Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: JfmBziZuGXwNVpiyT5AaESYADYhMpVeGazdn/8FAVMA=
Subject key identifier: E0:DA:AD:03:16:42:DD:A1:37:28:8E:09:BA:CF:23:56:FF:03:D0:8C
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 0199C5D8C4517F6A2077C9744E210329BC7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0990
Signing time: Wed 08 Oct 2025 22:02:21 +0000
Manifest this update: Wed 08 Oct 2025 22:02:21 +0000
Manifest next update: Thu 09 Oct 2025 22:02:21 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: srDmpO6zD4RiLnoXClXpQlQ/3awAIPZkAE3c3hKrPTQ=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:c4:51:7f:6a:20:77:c9:74:4e:21:03:29:bc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Oct 8 22:02:21 2025 GMT
Not After : Oct 9 22:02:21 2025 GMT
Subject: CN=e0daad031642dda137288e09bacf2356ff03d08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:ed:ef:20:66:4e:1c:a5:c1:71:94:cc:fd:
c2:14:87:9b:05:ae:39:79:73:eb:e7:34:ef:7b:07:
9f:83:b0:3c:95:b0:ce:81:c9:83:ab:f5:59:3d:d4:
df:88:ad:d6:a0:b8:aa:72:89:9e:ce:2d:39:0f:b5:
10:ed:92:6a:70:d7:a8:19:d8:82:26:27:db:56:4b:
e7:85:30:92:e3:90:00:b7:ad:fd:d9:4c:1a:22:bd:
c7:c3:f3:a9:eb:1e:66:17:34:41:bc:a0:d3:a7:7d:
45:00:56:03:d5:68:95:0c:bd:05:9a:ab:cc:35:8b:
50:a3:9a:75:0a:fc:69:15:14:a8:7a:89:4c:3b:db:
c3:ba:c3:c5:1c:59:13:61:fd:c9:92:5c:e8:4f:1f:
fe:3d:ab:e2:34:da:80:eb:f7:26:5e:d1:53:cc:e1:
91:23:18:5f:51:fe:5e:fa:55:40:48:e3:25:3f:d4:
74:60:69:94:7f:fb:37:f9:c4:de:94:85:e5:1e:a9:
f1:7c:e8:6e:27:a8:3c:b0:4e:0d:cc:25:e4:2c:ec:
d5:c6:d0:ec:f4:99:bd:20:56:94:5a:b0:ef:8e:e8:
ec:3d:58:46:f8:78:07:13:a2:e9:dc:39:0c:f1:fc:
b0:ad:91:1b:f6:95:cf:3d:2a:4c:bf:b2:e3:6d:8e:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DA:AD:03:16:42:DD:A1:37:28:8E:09:BA:CF:23:56:FF:03:D0:8C
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:e0:73:83:8d:8e:3b:55:60:94:96:33:47:9b:49:cb:2b:
53:96:0d:04:bc:18:d4:e9:53:66:00:c5:8e:09:7b:bd:9a:8f:
c9:9d:ef:0e:a8:3c:63:3a:74:b7:ac:41:bb:29:fe:e4:15:db:
47:a3:56:ec:b9:2f:fd:14:95:9a:6b:67:6f:16:cb:67:32:1f:
7b:76:51:ff:8a:59:b3:c9:86:59:b3:45:a9:6a:60:e4:65:48:
61:66:95:2d:7f:b8:70:c9:e3:68:b8:c7:81:08:52:53:78:b5:
4e:fa:0b:5f:c5:35:32:e7:01:41:76:23:13:76:41:db:7c:63:
36:68:21:0c:2a:a2:ea:80:7a:5c:39:5a:79:82:96:a8:f1:76:
e5:b5:4d:dc:e1:4c:74:a1:d3:d3:3b:6a:a5:f4:20:06:26:50:
52:f3:7e:6f:03:13:3f:12:b5:78:67:62:7e:c8:03:24:cc:7d:
da:4c:eb:95:88:f4:4c:59:ff:86:f2:09:3f:6d:22:b2:96:24:
10:e7:8b:f0:7f:2c:e5:72:8c:e8:39:4b:58:b7:51:fc:45:75:
d9:af:4b:5e:63:04:ac:7f:bd:ef:86:28:1b:1c:1e:b7:fb:64:
4d:d7:bb:ba:12:ae:bd:c4:f4:1e:e0:04:23:33:77:c5:ff:75:
ee:9e:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:55:14 2025 by rpki-client