Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: 8BGhWzz9WH2/pEHWhqPyOZDiwDXlmCU4hzsKRSMN7mA=
Subject key identifier: 00:33:E0:73:FC:B2:8B:D9:B1:84:CA:82:73:80:CF:60:9D:30:59:58
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019A23654EEEBA8B91FB8A5C474974D1C908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1687
Signing time: Mon 27 Oct 2025 02:00:33 +0000
Manifest this update: Mon 27 Oct 2025 02:00:33 +0000
Manifest next update: Tue 28 Oct 2025 02:00:33 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: 00Csjzt7uQhz9nHcL7C6SRxgU8kMiPqfnPVOmoxBdl8=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:4e:ee:ba:8b:91:fb:8a:5c:47:49:74:d1:c9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Oct 27 02:00:33 2025 GMT
Not After : Oct 28 02:00:33 2025 GMT
Subject: CN=0033e073fcb28bd9b184ca827380cf609d305958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:37:2f:22:78:2b:10:7e:d9:90:85:1a:e5:
93:51:d8:41:3c:e1:a2:aa:2c:65:51:2b:f0:68:00:
b5:f3:ae:8b:c4:45:32:29:c8:4e:31:bd:3c:7b:6c:
47:2c:e7:55:69:61:33:ef:12:48:7f:c9:53:90:b5:
33:a5:fa:c0:04:4a:34:5c:fc:71:51:12:a4:af:11:
05:cd:9f:ac:ca:b2:41:de:e9:82:09:6c:d9:64:50:
80:3f:64:bf:24:c3:73:e7:f8:2b:79:04:bd:b9:70:
9e:00:cf:dd:48:a6:4f:38:a7:8b:b1:82:f2:ed:a4:
87:fe:77:ae:ad:b9:a0:5a:52:c6:da:01:55:92:77:
69:0b:fc:0f:66:4f:f7:4c:bf:75:76:cc:26:30:3f:
ae:3f:de:e9:b4:4e:38:1a:72:d3:7d:82:1a:48:72:
c8:ff:98:2f:6d:ff:0c:4b:cc:3c:55:ba:21:81:c1:
b1:95:64:bf:70:49:61:09:46:a3:73:7d:b1:44:46:
ae:be:e8:f1:29:23:9d:3a:95:c8:91:19:27:93:d8:
90:3b:72:40:a9:2f:a9:45:28:91:72:e8:22:b2:e8:
63:d6:84:79:c8:c8:14:85:e8:61:6f:6a:d1:1d:cd:
68:5e:d9:0e:60:97:43:89:c8:4e:64:cb:3c:19:7a:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:33:E0:73:FC:B2:8B:D9:B1:84:CA:82:73:80:CF:60:9D:30:59:58
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8d:4b:1c:d6:a2:64:1b:55:ff:50:d1:75:72:9d:de:e8:23:
5e:fa:f4:a2:06:2b:3e:05:7e:f9:96:1d:c7:41:13:c4:5a:ca:
88:bf:f6:09:c9:db:cd:26:16:05:e8:07:6b:e9:74:3e:23:dc:
8e:96:66:b1:48:d3:a2:8c:02:79:dd:d2:b7:4a:cf:25:38:40:
58:ff:d2:83:04:d9:37:45:d4:c7:5e:5c:33:fa:e4:8e:98:22:
17:8a:b5:22:0d:e7:2f:b3:6a:6b:e4:58:f2:33:9a:f1:f7:51:
a9:3c:a8:02:c5:c7:5e:d4:2e:67:22:70:13:1a:d8:96:c7:e6:
97:bc:f3:12:30:b6:36:46:03:95:3d:75:e6:43:fe:1c:51:55:
13:d7:22:ae:1e:a2:5f:b4:c6:17:cb:92:65:13:79:17:b8:5e:
1d:c2:d1:c4:3c:13:7c:60:6f:6d:f8:d9:76:48:bf:ba:01:e1:
c8:66:e6:22:3f:ae:03:4d:1b:b6:2e:5b:fc:ff:f8:94:33:77:
36:e4:f7:68:fd:8a:cb:b7:c2:c7:c7:a2:5a:e5:98:1f:9f:05:
2a:a9:20:3d:4c:e5:9c:51:78:2d:1a:af:64:15:3e:17:32:18:
32:11:69:e0:e3:25:7a:5e:9e:f1:81:61:ff:ef:d5:13:22:51:
d8:79:b9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:40 2025 by rpki-client