Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json)
Hash identifier: l2yd2weY2TZRdqTRevGsH6vDYt8gV/mAFmEN5PbsKJ4=
Subject key identifier: 4F:BF:0F:F4:92:93:B9:1A:54:F1:7C:2E:05:BC:54:57:76:33:2D:77
Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Certificate serial: 019A1128C09BF8466F8396A39D18DECC7393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
Manifest number: 049D
Signing time: Thu 23 Oct 2025 13:01:14 +0000
Manifest this update: Thu 23 Oct 2025 13:01:14 +0000
Manifest next update: Fri 24 Oct 2025 13:01:14 +0000
Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: lqNE967pFAXxabbRUA6dUbOW8ML31kf3DN1LGi8DL4I=)
2: Zalmb79lgnJ8ZqrgJMNHmIB0_a8.roa (hash: qT5QBRK21+1uxjdCx9gW03qYws/IDIrgYu8jrzg9fD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:28:c0:9b:f8:46:6f:83:96:a3:9d:18:de:cc:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf
Validity
Not Before: Oct 23 13:01:14 2025 GMT
Not After : Oct 24 13:01:14 2025 GMT
Subject: CN=4fbf0ff49293b91a54f17c2e05bc545776332d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:14:9f:a9:df:3b:fb:66:11:15:b2:85:25:
56:55:af:29:cb:2c:89:a3:d1:27:d2:1c:93:8f:ee:
45:d3:3b:c6:96:f8:fa:57:92:2f:dc:9b:3c:9f:ab:
b7:20:79:80:8a:7b:7f:fe:d5:37:37:fe:9d:53:0f:
c3:e2:f1:4f:19:1c:81:d1:3a:80:64:56:ad:85:21:
a7:2f:04:1f:cb:3a:70:fe:8c:00:d1:9e:ed:22:ed:
ec:7d:3e:d0:87:e3:8c:d8:b5:f1:ed:dc:55:2c:fa:
61:cd:29:da:33:96:09:55:9c:33:b6:7a:9e:08:47:
f3:a0:16:da:b7:af:f2:e4:fd:fc:3c:49:b4:e5:88:
16:00:5a:48:0c:a1:7c:e7:2f:8b:ff:0c:53:5d:2d:
5e:09:4d:1d:4a:16:c1:21:ae:7a:ba:3d:01:ca:4f:
e9:4b:c4:2b:a5:a0:38:c8:b5:cb:90:b8:ab:ce:de:
57:0e:7a:8f:3e:cc:ef:00:66:9a:13:e1:bb:46:12:
82:c1:a7:a2:b2:de:1b:33:fc:d8:e1:55:4b:60:38:
07:b2:7a:1c:ed:3a:7a:fd:33:07:d8:09:ba:94:1b:
3a:6b:f4:33:ef:ea:a7:20:d5:c8:e1:f7:fe:d0:b6:
96:4e:de:a4:3e:c2:d8:fc:85:a0:83:4c:a0:2c:9a:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BF:0F:F4:92:93:B9:1A:54:F1:7C:2E:05:BC:54:57:76:33:2D:77
X509v3 Authority Key Identifier:
keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ea:1b:88:99:72:fe:f5:5a:ab:6a:c8:a5:4a:c9:ea:0c:55:
5a:09:ce:a3:61:98:a5:92:e1:6c:cb:a5:6d:44:74:3b:fe:2a:
7a:b7:8d:64:31:6c:d3:5f:a4:0a:66:72:d6:04:8d:bd:56:cc:
b6:14:24:11:6d:72:af:49:38:6e:43:e7:6b:50:7b:24:14:71:
02:97:79:91:e9:a2:7e:0b:64:51:e9:d2:ce:b6:10:85:0d:dd:
fc:19:81:65:80:cf:b2:ca:3d:be:7b:7d:db:cc:f6:c3:33:d0:
a6:4b:cd:3b:c0:47:7a:87:28:71:0b:a2:ca:14:56:9e:9b:e2:
fc:7e:57:6e:ef:20:14:f3:38:74:64:a8:2b:1d:ea:61:de:23:
61:9f:73:95:2e:4e:ed:cd:cf:0b:6d:33:54:ab:64:45:59:9e:
58:2c:9d:a8:40:ff:2f:65:01:2d:2e:1f:6a:66:69:f5:59:37:
e3:2a:a1:39:cb:76:f9:6c:d5:1a:9d:06:e8:5e:93:b0:ac:ca:
80:b5:37:ba:d7:3e:f3:5a:41:94:e9:27:46:be:3e:65:b9:ef:
ca:88:01:8f:3e:0c:a1:c3:2c:6b:44:1e:15:f3:ef:ec:b2:d5:
ee:b5:a0:d4:97:69:43:4d:25:b0:25:34:ce:fd:08:c3:dc:34:
b6:bd:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:50:54 2025 by rpki-client