Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: GEbB/MA+t3aQrprMHayD9h8R7ru+HJwCagtQdFqCBX4=
Subject key identifier: 57:69:03:12:99:43:82:AB:27:A1:24:48:C5:10:85:E1:F8:A4:C8:13
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019A5150A490506E9CE2540F23B47DA3ABF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0CF3
Signing time: Wed 05 Nov 2025 00:00:30 +0000
Manifest this update: Wed 05 Nov 2025 00:00:30 +0000
Manifest next update: Thu 06 Nov 2025 00:00:30 +0000
Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=)
2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=)
3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 9fZwC7dLyYx/4kRFX6K5JlOc3JkEL2KwgL0MDVJ452A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:a4:90:50:6e:9c:e2:54:0f:23:b4:7d:a3:ab:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Nov 5 00:00:30 2025 GMT
Not After : Nov 6 00:00:30 2025 GMT
Subject: CN=57690312994382ab27a12448c51085e1f8a4c813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:aa:eb:a4:fe:07:ef:d4:64:c1:15:6c:91:
c1:2e:be:3c:05:37:e3:35:11:d5:b6:36:f9:a0:e2:
5c:12:f7:be:ea:d7:9e:f9:cd:a9:68:71:de:41:ca:
5d:52:df:f1:bb:9d:f6:20:09:b0:2a:c3:9b:c9:86:
9e:b8:5d:07:62:b5:3c:ac:56:4f:87:a9:ab:6a:d1:
1c:f9:cd:f1:54:bf:bb:ab:c0:69:0d:0f:1d:43:32:
6c:ab:3c:a6:2f:d4:7c:43:24:7b:19:e3:4d:d9:be:
2b:b9:20:fc:1d:bc:f0:41:77:24:47:d9:37:95:c4:
17:28:96:f9:db:14:ad:2c:6a:f9:f4:a6:69:66:9d:
df:11:4f:41:4f:a8:88:70:d7:da:77:41:c9:d3:02:
38:9f:ec:87:c1:89:3d:33:a8:3b:4b:c4:fd:be:2c:
20:c7:84:5a:73:47:8d:3c:9e:6f:ab:fd:51:7d:a1:
48:17:0e:37:c9:54:74:28:57:d0:56:ac:b5:32:c5:
ce:ab:9f:f8:1b:5b:4c:44:38:5f:36:a8:ec:4a:50:
25:3c:39:d3:cb:55:8c:98:63:a0:4e:48:c2:a9:de:
4d:24:db:95:e3:57:1a:21:35:02:4e:62:ea:57:93:
f8:4d:33:29:b0:58:6a:75:ab:46:ed:13:e0:57:d7:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:03:12:99:43:82:AB:27:A1:24:48:C5:10:85:E1:F8:A4:C8:13
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c2:da:e5:98:33:3a:fe:1d:8c:a0:61:a1:ab:f3:2b:06:1c:
56:18:cf:e9:96:01:2e:2c:40:4b:8a:d1:12:ac:d1:8d:ad:01:
3f:4d:71:8b:89:24:10:3d:7b:43:09:af:06:7a:c7:bb:c5:9a:
59:06:f1:da:3c:fa:b9:38:8e:32:d5:5e:e7:6b:25:9f:e6:fb:
b6:93:9a:08:7d:41:95:14:70:fa:6e:d3:1f:62:47:44:18:a6:
55:6e:61:f7:e2:ff:a3:88:b0:79:08:39:34:78:c5:8a:a1:f4:
72:92:fb:5b:e4:44:c9:3e:ad:5e:23:f5:ae:42:31:bc:48:7a:
99:70:3c:6d:6c:29:ad:33:41:8e:d1:a0:2c:4e:06:68:84:7f:
44:f8:d5:e4:66:be:4d:bd:c0:17:f8:ff:f0:e6:38:27:2a:37:
cd:0c:a2:7d:cf:9c:95:83:c3:2a:b1:5b:52:e4:3f:48:e5:08:
2d:c1:03:ac:3f:3f:69:29:8a:e7:66:bd:84:2e:54:62:ef:30:
f9:83:fd:c1:d3:0d:b0:aa:b4:67:e5:e6:7d:69:14:ae:f6:6a:
24:3b:21:8b:ea:b4:8a:c3:01:4b:6a:bd:65:d4:39:95:d1:45:
33:3a:5b:8c:df:cc:0f:57:4c:a4:3d:d4:13:4c:1a:64:fb:ff:
ff:05:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:15:29 2025 by rpki-client