Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier: 8RvT+2MAzPnlfafqjFEreGgMMJZM3xA7KT6v++tVkVA=
Subject key identifier: AC:A9:6A:F6:C7:23:74:44:2B:85:99:99:D3:9B:14:06:BE:0B:82:FF
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 019A085BFF3EB71AD8764802329E0572FA6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number: 0E65
Signing time: Tue 21 Oct 2025 20:00:38 +0000
Manifest this update: Tue 21 Oct 2025 20:00:38 +0000
Manifest next update: Wed 22 Oct 2025 20:00:38 +0000
Files and hashes: 1: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
2: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
3: EtBWv7v42TBRx3xi5if6zm6OAdo.roa (hash: wUjEWMJsxkGqfJP8Q+fyLu6SEzpYpLZd1/pV8n4as7s=)
4: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
5: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: EeGlkhKFPShBEZPdXbKVkqz12HTQseU10hMzf9NV/vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:5b:ff:3e:b7:1a:d8:76:48:02:32:9e:05:72:fa:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Oct 21 20:00:38 2025 GMT
Not After : Oct 22 20:00:38 2025 GMT
Subject: CN=aca96af6c72374442b859999d39b1406be0b82ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:ea:71:f0:23:36:27:ff:4e:4c:da:d8:77:
cc:e1:88:90:8d:3a:fa:d7:00:fc:bd:f2:ba:dc:7b:
a5:72:86:e6:63:ae:db:a0:32:31:f2:a9:c5:50:ca:
84:13:c3:ac:58:d1:5b:8d:95:4e:85:08:a6:e0:c8:
26:fb:3e:36:7c:97:6b:6b:e9:1f:c9:79:e6:69:24:
80:97:38:68:95:20:21:f0:6e:2c:6e:36:97:eb:c5:
fe:93:84:fc:94:c6:2a:a8:ba:8a:72:a4:af:d7:65:
06:b6:af:03:47:ec:a7:b0:b8:c7:5d:b6:44:45:00:
72:1c:5a:c7:a7:fe:2e:42:03:4c:36:3f:16:dc:ec:
e3:3a:b8:cd:43:2c:5b:86:fc:5f:62:eb:5e:42:11:
6f:b1:7a:4c:7c:78:ca:4f:ec:e1:07:a1:e4:85:3c:
2f:f4:9e:33:5b:e0:aa:b9:89:4a:6a:e6:a1:50:07:
32:60:c1:a3:e4:36:89:7a:a8:e1:1e:93:ef:e3:ff:
b4:da:79:30:b5:d2:8b:91:62:da:0d:95:13:c5:e7:
d2:2d:f4:e1:2f:98:90:27:7f:62:59:ad:ea:22:6c:
ab:83:5a:4a:26:71:b3:d9:07:8f:cc:1c:3d:60:44:
bd:2e:86:39:2f:aa:9a:75:b8:8c:b0:25:1f:fc:c9:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:6A:F6:C7:23:74:44:2B:85:99:99:D3:9B:14:06:BE:0B:82:FF
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:86:84:79:94:1c:08:d1:eb:c3:28:bd:21:15:00:c7:23:dd:
4e:3e:1a:69:e4:41:8b:8a:9b:4d:c5:a0:1e:57:58:0d:9c:f8:
03:d9:03:99:1e:a4:42:f5:71:4b:89:01:97:48:8c:52:fa:61:
90:a0:86:29:8b:58:88:d2:f3:f0:f3:2e:2f:fc:70:4c:a6:0c:
b5:39:eb:f0:69:8e:89:30:3b:77:59:be:ac:e7:6c:54:89:b2:
06:85:ab:00:2c:ff:59:6a:c5:fc:84:6b:6d:a8:8d:ea:a2:41:
dd:94:29:61:3e:11:b2:4e:b2:f0:30:6c:73:d5:36:59:2d:e6:
fc:82:91:ed:3b:5f:51:c9:2b:94:56:6b:dc:11:a1:64:02:88:
18:b6:6f:34:39:b8:fd:2c:15:e2:08:31:eb:0d:c1:f7:03:60:
6a:ac:14:13:b1:64:52:00:ca:4e:55:89:d4:66:43:c7:5c:e4:
73:12:42:22:ba:40:e0:47:39:66:96:a0:fc:74:d9:97:c2:fb:
72:92:12:f9:fe:96:24:18:05:8e:f5:63:66:19:ae:01:ba:8d:
36:12:aa:e6:5d:04:b2:e1:1d:4d:db:c4:db:12:88:c3:24:52:
56:16:40:04:a2:86:61:b1:af:36:6c:cf:23:11:0b:fc:fd:95:
27:14:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:52:07 2025 by rpki-client