Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
File: XHURStws-O3qUFlX556JBEJmwk4.mft (raw, json)
Hash identifier: LfVfjfu7G/e6H1SzLJCgqe5EWIsxCp11IAbyog3SHwE=
Subject key identifier: 26:4E:7E:D4:7A:61:50:96:F7:1C:63:46:AF:72:E7:8B:00:A5:4A:1C
Authority key identifier: 5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
Certificate issuer: /CN=5c75114adc2cf8edea505957e79e89044266c24e
Certificate serial: 019A03A41B0DA4D689BD4D51BB3A19A68BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 22:01:17 +0000
Manifest this update: Mon 20 Oct 2025 22:01:17 +0000
Manifest next update: Tue 21 Oct 2025 22:01:17 +0000
Files and hashes: 1: XHURStws-O3qUFlX556JBEJmwk4.crl (hash: HNkDM81xfvHCszhy4FlTG9gkwGNuSL+8/qUjxheESIE=)
2: uFHSzfk_zk3TIp45n5GBEUFKwao.roa (hash: KVIiwAo2wdMIe86msUEJxL5joqSg/x0TWu2flcitTfE=)
3: xJ-H39IOSB6XadrNN4evmOK-Bm8.roa (hash: 4175v9gOZ3L5ywBtB3+A8R3L8qZZ5FxiHwK6cbdkSKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:1b:0d:a4:d6:89:bd:4d:51:bb:3a:19:a6:8b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c75114adc2cf8edea505957e79e89044266c24e
Validity
Not Before: Oct 20 22:01:17 2025 GMT
Not After : Oct 21 22:01:17 2025 GMT
Subject: CN=264e7ed47a615096f71c6346af72e78b00a54a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:a5:76:5b:58:90:18:02:4f:e1:21:93:c6:
0a:54:9e:cb:3b:2c:7d:7b:42:d7:31:e3:db:72:d5:
c0:3b:05:a8:51:e0:f4:30:18:45:63:b4:81:e1:e0:
0a:bd:da:78:70:ed:5b:04:9a:58:b8:94:2f:e5:b3:
fd:41:a9:66:7a:49:2f:67:42:56:5e:f0:ed:60:71:
d5:1a:41:d8:75:a4:ea:72:36:5a:e0:bd:fe:66:e0:
aa:2b:98:2b:cd:9e:8c:f7:28:d4:f5:4c:60:7a:cb:
be:e9:a2:2f:dd:40:dd:e7:1f:3e:87:a3:37:bf:9c:
79:23:52:49:dd:ac:53:32:db:90:b8:11:21:8a:b9:
0e:a9:6c:23:f9:0d:d5:b7:3b:a6:7f:56:fe:58:1a:
e1:fa:6c:0a:3a:02:6b:46:55:8d:6f:ef:b6:d1:ad:
50:fb:5b:83:cf:1f:f2:08:71:0b:05:e3:d1:44:e5:
8c:c8:9b:9f:f8:b0:b2:64:03:4f:7a:71:ae:b5:e8:
b5:12:14:d9:65:28:84:36:d2:06:24:08:cb:c1:4f:
c6:93:10:67:fa:9c:b2:e9:50:61:8d:fc:74:42:e0:
1e:c9:0b:5f:25:e4:b5:fc:4d:0e:5e:f3:8c:f9:27:
dc:99:e5:e5:d3:ad:06:b2:ef:dc:48:3e:16:42:64:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4E:7E:D4:7A:61:50:96:F7:1C:63:46:AF:72:E7:8B:00:A5:4A:1C
X509v3 Authority Key Identifier:
keyid:5C:75:11:4A:DC:2C:F8:ED:EA:50:59:57:E7:9E:89:04:42:66:C2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHURStws-O3qUFlX556JBEJmwk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c69704-db71-4b1d-b8ac-c5dc094df9c4/1/XHURStws-O3qUFlX556JBEJmwk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:10:96:ad:eb:5b:a0:c4:a0:4c:cb:4c:1a:a4:39:72:3c:9d:
c6:18:a1:ed:1f:12:83:89:a7:17:a8:16:02:25:8b:50:45:b3:
69:9a:49:e9:b3:8e:2b:e6:e0:55:f8:a8:79:fe:a8:ed:fb:f6:
fb:48:e3:83:8d:b8:9a:42:e8:89:0a:04:54:28:36:be:f1:85:
41:b8:b1:2f:65:4f:86:d9:d4:af:6c:4c:9f:93:4f:9e:a3:07:
55:bc:76:c7:5e:92:b1:43:c1:43:09:af:37:3c:58:08:03:46:
31:55:26:d3:ea:e9:cb:4f:e1:29:fe:dc:c7:6f:7a:97:60:93:
fb:69:75:6d:0a:b8:a0:36:2c:64:3e:6e:12:de:97:01:36:ff:
85:61:b6:75:eb:c8:15:99:d5:90:52:14:d5:b2:b2:7c:cf:3c:
9f:56:04:94:72:a3:6b:09:6f:b2:b3:f6:ac:71:a7:a2:9c:79:
6c:67:68:d6:95:4f:eb:ae:04:54:c7:bf:64:b3:4e:c4:23:5c:
f9:ae:f2:2f:73:79:17:db:9d:22:ce:c1:96:b7:b4:2a:d4:a3:
06:ed:65:ec:43:5c:9a:5b:29:62:f3:7b:79:d3:5f:ad:9b:86:
15:d0:98:a8:9e:e5:d3:82:f6:20:e9:54:a1:fc:ae:12:70:83:
86:bc:86:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:08 2025 by rpki-client