:67:98:be:d6:37:db:89:86:56:77:38:3d:
a8:b3:03:07:61:f8:5f:11:a4:b0:09:96:c6:7e:32:e4:4d:3a:
62:38:8c:32:3c:86:10:0f:69:dd:63:06:6a:40:51:ab:bf:05:
c0:63:a6:8c:f7:ad:af:96:b0:9c:6b:57:ee:1a:e7:60:0b:58:
59:5a:f1:2a:0d:ba:03:5c:31:e7:e0:21:a1:5a:34:ce:18:a7:
c4:8e:a9:f0:49:db:e9:c4:ff:7e:2e:28:33:8b:82:58:7c:e4:
7c:c6:52:e3:39:ad:32:08:e2:79:25:30:61:11:4b:02:74:67:
51:8e:49:b0:28:59:fb:58:fe:5e:05:ce:28:68:74:bf:e7:e8:
a7:46:59:2f:d3:78:ed:20:fe:94:48:e2:04:1d:7c:c9:fe:f2:
c8:3f:ca:82:90:64:f0:c2:fa:5c:ba:4d:ec:74:ba:8e:40:61:
90:81:d0:f6:26:c3:66:98:99:19:42:b8:bd:40:9f:8c:6e:df:
36:a3:6c:0a:49:33:ad:8a:3b:17:cf:81:f4:6b:19:21:24:37:
d8:9c:66:ba:f0:f1:d9:e7:e9:e2:e6:7f:48:28:7a:a2:97:fa:
39:3e:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:02 2025 by rpki-client