Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: Dur7FsfSbd/8s71FzQBL3dxy4lz4t5qmTwvvOqPTgz0=
Subject key identifier: 32:67:DF:3C:32:30:29:54:93:66:D2:FB:A3:85:C1:BC:FF:10:57:01
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019A30B2B870A8245D20583AECD56828C153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 140E
Signing time: Wed 29 Oct 2025 16:00:10 +0000
Manifest this update: Wed 29 Oct 2025 16:00:10 +0000
Manifest next update: Thu 30 Oct 2025 16:00:10 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: GmpXAmC1nOwy4m2uDJLKG1scrvHEZkMRNamYl45UnBw=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:b2:b8:70:a8:24:5d:20:58:3a:ec:d5:68:28:c1:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Oct 29 16:00:10 2025 GMT
Not After : Oct 30 16:00:10 2025 GMT
Subject: CN=3267df3c323029549366d2fba385c1bcff105701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:bc:fe:17:96:7c:77:de:39:e5:52:57:e1:
02:f1:0f:f9:5a:c6:1d:24:5d:86:de:87:2d:62:b1:
30:cc:3b:1e:2a:bd:93:21:1b:91:76:00:fe:21:fd:
27:b2:f4:f5:d3:9d:2b:db:26:1e:76:e0:69:27:4c:
61:17:dd:54:9c:88:61:fa:5b:75:8a:1b:61:d9:7d:
c8:a8:42:af:45:11:5d:07:65:42:c1:47:bf:d9:f8:
cd:fd:8a:fd:ae:2d:b4:8e:6e:9c:aa:ab:34:10:1b:
c7:c1:c5:f7:86:31:3e:66:27:00:da:06:a5:9f:6d:
09:83:91:a9:ed:75:19:c1:04:51:d7:b7:46:6f:e5:
e3:23:bc:9d:12:92:94:82:b9:3d:a4:46:53:fd:25:
b2:9f:70:66:28:d3:e1:17:9b:76:54:c5:76:c0:26:
dc:5e:6d:46:c0:68:82:69:54:f1:7e:50:b5:ee:bf:
ba:90:be:dd:2c:56:78:19:43:2b:6f:7f:87:dc:aa:
fe:66:16:e6:e3:54:be:27:1b:45:36:dc:3a:47:0f:
bb:7e:6d:42:61:60:e2:12:44:73:b8:68:ce:d3:bb:
bb:73:1f:26:d3:b8:66:01:d7:36:c2:b9:f0:c4:d4:
3e:1f:81:e0:67:40:a2:4f:bc:a8:39:91:0d:5e:49:
09:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:DF:3C:32:30:29:54:93:66:D2:FB:A3:85:C1:BC:FF:10:57:01
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e2:53:8b:ce:77:cd:24:ec:d7:f4:84:54:4b:73:f8:7f:b5:
62:fc:60:f7:76:7f:3c:ad:79:79:a8:ee:61:0d:8e:7f:d5:0e:
74:3c:d4:c8:bd:6c:24:31:c1:3b:88:84:de:f0:f3:5e:df:37:
ab:00:36:a7:e7:75:22:bd:dd:3a:5c:bc:8f:b2:28:dd:41:58:
90:64:7a:e7:b9:5e:1a:db:22:b7:c4:fe:e3:4f:df:0d:aa:c4:
b7:c9:01:c3:59:5f:2f:f6:bd:41:54:9f:96:47:38:8f:9e:ec:
0f:ff:57:95:fc:e8:08:97:77:a5:7e:7f:28:19:6f:bb:5e:52:
9b:4c:19:7a:64:74:7c:03:56:ce:2f:e5:dd:4a:c0:26:9e:c2:
83:1f:c9:42:84:4d:17:17:3f:23:98:62:95:32:94:75:17:51:
cf:6f:6b:c3:ef:e0:c2:36:71:ee:d0:62:b3:fa:e0:e5:52:d7:
72:ce:9b:cf:45:73:16:32:f4:37:79:84:32:6e:c3:24:15:a3:
31:1a:70:4b:4e:88:81:26:14:e6:c1:c5:3e:cc:b4:eb:95:a9:
7c:c0:d4:44:de:97:6b:d4:8e:20:7e:50:2b:82:44:39:e8:6f:
dc:c3:78:39:dd:80:7f:e5:8b:f6:dc:86:5b:97:43:25:30:3f:
e0:de:31:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 00:42:51 2025 by rpki-client