Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json)
Hash identifier: iWusNe/wi60fF7V1ucyiPCnPqYakuODiPFJbhc2pe1o=
Subject key identifier: 18:13:64:1C:19:3C:A1:0D:25:AF:BA:E2:D7:7B:BD:BB:EA:BE:F5:D0
Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Certificate serial: 019A725C3C0F80E83F7D4847D3B09DE63FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
Manifest number: 0262
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: qOcWPUIZhvwKcXw8WrsvX6YJDKiCsxmofWATO0Zcq7I=)
2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3c:0f:80:e8:3f:7d:48:47:d3:b0:9d:e6:3f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=1813641c193ca10d25afbae2d77bbdbbeabef5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:96:4d:ec:d7:57:16:cb:e9:37:37:db:7f:
da:43:75:e5:ec:2c:a3:5b:1a:db:09:9d:cc:24:52:
2d:4f:f1:2f:dd:c5:9f:f3:00:0f:54:d8:8d:31:70:
c2:93:3c:45:20:30:e8:b8:c5:9a:ee:ba:f8:1b:77:
96:2b:3f:f3:a9:97:39:88:49:3c:1e:5a:3d:2d:4f:
70:5c:a9:4d:a7:70:4a:48:63:0d:b3:ab:5c:10:31:
a4:89:cb:93:95:b8:b6:4c:fb:9c:a4:fe:ae:fc:be:
88:bb:c9:e0:65:0d:59:df:46:20:ab:bc:3c:89:7b:
36:3b:7f:a9:84:5a:ff:22:74:7b:ee:bb:d9:ee:95:
3c:65:d2:83:18:0d:e4:df:7f:d8:42:1e:a6:b9:48:
69:c8:46:0e:15:76:44:96:a6:57:5e:d8:69:91:26:
06:c7:ee:a8:01:9a:44:19:63:da:28:ad:95:37:56:
89:2b:40:78:55:e8:3b:30:1c:d1:ea:49:70:91:bb:
8b:c9:5c:3e:db:5b:34:c0:12:42:8e:af:aa:97:0a:
a1:3d:66:d9:e7:bb:f8:74:e4:77:10:bf:75:fb:2c:
e9:49:f9:a3:0f:52:c1:09:97:3e:7f:de:22:ee:e7:
ab:2b:36:88:e4:cd:cd:1b:e5:7c:92:31:03:0b:27:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:13:64:1C:19:3C:A1:0D:25:AF:BA:E2:D7:7B:BD:BB:EA:BE:F5:D0
X509v3 Authority Key Identifier:
keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:74:c7:18:f8:f5:f8:e7:a9:e1:5d:b8:68:e2:31:67:b8:03:
96:f7:7b:e9:d4:75:96:58:19:c1:93:ad:14:9d:87:72:0f:66:
98:5a:6d:5f:42:b8:85:e0:54:f8:d7:53:a2:20:92:fb:07:f6:
a9:3d:9f:3a:ac:4b:c6:b7:a8:2c:3c:72:f8:5b:5a:f7:47:ab:
de:db:d2:44:ab:02:e1:93:16:f9:ce:cd:38:db:17:6c:02:49:
ba:e8:2f:ba:79:67:53:37:f9:36:66:61:ca:3a:f8:2d:5e:a3:
4e:58:a4:68:96:d2:e7:bc:55:1f:48:82:ad:9b:fc:7c:e4:fa:
7c:8b:66:c3:fe:9c:58:65:b6:b7:45:a4:f0:17:06:4d:4e:f0:
1b:34:8c:c6:a8:8d:e2:c7:09:16:64:3d:fb:c2:56:ef:bd:b1:
b6:56:c9:a0:34:35:33:74:b2:4e:f1:7b:7d:82:1c:4e:6c:8a:
8e:e5:9a:1e:a2:38:af:69:8f:c9:1c:de:4f:7b:9c:0b:0e:1c:
06:2e:db:0c:d7:82:b9:29:a4:39:84:56:1f:da:19:15:ac:5b:
04:5f:78:b8:93:40:99:0e:ee:0f:14:c5:d9:24:06:c3:a1:0e:
9e:37:30:41:e8:f2:93:0d:c6:9d:07:d6:1e:18:5f:20:23:3c:
20:bc:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:43 2025 by rpki-client