Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: lJi6GIG7Fy3puaeyi2iNcORGq/zTRbgLQDV9o3U29fY=
Subject key identifier: D3:55:43:89:F8:9A:80:B6:6D:C3:37:B0:FF:2C:02:83:44:DF:B0:0A
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 0199D2EE72979A8B240E57E9EA6E8AE4B37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 16CC
Signing time: Sat 11 Oct 2025 11:01:06 +0000
Manifest this update: Sat 11 Oct 2025 11:01:06 +0000
Manifest next update: Sun 12 Oct 2025 11:01:06 +0000
Files and hashes: 1: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: 57EoRgo4b2CqccPPhZYAShHXVCOqW+TOuSHqfiuo0D0=)
2: hC0t1cqhdoh6iyJ3cpDGc1N-nWg.roa (hash: PxIEeNMR+krZxWibCKKwK2CkVaApOYKXyBnr/5vAmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:ee:72:97:9a:8b:24:0e:57:e9:ea:6e:8a:e4:b3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Oct 11 11:01:06 2025 GMT
Not After : Oct 12 11:01:06 2025 GMT
Subject: CN=d3554389f89a80b66dc337b0ff2c028344dfb00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:3e:a0:86:0d:29:e1:ec:7f:9d:d0:be:a1:
ee:25:75:63:a6:4c:cc:55:77:56:84:b9:63:3d:49:
be:b6:46:4a:0f:52:41:a5:ed:25:e1:0e:b8:4d:6d:
0f:80:14:b7:b7:cb:d2:d5:fd:58:36:f3:d2:02:1b:
d5:2a:0c:41:31:9b:2d:16:cb:7e:05:9c:90:78:05:
8a:e7:7e:7d:63:e6:52:82:9e:57:7e:4c:84:13:c5:
f8:af:3d:07:d9:ea:4b:0b:f6:9b:9f:98:b9:e3:4d:
ae:2b:a1:cd:bc:7b:73:2f:1c:9d:77:16:61:4f:5f:
92:31:93:30:57:10:68:1b:85:c9:1b:43:bb:34:5d:
2e:d6:8d:4e:f9:0d:da:4d:f1:7a:fb:69:d7:47:b2:
cd:3d:cc:24:99:6f:9d:54:9a:08:c2:75:be:9c:5b:
2c:1b:e9:cb:20:98:10:9d:47:45:82:b7:90:ee:21:
65:19:7d:d7:ec:bf:4e:c9:c7:86:9f:36:57:c7:cb:
ac:f4:02:95:b1:f0:f1:ff:8e:ad:45:11:fb:12:08:
92:65:28:fa:a2:d3:28:c7:68:bf:9e:3f:fd:66:b4:
a1:ae:75:47:a8:fd:e1:e7:4d:e9:2c:11:29:ed:78:
3b:6e:f1:e4:c0:d5:7c:66:3b:f7:b8:19:61:e5:3b:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:43:89:F8:9A:80:B6:6D:C3:37:B0:FF:2C:02:83:44:DF:B0:0A
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:43:6d:b1:ef:a1:69:a0:36:f1:38:24:c8:65:eb:80:38:3a:
ca:99:9d:aa:c2:16:bf:5a:20:db:1b:a7:fd:3f:f4:fe:8e:9c:
cf:d7:9e:7c:b0:64:a7:9b:36:d1:0e:66:15:9c:b6:f2:26:b2:
60:4a:b4:e9:74:75:a4:d1:f9:e8:9e:d1:5d:e1:b5:eb:df:cc:
6c:19:e4:db:9d:15:24:6e:0f:fb:58:c2:fe:42:5a:02:72:cd:
1b:7c:a1:1c:b2:7e:1c:b4:21:6a:80:c9:e8:0c:cc:54:aa:18:
e6:45:6b:ee:45:3e:3d:a6:44:f1:11:89:cf:2e:b2:1e:83:2c:
b5:16:f4:ba:c3:b3:75:8c:32:99:b9:94:9d:e3:28:42:a6:c6:
47:a9:a2:d3:eb:50:75:9e:34:8e:db:5a:e3:b3:01:b5:eb:7b:
6a:2b:55:74:e1:17:c6:0d:c4:ea:d0:29:fb:9a:01:a2:67:d9:
ea:81:40:66:a7:30:78:85:71:f9:4b:fc:f4:e3:5c:3d:bd:f2:
3a:b1:42:4e:90:c2:76:30:b6:c4:39:25:fc:d1:d4:cd:0e:70:
07:7a:11:36:6b:1a:b7:3a:f0:78:32:0e:75:0d:37:95:4e:6d:
ea:48:dc:40:83:78:e7:c8:c3:64:cc:ab:c2:32:60:fb:79:27:
7b:2f:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:05:47 2025 by rpki-client