Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json)
Hash identifier: Wv42fwZ/uYyJ04VXGhDYdB1JUAdNYOMKcJbd8Cxe5/A=
Subject key identifier: 36:B3:AA:8F:1C:4C:48:EE:F3:05:F2:7C:9A:9C:86:2F:D4:F3:A3:FA
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 019A22C04A45A09762B9A9882C8580FF9D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
Manifest number: 0655
Signing time: Sun 26 Oct 2025 23:00:18 +0000
Manifest this update: Sun 26 Oct 2025 23:00:18 +0000
Manifest next update: Mon 27 Oct 2025 23:00:18 +0000
Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: hAUbxANd2OOIZW0IHeyvSlGvhQ+wwnPABB5xeae37U0=)
2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:4a:45:a0:97:62:b9:a9:88:2c:85:80:ff:9d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Oct 26 23:00:18 2025 GMT
Not After : Oct 27 23:00:18 2025 GMT
Subject: CN=36b3aa8f1c4c48eef305f27c9a9c862fd4f3a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:8f:d8:43:41:a6:c6:f0:8a:b1:33:b6:db:
aa:d7:21:ec:0f:68:c6:37:45:0c:92:26:f4:02:b1:
bb:8c:20:91:61:c4:1c:ed:bc:8b:10:25:5f:35:31:
52:01:5a:5b:d0:f5:bc:65:0b:14:cd:ef:30:09:83:
61:3a:15:9a:ea:a8:1f:1e:fa:6f:e2:70:a4:2a:95:
74:06:a6:cd:81:42:0e:31:ce:71:65:ab:08:36:c2:
ba:0c:a6:cd:11:74:63:b2:d2:df:07:bb:29:e8:fb:
d2:88:e4:2f:32:bf:d9:16:b9:eb:e3:1f:68:d4:09:
10:8f:55:34:80:00:ac:55:54:82:99:e6:1e:8c:fe:
ae:89:b5:5d:d4:44:c7:6a:42:a8:1d:ce:6c:e6:c0:
b9:23:34:73:a2:99:8b:8f:bd:c9:84:4d:c8:6b:32:
2a:20:74:7c:46:17:99:c4:2a:24:70:af:db:0b:ba:
0c:d7:6c:19:97:7d:62:28:3b:e7:b6:54:15:51:f0:
7e:71:a9:ec:de:1d:90:a4:85:80:ec:94:ab:36:9b:
9b:97:69:73:6e:e6:d9:c4:d6:f2:8a:89:6d:20:18:
75:de:ae:11:11:10:2a:85:08:58:0a:b0:09:65:fc:
84:e6:49:ac:cc:3d:29:2c:61:5e:bb:0c:89:7f:6f:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B3:AA:8F:1C:4C:48:EE:F3:05:F2:7C:9A:9C:86:2F:D4:F3:A3:FA
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:e8:eb:c6:42:40:14:04:64:db:c0:3d:17:c4:22:ad:23:
5e:2b:32:ad:03:ee:1e:dc:11:f7:22:7e:9f:3b:25:35:75:a3:
bf:4d:72:b1:2a:20:02:c1:38:0a:42:83:16:9a:89:98:d7:0b:
2d:3c:19:a0:5e:bc:d7:6c:85:c0:06:47:26:fd:87:30:62:ca:
87:8c:d5:e9:59:11:ae:04:21:39:b7:e4:9a:43:d0:c1:b7:41:
18:84:7e:af:08:33:fd:6f:69:5a:1f:90:ef:a6:5a:bd:a5:27:
0b:16:53:1b:3c:28:c9:78:04:8c:ad:16:b4:a0:21:16:b7:f4:
b1:32:56:91:d9:e7:ad:07:05:3b:1e:ed:a5:80:49:a3:8f:29:
c9:c5:20:e3:e6:1a:70:42:44:f1:7e:f8:28:21:7b:49:01:b5:
86:8e:c8:8b:1e:16:79:46:98:fd:52:03:d2:03:6d:6d:0d:2e:
1d:9d:7f:80:fe:ab:fe:2f:e0:0e:76:bb:cb:d8:97:be:46:4b:
45:8f:11:c7:71:3a:35:03:26:e0:04:d0:b5:a2:50:31:c5:25:
3d:0e:75:30:0a:8d:2b:22:c8:b3:38:b0:d6:2c:d2:42:97:2e:
48:a7:98:85:20:c8:30:d6:1d:7c:80:6f:49:6a:fd:f5:dc:72:
8b:1d:7e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:37:31 2025 by rpki-client