Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json)
Hash identifier: NcF9uSVu5tmZAaKRzNSkMzWvCKi0kBcAp7JLdW5BJfs=
Subject key identifier: 6C:C7:12:5A:F7:A8:09:C6:CA:56:44:7A:FA:79:BF:4D:D0:17:2E:C5
Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
Certificate issuer: /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Certificate serial: 019A71EE8350B4592C868C67F89FC2DA9FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
Manifest number: 068B
Signing time: Tue 11 Nov 2025 08:00:47 +0000
Manifest this update: Tue 11 Nov 2025 08:00:47 +0000
Manifest next update: Wed 12 Nov 2025 08:00:47 +0000
Files and hashes: 1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=)
2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: 1YpSUwk8YOg3isCNJQZkYnqBLRjZuthsWC2sbk4Z/3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:83:50:b4:59:2c:86:8c:67:f8:9f:c2:da:9f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9
Validity
Not Before: Nov 11 08:00:47 2025 GMT
Not After : Nov 12 08:00:47 2025 GMT
Subject: CN=6cc7125af7a809c6ca56447afa79bf4dd0172ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5c:b2:0d:47:cf:c7:bf:4c:dc:a8:b6:73:39:
13:0a:72:06:9d:3a:8b:c0:63:34:6c:66:87:b7:66:
11:8d:5e:30:d6:db:82:f5:d1:25:7f:4d:5d:d1:4d:
91:f7:4b:ae:68:7a:eb:18:6a:3c:71:49:ee:ab:85:
90:b7:ae:50:1f:68:e7:56:af:91:39:9d:86:3d:ab:
81:85:52:58:b1:64:7d:77:ae:00:24:89:df:01:42:
3e:a5:bf:4f:90:78:57:fb:31:89:8a:eb:26:9f:08:
0f:e4:f1:cd:22:f8:be:9a:36:b8:54:65:a0:f3:d1:
f0:5a:cf:67:75:cb:c6:75:9b:0b:23:8b:b6:94:c3:
5f:12:ba:11:8f:cc:e8:3c:9a:95:dc:69:b0:2e:1b:
8e:4e:c2:c7:42:9e:62:18:03:97:6a:f4:5a:13:04:
4f:b2:c6:55:92:6a:5f:83:0f:52:e0:1b:0d:1b:b5:
43:62:d9:9d:69:d9:6a:64:3b:11:4d:8d:76:a2:c2:
bc:1c:98:de:7a:30:39:6f:ae:d9:9a:ee:df:03:cd:
d3:c3:03:95:df:4c:f6:0f:e8:d9:72:b2:6f:e3:47:
47:c7:00:67:fa:56:d3:3d:d3:54:ec:2a:7b:5f:9f:
87:30:d2:81:c2:d7:c0:e6:9b:66:e4:3b:fe:11:9e:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C7:12:5A:F7:A8:09:C6:CA:56:44:7A:FA:79:BF:4D:D0:17:2E:C5
X509v3 Authority Key Identifier:
keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:59:55:9b:db:68:0d:fa:92:60:81:75:02:0a:e0:7d:a8:e9:
65:55:4a:19:f1:12:50:ab:ff:ce:1f:1a:1e:b3:98:12:78:7f:
f6:67:73:92:1a:83:85:eb:41:df:44:26:28:ca:16:8d:94:d7:
ba:b2:9c:d4:45:33:d5:2a:58:4f:4c:ad:a7:63:f1:98:52:7c:
36:2a:11:cf:48:d1:45:48:2b:17:f8:d5:08:ad:fb:4d:2c:eb:
a9:92:01:47:49:da:ff:3e:f2:e9:f9:91:5d:b2:52:03:00:a0:
88:18:9d:be:36:29:75:f7:f4:d9:15:d1:37:86:25:1a:1b:97:
e7:b7:33:ae:7c:9f:37:62:08:47:60:b6:c7:d2:e5:05:3c:77:
44:e8:c5:69:27:76:38:ec:6b:47:21:11:45:19:01:e7:c4:39:
f3:dc:1f:48:62:91:76:87:57:8b:06:21:31:57:d1:56:fc:7a:
f0:e4:4d:1d:9e:c9:56:bd:74:8b:20:4b:63:e3:f5:fb:8c:94:
81:7f:40:a6:74:c8:95:8e:66:c4:07:31:d6:a7:0f:ef:a7:03:
70:5f:29:0e:2e:dc:b7:dc:69:ca:8d:b5:d9:88:b6:9b:c7:f5:
af:72:b2:4c:fa:7e:91:a3:f4:fe:a8:73:4e:da:c5:43:6a:77:
a4:b4:53:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:38 2025 by rpki-client