Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json)
Hash identifier: e+GY/00GPXPYqyQSO6oEdpYwahPTZu2R+hErW31KmMc=
Subject key identifier: E1:5D:DE:D9:A9:B8:20:0C:46:E0:8C:C7:2F:07:E3:73:15:F4:CB:01
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial: 019A53761CB3BD64AC84EE27383CCC941559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 10:00:40 +0000
Manifest this update: Wed 05 Nov 2025 10:00:40 +0000
Manifest next update: Thu 06 Nov 2025 10:00:40 +0000
Files and hashes: 1: 9OuhXfETInOXikMAHDgNmyTRYEU.roa (hash: eIv/UzfTlkAylqHyvhIg1kk0aW1IEfgfDL/qT3P5S8w=)
2: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: VJMOgzO/NAsbYde1Cscjl5RkhivfRSQS0/c2aTNKCrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:1c:b3:bd:64:ac:84:ee:27:38:3c:cc:94:15:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Validity
Not Before: Nov 5 10:00:40 2025 GMT
Not After : Nov 6 10:00:40 2025 GMT
Subject: CN=e15dded9a9b8200c46e08cc72f07e37315f4cb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:e5:7c:4b:52:06:a3:c7:c7:10:aa:65:5a:
da:22:f1:54:cd:57:03:e8:91:ca:99:d3:b9:d3:25:
f3:d6:c8:f1:92:e7:6c:cf:fe:0e:c8:9a:67:bc:dc:
7e:d0:79:d1:6b:6d:34:15:fb:e5:a0:2c:60:c0:64:
dd:e9:24:20:19:13:4a:ec:ed:7e:43:5f:f9:14:cc:
09:05:4b:11:52:dd:79:5f:e3:6f:b3:0b:ba:9e:75:
c5:60:e1:1f:bd:6a:32:f6:d8:a2:b1:e5:31:9d:ad:
95:48:78:f5:e1:f3:56:dc:44:20:43:24:12:b1:bd:
1a:0a:4d:04:15:66:36:cd:0e:37:a2:c1:fb:07:1e:
ab:32:e5:d6:f1:cb:a5:85:88:76:05:7c:87:2b:ba:
41:8a:82:c0:21:f2:4a:67:7d:ca:68:b5:b9:eb:1e:
48:d9:14:85:25:4c:40:77:e6:75:3a:67:1c:ca:07:
62:f7:3a:60:b1:99:c1:f6:1a:fc:b1:17:eb:ac:4c:
4d:61:88:5b:84:9e:31:23:36:06:9d:36:5c:9b:1f:
35:20:41:75:73:5c:55:46:70:74:49:b5:8b:a5:4e:
aa:b1:3a:70:f8:8f:46:d9:51:0c:b5:9d:ca:1d:3d:
9f:d9:e7:19:59:4b:58:2e:5b:ad:e5:ee:81:8d:8f:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5D:DE:D9:A9:B8:20:0C:46:E0:8C:C7:2F:07:E3:73:15:F4:CB:01
X509v3 Authority Key Identifier:
keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:89:6c:f1:9e:80:a5:95:5a:42:3d:8e:c3:69:40:0e:6f:f7:
02:93:cb:8e:8d:70:45:08:b9:da:c6:76:89:e0:15:ea:00:5e:
ab:5b:f7:aa:27:24:2e:0f:fb:2a:30:3d:03:c1:b9:aa:ff:c6:
96:0a:6f:ff:1b:88:fe:22:cd:99:db:a8:1a:ff:fe:0b:42:42:
8e:17:46:b8:79:74:d5:d8:54:f8:01:3b:49:ab:5a:ee:d9:92:
0c:52:fe:94:5b:c5:8e:65:52:a7:a9:4b:33:12:c6:1c:66:f9:
ef:4d:f3:bf:2e:4c:3f:96:fa:5c:0e:55:ce:ee:a9:11:db:8c:
42:02:07:36:e5:5b:79:8d:66:13:d1:2a:95:41:da:c2:ae:9f:
07:c9:bd:f4:fd:60:3b:a9:11:29:3b:20:6f:3a:d1:c4:0f:ab:
e1:49:24:12:fa:1f:62:d7:33:dd:3b:1b:86:3c:6e:b5:49:32:
9b:54:1a:16:32:cc:f2:75:b0:c4:49:22:f4:67:72:5f:8e:53:
69:e1:e1:aa:10:be:73:1d:ee:44:d3:70:53:36:6e:52:23:ef:
99:68:d9:5a:56:54:f1:eb:fc:af:e5:e8:52:3e:db:34:00:4a:
5f:f5:7f:5f:b8:12:86:29:69:ed:ff:11:cf:fb:0f:7e:a2:7a:
1e:6e:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:48 2025 by rpki-client