Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: NuN3yjxbThQ70M2pmngYwjLoqP1+Lxc2y/T9s3OUGfU=
Subject key identifier: A4:B0:11:7B:6E:5E:DD:1B:F7:29:BE:7C:4E:22:FC:04:8F:74:DD:0A
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 0199D58175D2638DB54BC083906137C11C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 1273
Signing time: Sat 11 Oct 2025 23:00:55 +0000
Manifest this update: Sat 11 Oct 2025 23:00:55 +0000
Manifest next update: Sun 12 Oct 2025 23:00:55 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: urvpNeMDQbUsTNogzeovRSpMmN24+AelktUiip1rcOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d5:81:75:d2:63:8d:b5:4b:c0:83:90:61:37:c1:1c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Oct 11 23:00:55 2025 GMT
Not After : Oct 12 23:00:55 2025 GMT
Subject: CN=a4b0117b6e5edd1bf729be7c4e22fc048f74dd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:6a:6a:92:f8:4e:d9:63:08:0b:df:a3:b9:
b7:7b:c9:30:d2:e7:cf:59:be:3e:10:29:b5:07:18:
46:20:69:30:77:bb:db:c3:f6:c0:7a:89:55:78:80:
a1:99:bb:88:74:17:1a:b0:dc:71:6c:ef:a9:fb:9a:
86:8e:11:41:b5:40:fe:d8:a4:eb:d2:25:19:85:dc:
c0:78:d9:63:8b:e4:32:36:1b:cd:40:67:d3:15:47:
da:02:58:99:3f:dc:8a:21:02:c7:dd:94:c7:bd:7c:
84:dd:f1:eb:1a:ce:ad:6e:51:57:49:0d:76:bc:88:
cf:7a:dc:a2:c5:ee:b6:0e:31:de:d2:92:67:37:90:
47:c0:ec:37:2a:f3:76:68:05:a1:9c:9a:c4:a9:b5:
00:a4:b4:79:27:6d:9f:1a:80:f3:95:81:ac:59:1b:
2c:7a:d2:9c:c8:68:cd:27:83:7c:a2:2b:10:15:65:
a0:c7:2e:33:6e:63:35:1f:26:cb:9d:3e:b0:59:23:
75:be:8d:c2:dd:8d:2c:fd:a6:5b:52:c1:1b:ef:d8:
be:8b:e3:2b:78:ac:24:96:e1:0d:9c:e8:65:f8:56:
9e:10:a2:5e:91:90:1a:3c:0f:5c:cf:b5:b7:c0:b3:
72:48:3f:64:f2:e3:c5:70:b4:53:45:aa:38:e2:ee:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B0:11:7B:6E:5E:DD:1B:F7:29:BE:7C:4E:22:FC:04:8F:74:DD:0A
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:39:43:25:33:68:37:49:40:e3:76:d7:1e:6a:93:06:00:15:
59:d2:93:e9:e5:6a:d2:23:66:40:6a:8a:bd:31:33:7e:74:0b:
b5:aa:f6:bc:5d:d0:f9:fe:8a:5d:4b:58:d8:18:97:9c:79:d2:
4a:56:a4:76:7d:e6:3b:de:b7:4d:a2:1b:ad:85:6a:02:fb:4a:
e9:86:e6:3b:b0:da:1c:83:69:c8:7a:a7:0e:d1:0b:c0:01:91:
a5:1d:19:8c:06:8d:48:95:67:44:95:14:70:bb:79:6b:24:da:
c7:54:d5:b6:54:e8:48:6e:da:b9:13:0e:1c:6d:23:33:0d:e2:
1f:dc:fa:68:f3:8f:d3:d8:a8:fe:88:da:4b:a4:1b:ce:c6:c5:
a0:ac:29:4d:8a:21:29:6f:b0:aa:ad:2a:d9:f6:93:8d:9d:35:
2d:2f:7d:2b:72:d7:52:5e:44:e2:06:ee:52:e0:4f:e7:ad:d3:
e4:c2:84:46:6c:a0:06:21:a3:96:14:5b:0b:76:ef:1a:c8:f4:
63:bd:a8:4b:1b:92:f5:ea:c9:e0:55:93:75:6e:54:c8:bb:eb:
9b:87:f0:89:3c:e9:46:26:16:f1:9b:60:d2:3c:22:b5:85:db:
54:eb:0f:72:09:ca:7e:ac:79:7b:46:2c:54:dc:51:d6:7c:df:
0c:a6:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 12 07:00:45 2025 by rpki-client