Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: vV5Kwr/yBmQUMmzFYCm3lp5q3TfKWZWe8s0lRRxbLv8=
Subject key identifier: AF:B5:00:7F:FC:E4:5A:B5:56:B7:93:36:71:C7:24:D2:BE:E1:66:3F
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019A725C598D453ECB2260DBD56CF7248D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0C08
Signing time: Tue 11 Nov 2025 10:00:46 +0000
Manifest this update: Tue 11 Nov 2025 10:00:46 +0000
Manifest next update: Wed 12 Nov 2025 10:00:46 +0000
Files and hashes: 1: 06tgDhMET5PEFJxe6WB-BV1M_gE.roa (hash: mCqrz6qmS27RhPQU4uNyx6aFC+5GW4aIzmbKH5kTy4E=)
2: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (hash: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=)
3: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: ZTnFIMzlLFkpqar6A/i7a2ODMpE0zJPBtb4ix39sxtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:59:8d:45:3e:cb:22:60:db:d5:6c:f7:24:8d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Nov 11 10:00:46 2025 GMT
Not After : Nov 12 10:00:46 2025 GMT
Subject: CN=afb5007ffce45ab556b7933671c724d2bee1663f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:78:4a:db:b3:c5:fb:de:6a:0a:51:e1:14:
70:69:6a:06:ed:d2:55:16:1a:93:cc:e4:4f:33:75:
2e:4b:48:e2:28:d8:5e:e0:91:34:98:22:71:f5:04:
84:79:24:32:a6:1c:da:58:68:7a:aa:22:f8:eb:45:
91:93:5d:07:14:6f:fb:a4:2e:76:6f:86:89:06:7d:
3a:78:1e:32:6e:53:ea:4b:08:f3:3b:85:2c:39:2f:
cf:49:09:04:17:16:d2:ac:44:e0:61:69:ce:b8:ca:
b1:db:be:ff:cd:d7:dd:89:09:db:4e:a0:02:ae:2e:
00:7b:b3:c8:f1:34:1c:83:d8:7a:f5:59:b5:e9:cd:
c5:16:06:12:ae:40:a1:74:4b:77:0b:ab:cb:df:10:
23:01:2c:60:5f:9a:a7:26:49:8c:bf:32:17:60:3b:
86:ea:52:da:59:03:7e:cc:ac:0d:85:08:60:1e:4e:
c6:e6:08:05:99:99:b6:d4:1e:42:7f:20:03:bd:06:
ad:60:43:20:21:9d:42:64:97:7f:6f:50:59:ef:8b:
ce:bb:de:6d:f0:b0:ac:4e:05:50:2a:c4:30:dd:6b:
df:c7:26:cd:c5:58:b1:e4:c8:b6:66:7b:4c:4d:fd:
de:0a:31:59:22:70:9a:84:11:9c:3c:78:23:7f:ed:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B5:00:7F:FC:E4:5A:B5:56:B7:93:36:71:C7:24:D2:BE:E1:66:3F
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f7:78:6a:64:49:db:d5:18:0f:a2:5b:f1:b4:51:0c:ca:7b:
b5:c5:42:c0:96:7d:28:38:54:d0:e1:cc:3d:bf:05:50:a4:44:
12:73:62:eb:be:44:26:61:fe:d5:46:b7:a1:26:4c:5a:07:4d:
24:69:bd:94:5d:57:7d:1e:a7:48:c3:48:c8:f8:db:38:d7:eb:
be:c7:34:14:c1:63:36:02:ec:72:2d:56:5e:c3:06:0c:e2:06:
79:5f:07:d1:68:04:34:c6:57:5a:34:90:27:f6:a1:9d:19:a8:
b5:fc:3d:29:93:eb:e9:0b:0a:42:99:cd:ed:25:aa:e6:e2:a2:
b2:4a:91:c1:3b:a1:c4:85:28:18:7c:41:dc:e1:cc:0b:d5:72:
3a:c5:2e:b4:15:44:9c:b8:e3:d0:53:96:bf:16:17:f4:ac:48:
e3:f4:dc:a3:33:f0:5f:1c:e1:92:b0:36:d2:a9:d4:13:fd:80:
08:e5:88:52:25:af:86:b1:e7:bb:98:a5:ba:ed:d3:65:fd:de:
bd:35:9a:e7:c5:fb:fc:56:ad:20:53:e4:ad:1b:8c:df:82:ae:
cb:46:5c:23:a1:08:95:e0:34:10:92:53:44:89:f9:74:1f:4f:
e2:a3:7b:5e:c3:95:8e:6e:a8:f2:fe:96:f9:c6:63:b6:66:21:
e8:c4:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:48 2025 by rpki-client