Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json)
Hash identifier: jzkT2atqrvsllCeVZqLbkFWF4WMFqO0LbNh4DLPLFj8=
Subject key identifier: EE:95:A1:B0:76:AC:1A:1C:04:25:6B:A3:1E:A6:95:5D:09:16:65:B3
Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b
Certificate serial: 019A725CF8F0CCE0D0DE316FF79F9AB06A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
Manifest number: 0FF8
Signing time: Tue 11 Nov 2025 10:01:26 +0000
Manifest this update: Tue 11 Nov 2025 10:01:26 +0000
Manifest next update: Wed 12 Nov 2025 10:01:26 +0000
Files and hashes: 1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=)
2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: lGYwGiKFQGC22ys8d9XCX2C/aCSP/LGI53I5+fqJVgA=)
3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:f8:f0:cc:e0:d0:de:31:6f:f7:9f:9a:b0:6a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b
Validity
Not Before: Nov 11 10:01:26 2025 GMT
Not After : Nov 12 10:01:26 2025 GMT
Subject: CN=ee95a1b076ac1a1c04256ba31ea6955d091665b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:d6:7a:18:03:8b:13:61:19:ae:2d:25:95:
1c:eb:1f:e0:bd:4b:eb:2c:57:9e:b7:00:d9:b5:51:
e4:ef:a9:5f:ff:95:71:13:fc:fa:af:33:9b:c2:04:
0f:df:2e:0d:94:db:b5:33:fd:9a:ff:7e:2c:92:6b:
f9:d1:f9:66:e2:20:72:c4:20:c1:1f:ce:09:0d:44:
69:68:8c:a7:2b:0f:45:5a:08:71:10:c1:90:67:47:
7a:33:6d:83:40:11:e6:6a:31:24:63:1c:c8:43:80:
8d:87:1f:82:17:a5:6c:18:08:cd:c7:2d:0d:35:c9:
dd:4c:c5:c1:1c:ae:b3:9b:6c:37:95:91:2f:d0:a5:
ea:c2:e2:ee:42:8d:8d:08:53:8d:2a:35:d5:cd:42:
8a:8e:95:01:87:be:25:22:80:c9:6b:43:25:c5:d2:
e1:12:00:bf:b1:2d:d5:65:ce:7f:d6:c4:ce:4d:6d:
2c:17:54:98:50:c9:f2:45:40:cf:2d:ed:76:b5:e4:
0c:ce:61:12:61:68:33:23:4b:48:4b:29:13:f2:0a:
68:d7:89:69:c6:34:ca:1d:77:95:88:12:87:67:f5:
17:cf:f1:ac:90:17:27:78:43:e5:28:00:3f:1e:bc:
c4:a8:48:57:ba:38:d1:13:3c:f9:db:e9:4d:08:59:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:95:A1:B0:76:AC:1A:1C:04:25:6B:A3:1E:A6:95:5D:09:16:65:B3
X509v3 Authority Key Identifier:
keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a8:3a:6d:a5:b6:96:95:4e:34:87:6d:c7:e0:10:30:fc:21:
97:7b:df:f7:6f:4d:1c:55:66:4e:0b:81:1e:fc:06:dd:39:cb:
32:81:cc:08:73:e7:87:6c:fa:82:de:ec:eb:3c:ba:81:3d:d7:
d4:72:c4:7d:00:51:40:b2:55:d1:d7:a5:ea:96:03:4b:bf:8c:
93:d1:d6:48:e9:ea:b4:3f:65:62:24:6d:bf:b4:51:64:19:86:
b6:ae:44:2c:d2:61:82:42:e4:18:0c:e4:8c:d7:2a:78:b1:9e:
0a:e3:97:28:62:7b:8e:14:8d:1b:a1:5a:11:30:09:a3:bd:da:
05:e5:c0:ee:46:51:9d:a4:04:74:a2:cc:68:04:34:82:04:41:
16:11:86:21:20:f9:e8:e9:d0:5e:8d:25:e3:e6:f9:0e:eb:a1:
a6:0b:cc:ad:0e:fc:6b:0d:d2:3e:68:5d:95:4f:26:45:fe:ab:
4c:b4:46:29:f4:53:63:c6:db:b6:ef:78:75:80:b4:c7:87:ff:
16:c2:39:94:73:9f:f4:c9:d2:a1:e9:8b:06:d8:19:ae:16:0f:
65:c0:88:d7:9f:d2:3c:e8:76:f3:5f:3e:eb:62:37:1b:3b:a5:
bf:eb:4d:da:a4:35:7e:5f:f3:13:d8:65:f3:47:81:28:1f:eb:
ad:3a:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:14 2025 by rpki-client