Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File: xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier: xvjdcsVb/cnuyVa6hTTc+yGOSDE6UBM4n+uSXH01PRc=
Subject key identifier: D4:3D:DA:90:A3:E2:D3:94:8E:77:07:86:49:F8:16:BA:05:21:30:BE
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 019A22F7FB78B72E20C0679F55C56DF14692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number: 0865
Signing time: Mon 27 Oct 2025 00:01:08 +0000
Manifest this update: Mon 27 Oct 2025 00:01:08 +0000
Manifest next update: Tue 28 Oct 2025 00:01:08 +0000
Files and hashes: 1: _QBZZm_j6pkBqG7ULTSKSuYA6m4.roa (hash: J+NZ6+xHvgyZBnOnyLbSKcqDP+9z+FmiBI8TDK00aCo=)
2: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=)
3: jpN0hvuTgqmocPyed3qkYPDHQdk.roa (hash: k+R6t5Hzmk9H5O7QG4Q3cEOcrN/jFXUPR3aXqZ2Jg1U=)
4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=)
5: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: CDte6f9skjQITtY0w8ogKL35i0mZiT0nofUqfG4T+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:fb:78:b7:2e:20:c0:67:9f:55:c5:6d:f1:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Oct 27 00:01:08 2025 GMT
Not After : Oct 28 00:01:08 2025 GMT
Subject: CN=d43dda90a3e2d3948e77078649f816ba052130be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7e:f6:8f:a2:9e:fb:4e:bb:83:2d:6e:d4:fb:
4b:07:e2:dc:64:d0:8d:bc:c6:ff:c8:b1:7a:80:ce:
07:9d:29:bb:bb:03:23:aa:3d:32:3f:39:7a:88:30:
8d:2f:de:02:5a:b2:df:46:95:10:ab:f9:a3:dd:7f:
3f:d5:b3:e8:ca:bf:98:c4:3a:91:56:a7:71:37:a9:
e4:c3:79:64:f2:84:45:73:5f:c6:23:85:90:79:ae:
71:04:3b:34:f2:e6:91:7b:43:2a:5f:93:37:40:6a:
97:18:a4:7b:33:10:2c:25:b6:99:e3:c8:45:1a:e3:
0c:d6:63:2d:2f:fc:27:1b:2e:16:81:2f:24:fa:25:
04:9f:03:51:26:59:5b:e5:d7:a4:12:ac:7c:c6:52:
76:a7:2e:14:ed:f1:d5:2b:62:f9:67:eb:35:72:78:
d3:8d:eb:b1:39:ed:d1:2c:c7:16:75:2f:62:4a:c3:
67:41:a5:a6:51:11:78:f0:e9:a3:c7:4d:cc:2d:ce:
43:34:d9:1d:c5:c1:dc:08:fc:09:17:43:9f:df:4c:
f1:4b:fe:e7:71:46:56:ec:15:d1:28:24:d4:74:2d:
de:9b:1d:6c:5f:fe:e4:f4:3d:06:90:fc:b1:3a:27:
23:6c:d0:f7:e7:d8:32:f0:37:49:b7:c4:97:5a:9c:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3D:DA:90:A3:E2:D3:94:8E:77:07:86:49:F8:16:BA:05:21:30:BE
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:42:6d:06:4c:01:a1:5d:fa:75:02:a6:fd:4b:46:c3:92:e8:
24:41:85:81:1c:24:59:77:78:7a:d4:88:54:04:91:74:0d:74:
66:70:9c:86:fb:aa:be:59:bd:b8:54:ba:56:2b:19:ff:cb:32:
16:00:38:2b:2f:69:76:70:35:a8:ff:6f:bd:bc:4b:b7:bc:46:
98:d5:c2:cf:6f:1a:cd:89:2f:21:8f:43:75:38:eb:dc:c8:c4:
ec:aa:e1:6f:c6:b8:5f:54:8a:ed:da:7d:7e:3c:03:61:a0:b9:
fc:e8:87:b4:8b:b1:b4:b9:74:95:dd:a5:e1:fb:2c:3f:8a:48:
67:e2:6e:1f:30:92:8c:16:7d:65:da:c4:66:97:8c:d3:9c:11:
59:89:41:9d:48:63:5d:a0:85:d8:b0:6e:cb:5d:1f:4b:96:1b:
cb:73:a6:03:16:59:0d:4b:2e:39:8f:d6:56:09:d8:7d:ee:ec:
01:21:d6:0e:5f:1b:52:48:17:d9:ed:b6:1f:f0:0c:4e:e6:fc:
50:5b:a5:78:a1:47:ef:0c:18:0f:c7:76:4a:59:dc:26:63:ea:
04:70:94:24:b8:e6:58:89:54:07:d5:b1:bd:da:b5:e5:aa:3b:
0f:da:39:4f:dc:ee:37:16:13:31:0c:55:e0:50:e5:93:0b:61:
74:24:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 08:41:38 2025 by rpki-client