Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
File: Xojs8KFK0YVzWdLOW9BCuflsfN0.mft (raw, json)
Hash identifier: libWuXsBg1QcjDRSkB9sldhWMUUj6dLWjIdw3QLsBd4=
Subject key identifier: BA:ED:E5:AD:49:62:43:71:29:70:48:BC:91:47:3D:F4:88:57:D9:91
Authority key identifier: 5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
Certificate issuer: /CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Certificate serial: 019A1FBF0551065C3BFF6B145A5530C4F89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
Manifest number: 0873
Signing time: Sun 26 Oct 2025 09:00:03 +0000
Manifest this update: Sun 26 Oct 2025 09:00:03 +0000
Manifest next update: Mon 27 Oct 2025 09:00:03 +0000
Files and hashes: 1: Xojs8KFK0YVzWdLOW9BCuflsfN0.crl (hash: HE5o/+nz4kS05tOS2t7NNkXlQPDf7vgbi0XCw83E8ZQ=)
2: oNaxj3U73YsxY2SMYd62wSvMB4E.roa (hash: +NOpZAlgmwl+h9fy4R1kVxAQ1d7pxMvgMiKewHh1e4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:05:51:06:5c:3b:ff:6b:14:5a:55:30:c4:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e88ecf0a14ad1857359d2ce5bd042b9f96c7cdd
Validity
Not Before: Oct 26 09:00:03 2025 GMT
Not After : Oct 27 09:00:03 2025 GMT
Subject: CN=baede5ad49624371297048bc91473df48857d991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1b:3e:29:d6:ee:1a:00:a7:66:dd:d2:c0:95:
76:14:2a:93:08:59:47:98:f4:6a:0b:90:eb:89:a1:
ff:db:b0:5f:a4:5f:48:b9:47:95:cf:b7:33:de:fe:
31:fa:e5:da:33:d2:75:1a:d0:81:b6:51:22:97:6d:
1e:7e:88:e3:31:0a:ec:9f:91:3f:ce:37:e5:78:92:
aa:35:fd:8c:8f:f9:22:00:9a:cd:fb:40:ce:e8:c2:
4e:dc:85:1a:92:72:0e:ff:26:74:c0:61:d3:93:4f:
cb:b8:11:56:9d:55:93:0b:5a:39:d2:79:6e:4d:45:
52:35:d1:5a:65:70:8c:99:7d:c5:df:12:6f:b8:b4:
8d:5b:6a:ff:71:23:55:22:19:c8:56:b5:b5:0c:d7:
1e:7a:53:64:86:e2:b3:9e:bf:d8:2e:72:53:1d:02:
c0:a4:7a:b5:59:5a:ed:ab:34:90:ae:1b:58:c4:ac:
f8:ac:cb:da:bf:47:17:62:0f:72:f8:48:2f:3a:08:
c4:3f:ea:c5:e5:5c:e8:f5:a0:c2:9d:ef:72:a1:b2:
87:af:e0:c2:a6:07:a9:ec:b1:4c:13:1e:fb:c4:3f:
98:44:23:dd:e2:8b:39:3f:fb:ed:7c:4a:0b:98:bb:
b2:1a:e3:21:f4:70:9e:00:82:81:07:aa:9b:ab:83:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:ED:E5:AD:49:62:43:71:29:70:48:BC:91:47:3D:F4:88:57:D9:91
X509v3 Authority Key Identifier:
keyid:5E:88:EC:F0:A1:4A:D1:85:73:59:D2:CE:5B:D0:42:B9:F9:6C:7C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xojs8KFK0YVzWdLOW9BCuflsfN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/211b2e-4e3c-4482-a279-9f0f33532ea3/1/Xojs8KFK0YVzWdLOW9BCuflsfN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e7:d9:e4:90:64:ad:71:9b:91:7c:dd:f0:da:b2:d9:58:00:
ce:04:e4:21:ca:32:0f:b5:6f:c0:f6:ea:bb:05:f6:f4:52:46:
62:c4:b4:77:c9:47:42:1c:f5:2e:51:31:9a:ee:f6:b3:f1:d5:
ea:8e:24:eb:9b:3e:31:3b:af:c6:a1:7e:68:ba:b7:58:df:fd:
0b:5c:5f:8b:0d:30:a1:56:ef:f0:3d:d4:d5:ea:ef:9a:13:50:
e8:c7:fd:c4:7b:ed:14:d7:c2:ec:6d:ed:35:b0:74:99:b1:48:
b9:ff:04:a6:3f:77:bf:8d:10:d6:de:c5:ec:2e:54:96:d2:96:
85:f3:f2:6f:a6:ca:8a:77:c1:b1:89:dc:82:db:15:f1:95:a6:
21:f2:93:2b:41:d8:8b:f9:3e:ca:43:7f:49:86:32:e1:76:06:
eb:ea:2d:50:18:83:df:52:8b:c7:d0:b6:43:d8:2d:44:90:0e:
7d:e1:d9:44:4d:9e:8d:bf:25:cf:a1:9c:04:98:72:13:9d:7a:
64:18:50:05:22:76:dd:be:4c:61:77:bd:ca:a8:de:20:14:e3:
15:af:5a:08:43:30:9d:0c:37:d2:3e:15:95:23:02:85:17:d7:
f1:bc:9d:8f:d1:1f:79:1f:c4:dc:eb:da:93:b0:9e:89:91:b3:
57:04:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:21:04 2025 by rpki-client