Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: +tqGPp0V1/gY97Q710SIw4cAQ3UNnxK+hwi3a7fILrU=
Subject key identifier: 2C:78:22:97:F2:A3:8D:ED:E4:0E:81:8B:A5:B4:44:81:0E:A6:39:AF
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 019A29673AF0F004DD3ADD15AF4401941A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 135B
Signing time: Tue 28 Oct 2025 06:00:22 +0000
Manifest this update: Tue 28 Oct 2025 06:00:22 +0000
Manifest next update: Wed 29 Oct 2025 06:00:22 +0000
Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=)
2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: Twbte0RV8rr9283EDqSRncjS04Sk/+oZ6oGjgs0Phwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:3a:f0:f0:04:dd:3a:dd:15:af:44:01:94:1a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Oct 28 06:00:22 2025 GMT
Not After : Oct 29 06:00:22 2025 GMT
Subject: CN=2c782297f2a38dede40e818ba5b444810ea639af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:7e:11:14:2a:ca:43:ca:2e:1f:e3:87:57:
e2:76:34:06:a5:1c:49:d5:c4:4e:d9:da:3f:33:4e:
5d:4c:d3:fc:5d:5a:0d:33:7b:bc:81:ad:8a:e9:02:
bd:fa:97:9f:53:b9:36:59:13:5e:58:d0:4d:c6:74:
48:1e:6d:37:bb:4a:29:4f:ee:58:ce:2d:84:0d:21:
5c:64:5c:ac:5d:6d:62:c3:7f:43:c5:02:53:19:09:
b4:cb:df:93:46:e7:17:fa:75:63:c2:8d:f6:c4:d6:
97:87:99:63:35:98:4d:68:a7:31:c1:be:f9:8a:97:
8f:8b:d8:39:c2:ae:bc:17:5b:e6:44:d3:df:89:73:
18:8d:e4:0f:1f:47:77:30:1b:57:d7:b8:ca:97:1d:
a2:c5:54:e7:35:98:8f:ae:e6:d4:d4:d5:14:9b:fa:
b4:5d:52:5f:18:fd:26:7e:61:fe:33:94:53:70:29:
c7:59:f4:95:50:f4:f3:a1:62:34:4b:dc:90:8a:f1:
b9:a1:0e:81:a1:00:ab:18:a6:c7:6c:0a:57:6b:f2:
f1:af:03:8e:98:c9:f8:b4:98:18:cb:34:bb:a9:1c:
23:fd:71:91:d5:25:21:a1:b3:01:3b:97:8d:2e:21:
0c:cb:f4:4c:08:49:22:7f:ab:93:b8:e5:7d:1e:46:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:78:22:97:F2:A3:8D:ED:E4:0E:81:8B:A5:B4:44:81:0E:A6:39:AF
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:b3:af:40:2a:87:83:48:bf:5f:28:37:83:02:3e:75:3d:
08:16:4d:b1:8f:68:cc:5a:f8:76:84:32:d8:5b:cf:cd:0e:d3:
e0:90:a4:af:d8:a8:80:b4:5f:2f:7b:ff:7b:b9:ef:91:23:4c:
a3:50:5a:11:06:04:c4:48:3a:b4:5a:55:ab:36:af:b4:3f:74:
8f:d3:a3:56:78:61:dd:99:66:01:8f:76:67:98:62:41:95:2e:
68:1e:ae:0e:bb:e1:5e:77:14:26:18:52:cf:0d:29:88:80:78:
d0:10:41:3f:f8:1a:b3:34:ec:2d:a7:a6:0b:53:7b:1b:18:1a:
89:8b:24:ed:be:67:62:1a:12:5f:2b:61:3e:30:7e:6e:8e:5b:
7f:48:77:5a:0d:dc:f0:f9:56:21:e2:cb:5e:e1:71:35:9f:51:
fd:5e:53:a0:26:8b:55:00:67:df:50:de:cc:17:40:7e:2a:91:
ec:1a:92:ec:12:7b:9a:ce:37:9e:86:96:06:07:48:37:2d:b1:
58:5e:5b:e1:4f:a0:4c:bd:c2:97:a2:9d:06:c0:b3:5d:28:d6:
a2:e7:2b:6f:d3:5e:7b:9e:a0:87:5a:fe:b9:d7:76:7c:f0:47:
63:fc:80:97:31:4c:d8:43:21:06:df:c2:75:9f:b7:7c:f8:91:
94:e1:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:12:14 2025 by rpki-client