Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json)
Hash identifier: +C2/o65E9xPf1YXoLIXtv5yP0oZqAHqq3wj+bYbGLcE=
Subject key identifier: 08:1A:1A:A1:4B:7E:C7:EC:E7:D2:89:39:1A:09:2B:C1:14:41:44:B6
Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Certificate serial: 019A70A4ED7172028735D2E9265FE38FBCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
Manifest number: 08DB
Signing time: Tue 11 Nov 2025 02:00:47 +0000
Manifest this update: Tue 11 Nov 2025 02:00:47 +0000
Manifest next update: Wed 12 Nov 2025 02:00:47 +0000
Files and hashes: 1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=)
2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: SHf+rZ5kqGRWMC16XroMZulNhqWoiTK2mWcwx+GChPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:ed:71:72:02:87:35:d2:e9:26:5f:e3:8f:bc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e
Validity
Not Before: Nov 11 02:00:47 2025 GMT
Not After : Nov 12 02:00:47 2025 GMT
Subject: CN=081a1aa14b7ec7ece7d289391a092bc1144144b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:00:25:16:a3:7f:80:0d:c2:a4:5f:c4:80:
e1:dd:a9:dc:1e:cc:6e:b4:25:94:8f:6e:04:52:55:
c8:34:f9:f2:d4:4f:02:28:cc:65:71:7c:ee:f6:3a:
32:5f:cb:7e:ba:1d:b8:6a:72:b6:82:d2:68:d4:eb:
05:5a:3f:35:36:8d:bd:45:4f:f7:1a:a3:63:d7:55:
2a:75:00:d1:eb:dc:40:f4:c1:94:ce:5f:bc:4a:1e:
1a:78:4a:18:aa:2f:9a:6e:4a:c4:91:36:74:d2:6c:
79:86:23:ef:7d:9e:cc:7d:0c:9a:04:da:0b:ae:b7:
98:52:5d:52:9b:69:8e:e8:ce:a0:2e:38:10:03:5d:
0f:2d:38:97:b2:10:a7:76:64:1f:a8:77:00:60:19:
b2:3c:78:3e:2f:40:12:7e:7e:8a:8c:29:b9:c8:1c:
c7:41:a3:ae:39:33:25:81:29:fd:2a:23:1d:08:02:
0e:cd:84:32:74:5b:e2:0f:14:99:47:4e:f8:18:55:
11:2e:e6:3f:2b:5a:17:0a:30:bb:e8:4e:df:03:bd:
c1:d9:95:08:3f:55:79:26:6f:da:fd:1c:de:b8:54:
d6:f9:f7:8f:c4:2d:0a:cf:68:d4:50:04:26:8c:87:
04:f3:3d:e6:5a:78:2e:c3:05:13:30:75:ad:67:41:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1A:1A:A1:4B:7E:C7:EC:E7:D2:89:39:1A:09:2B:C1:14:41:44:B6
X509v3 Authority Key Identifier:
keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2f:f2:0d:3e:2c:15:c2:86:1a:74:02:45:e3:26:34:d5:4b:
3c:b2:62:60:ed:fc:c0:1d:13:dd:cd:93:a7:3f:8d:c0:b2:46:
30:c3:b5:46:cf:b5:29:ec:3a:1c:58:d7:f2:0e:eb:8c:0b:f8:
f0:47:a7:45:eb:89:2a:b3:e9:5e:50:ac:99:5d:d0:a0:e1:0d:
30:f2:94:bb:1b:c5:12:a4:97:6b:f0:00:96:29:31:63:a0:9f:
92:d0:10:a2:5b:f5:78:21:30:aa:a6:0c:ba:d6:be:a7:81:12:
49:e4:50:c6:c8:8d:68:03:5c:76:1f:17:ab:ed:46:ea:c2:00:
76:7e:db:04:8f:ca:6a:d9:ff:da:f2:14:f3:a1:cb:a3:60:4d:
c9:0e:ee:d9:c4:ca:73:36:13:c7:a5:85:21:27:2f:65:d3:0b:
16:a3:70:79:a8:90:9f:9f:53:cc:14:d0:2d:f9:b6:2e:70:f2:
73:86:46:67:d8:81:72:5c:61:53:35:44:cb:8c:c3:85:d9:31:
f0:34:1f:9d:44:2f:f7:d0:39:71:92:8f:a2:d0:bf:bb:64:9a:
9f:71:c9:93:78:53:48:5f:d2:d6:0b:51:11:a0:3a:b0:fb:32:
5b:b1:e0:d7:14:73:91:fd:5d:85:7c:19:0f:81:e3:e8:b3:2b:
26:3b:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:52 2025 by rpki-client