Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: YjreLj4WbI3odHDHTP1HwZk7+DWjMkypGN95ltARCzA=
Subject key identifier: B4:24:00:81:BF:5F:BB:42:93:3E:D3:AB:1F:FF:2E:2E:90:2E:E3:76
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019A2409CECB175F2714021507C0A206510F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 02C5
Signing time: Mon 27 Oct 2025 05:00:13 +0000
Manifest this update: Mon 27 Oct 2025 05:00:13 +0000
Manifest next update: Tue 28 Oct 2025 05:00:13 +0000
Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: GWKk+EJ6wviP9HxqeKZd1ZMm+wlpyqCUIxwNCsci4Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:ce:cb:17:5f:27:14:02:15:07:c0:a2:06:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Oct 27 05:00:13 2025 GMT
Not After : Oct 28 05:00:13 2025 GMT
Subject: CN=b4240081bf5fbb42933ed3ab1fff2e2e902ee376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:31:d5:30:3c:e9:01:29:e3:fa:25:d6:e6:
ce:4e:d8:96:37:b7:20:7d:c5:65:b6:79:1b:ef:19:
cd:57:00:ae:59:cb:5b:82:af:99:a7:72:63:1f:3c:
05:11:60:2a:d3:5e:39:1d:d4:c2:d6:74:ce:72:1e:
7b:a1:a8:2a:bc:15:94:cf:b0:be:31:3c:31:8f:07:
d4:8f:d1:e1:ea:01:33:ca:dc:8b:fa:31:95:55:47:
43:b3:57:32:05:94:ff:45:6d:29:74:20:6a:a5:b1:
c4:55:33:6a:8d:99:a3:e5:c2:ef:1b:67:69:e0:ee:
b0:ec:4f:b5:ad:20:c4:73:79:76:8a:99:9d:51:3c:
a7:09:8b:7f:fa:11:b0:39:12:46:c2:b8:c0:db:32:
ef:d9:a7:c6:ae:33:c8:9c:c5:cd:f6:26:a4:2f:a6:
a7:50:4a:a8:57:91:f5:62:ad:3e:c4:06:3e:6f:c5:
de:59:81:3d:95:dc:e1:27:54:04:50:a1:f2:9c:6b:
40:c5:b0:da:22:45:73:da:d7:3f:3f:db:3d:26:41:
9f:4a:be:fe:79:aa:72:bb:6d:f9:c3:eb:55:29:54:
d2:ae:0e:f0:a5:87:16:eb:aa:69:23:37:1d:db:c2:
51:c2:09:4f:a7:54:0d:7c:43:30:c2:32:7e:b1:52:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:24:00:81:BF:5F:BB:42:93:3E:D3:AB:1F:FF:2E:2E:90:2E:E3:76
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:59:3f:57:63:68:50:79:bc:e8:26:b5:ee:a0:3a:43:07:3f:
9d:2a:b8:1e:00:4b:8f:57:ba:8d:58:e6:80:46:ff:62:53:17:
fc:f5:d7:30:71:37:c6:41:90:4a:3e:53:5e:df:dd:62:a0:2c:
9d:1a:2b:83:c1:79:28:38:4c:6c:64:ca:de:f1:74:b0:ec:c4:
22:5c:b8:72:21:9d:a4:27:cd:97:bf:69:22:99:e1:da:6f:f1:
3a:c7:3a:68:27:80:a1:37:7c:c7:bc:9b:cf:4c:64:10:23:62:
7e:df:b4:3b:38:64:4c:65:79:3d:45:61:3d:f8:2e:12:08:7c:
d9:37:1e:2e:90:af:ec:77:db:b3:36:eb:0b:28:05:90:da:27:
6c:46:e8:ab:1b:2a:49:0d:02:4d:0b:87:8d:2a:52:e2:5c:05:
76:50:60:5e:44:d3:98:45:e1:fc:2e:10:da:68:50:d7:8b:7f:
32:3e:c7:49:a7:f6:f4:35:fe:81:31:29:8f:17:8e:74:28:44:
e9:bf:11:1b:58:15:a1:f3:5d:f5:b2:7f:01:8b:25:7f:59:4f:
c0:d8:ed:d8:4f:73:29:dd:70:36:90:f0:b8:f1:b6:86:b2:1b:
6e:bc:b1:c2:73:c0:da:15:f0:25:1d:86:ad:a6:6d:3d:0b:e6:
44:0e:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:23:36 2025 by rpki-client