Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File: xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier: 6zkpUQCG+BGNbzevAY7a7+bEkZvCXUVQ/Cp4etEAWoY=
Subject key identifier: 0B:72:3C:CE:4F:92:F1:C7:B8:25:97:30:A0:DA:28:65:7A:DD:24:36
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer: /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial: 019A2C682BF9C057DDAE268B19BD3683F347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number: 145E
Signing time: Tue 28 Oct 2025 20:00:15 +0000
Manifest this update: Tue 28 Oct 2025 20:00:15 +0000
Manifest next update: Wed 29 Oct 2025 20:00:15 +0000
Files and hashes: 1: nB0wD2NbLIcgL4wuuaNReH2xdaw.roa (hash: PmwRmIsMv3KSkKaHz3D8VpJ1Kt0x35JTg65eBK0T3+k=)
2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: z3doR2ijghB/aBlo/mLoA/u9L2Jxo2KnKnAx6GQZ6yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:68:2b:f9:c0:57:dd:ae:26:8b:19:bd:36:83:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
Validity
Not Before: Oct 28 20:00:15 2025 GMT
Not After : Oct 29 20:00:15 2025 GMT
Subject: CN=0b723cce4f92f1c7b8259730a0da28657add2436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:db:4f:08:7d:31:dc:c7:ae:5e:f0:a0:8c:
93:17:c7:fb:37:9b:0c:b4:5c:97:45:87:4d:fe:02:
05:43:d3:4f:47:43:c2:68:e9:36:7e:e0:78:91:5f:
32:75:07:01:cb:9c:3a:cd:64:0c:fd:0d:11:48:5e:
4d:ba:4b:92:eb:68:62:0f:af:a2:57:89:e6:e2:51:
f8:7a:b9:e1:d8:50:13:4b:5d:04:44:39:96:9e:e1:
4f:f8:45:5c:36:b6:f1:65:27:ec:76:50:9e:b5:77:
21:fb:f1:f8:bf:3d:24:9d:31:5e:d4:c5:b3:8e:31:
e5:08:13:d9:32:1c:b5:ad:74:bb:7e:41:ce:55:e6:
b8:87:be:21:72:3f:f9:45:76:71:70:41:0e:40:e0:
47:94:76:ad:88:85:43:ce:f8:d5:76:01:e5:71:aa:
84:73:89:f8:22:1b:23:47:39:9e:9d:f4:02:db:83:
78:65:e3:80:02:a2:5e:86:b0:76:65:54:fa:09:75:
0d:93:0c:26:3e:fc:a3:fc:b6:f5:5c:31:08:3f:8a:
e2:ab:3a:93:48:71:6f:84:95:de:8d:1d:ea:77:6e:
29:01:d0:b7:ff:21:91:1a:48:7c:3d:ba:d5:ca:0f:
12:cc:2c:46:01:97:e1:e7:a3:74:b3:f5:e2:5f:ce:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:3C:CE:4F:92:F1:C7:B8:25:97:30:A0:DA:28:65:7A:DD:24:36
X509v3 Authority Key Identifier:
keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:46:6b:6c:b1:fd:32:97:ce:0f:64:b1:08:5e:f6:2c:40:63:
c1:8c:c7:7b:23:f3:99:9e:26:b2:f5:39:4d:9e:07:5b:d7:06:
82:cb:73:85:81:75:40:f9:c7:64:bd:b6:04:fd:81:30:cd:5a:
f4:39:da:7c:3c:39:21:31:e0:4d:c2:c4:c0:fa:12:da:91:7d:
33:4c:c1:de:cf:8d:07:c4:75:60:72:bb:46:70:8d:d0:7d:e6:
09:be:63:43:5d:04:2c:0a:cd:75:40:86:1f:52:47:87:cf:30:
01:55:e6:75:bc:3e:89:87:b4:2e:a2:70:b1:bc:79:7d:3b:29:
5c:08:ec:cc:54:0d:5e:11:45:5e:ac:39:a0:0e:a8:c4:c8:76:
72:dc:8d:02:6c:13:a9:4a:0a:e5:1f:15:80:20:41:70:41:1f:
c5:ff:e8:99:b3:1a:57:20:7a:5c:25:e3:f0:4d:68:39:90:dd:
62:90:17:e4:6e:8a:68:3c:b8:36:4d:9f:a2:dd:ba:a7:0f:ec:
fd:e6:3f:78:ce:4e:06:82:75:e0:7d:d5:d3:f6:ba:11:43:8c:
3c:86:e4:6d:37:f6:3e:76:5f:a2:ba:f9:9d:da:7d:39:2a:40:
62:44:1e:c5:bf:1f:9d:bf:83:8f:f5:de:5b:0a:c6:d4:b5:e9:
a2:7c:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:12:10 2025 by rpki-client