Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: LvnrMSaSUjJfFJH9LiMhk2KbcahFh4bbbcm+kNGScCk=
Subject key identifier: 47:7F:7E:72:66:47:0F:17:8A:A2:78:49:78:9F:AA:E0:BA:AB:53:BF
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 0199C4C4AD43A18496907603704B5D99DFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 1129
Signing time: Wed 08 Oct 2025 17:00:47 +0000
Manifest this update: Wed 08 Oct 2025 17:00:47 +0000
Manifest next update: Thu 09 Oct 2025 17:00:47 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: ZSDu0rKmRJHUb50Nrmpz8Kh++snekWHihGt+FJoSSq8=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c4:ad:43:a1:84:96:90:76:03:70:4b:5d:99:df:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Oct 8 17:00:47 2025 GMT
Not After : Oct 9 17:00:47 2025 GMT
Subject: CN=477f7e7266470f178aa27849789faae0baab53bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:e8:86:cc:a6:a0:ea:08:a8:cb:7a:54:9a:
ad:cb:fa:04:59:3f:38:2b:a9:1c:d4:19:09:23:e1:
f7:15:e2:0f:8d:7d:4c:ca:4b:c6:e1:d2:7b:66:b5:
fd:52:b8:ae:7e:4a:3c:e6:79:8e:00:4e:89:ec:72:
f7:73:58:8e:47:a4:0a:08:cf:97:34:c6:b6:d9:35:
a3:c1:f4:09:6f:ee:a3:30:be:b8:96:1b:4c:3a:f2:
0b:6d:05:eb:6e:94:a1:b3:83:19:0e:bb:12:78:16:
50:3a:a5:8c:f6:03:58:ff:3f:fb:ed:6b:4f:e1:32:
2f:1e:49:21:11:8a:47:6a:38:9c:2c:ad:94:93:a8:
04:6e:34:f5:e7:d3:a5:95:18:ef:b2:ad:27:ad:1a:
73:3e:33:af:26:ec:11:92:fb:5c:9b:f5:1a:71:62:
0a:a7:b7:d3:ac:fd:6a:d9:73:02:a5:a5:a7:04:b2:
df:49:f9:42:46:ec:4b:04:a6:3c:59:8a:a4:08:40:
f9:44:d9:ef:11:99:04:a2:88:18:ae:c1:0a:d1:87:
6d:4b:98:71:7d:59:df:96:15:44:df:8a:ef:3e:c0:
8c:fd:32:ba:43:64:1b:ca:8a:35:a6:62:12:f3:a7:
22:4a:d7:df:9c:b2:03:d7:ff:f8:81:85:14:03:b0:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:7E:72:66:47:0F:17:8A:A2:78:49:78:9F:AA:E0:BA:AB:53:BF
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:7f:9e:01:89:28:d1:68:a9:07:d0:96:3e:7c:78:cf:a5:
13:27:fd:d7:c8:eb:d4:5c:72:5a:55:37:08:dd:94:ce:e4:b7:
6b:3e:9b:d7:c2:f6:1f:cd:6f:1b:6e:e9:87:56:59:c6:6b:9e:
d1:ca:e8:a9:03:cf:92:36:28:a2:2e:e4:a3:30:e7:58:cc:8d:
c8:c7:e2:27:9f:f8:ec:df:5c:ca:a6:43:4b:c0:3d:1a:8b:30:
ef:ae:4b:3e:bc:fd:77:6a:29:7f:aa:74:23:89:d0:a1:ac:75:
a9:c9:a8:0a:f5:7c:cd:c9:9a:52:4f:31:10:6b:47:ad:74:7e:
50:4a:dd:af:e1:03:a8:db:3f:a5:49:63:cf:98:8e:e1:ff:a1:
42:03:40:ee:7a:10:a1:f5:69:de:f8:14:4a:23:e9:10:5a:cc:
cd:4e:92:19:5c:6d:27:80:0a:de:31:85:9c:dd:fd:e6:0b:4d:
83:3e:c1:e5:33:ec:15:b1:9d:8b:c3:ee:ee:9f:fe:c8:7e:a8:
8e:4d:47:e5:b2:80:56:6f:1c:cc:32:0e:9e:35:6d:20:2e:cc:
cc:7d:13:7e:37:a9:54:b4:13:41:ec:a1:28:d5:82:a6:5c:ff:
1c:7f:85:12:75:a2:a1:11:80:63:1c:1b:f3:11:23:24:2c:ee:
25:38:3b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:56 2025 by rpki-client