Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: khA3zwAxTujjUYOBe7dgUjwSIYFrc8zdDAPLcZCPZqI=
Subject key identifier: 9D:20:9C:49:A0:61:C6:46:45:AA:C6:BB:61:B0:DF:49:B9:C7:C8:AB
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019A2E1FA2A101636D5C80661D85F3A85AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 05F1
Signing time: Wed 29 Oct 2025 04:00:16 +0000
Manifest this update: Wed 29 Oct 2025 04:00:16 +0000
Manifest next update: Thu 30 Oct 2025 04:00:16 +0000
Files and hashes: 1: 9tEl5jFrNSXsCYofc7NSx1FP1cI.roa (hash: 6vzM759erZPF8I3ZTPpySL3vdchhdENpuyLGkTDqiA0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: ZjQ53BZslHv4GTTbEPEYe8NYjfK0aChE5ABmRS6UAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:1f:a2:a1:01:63:6d:5c:80:66:1d:85:f3:a8:5a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Oct 29 04:00:16 2025 GMT
Not After : Oct 30 04:00:16 2025 GMT
Subject: CN=9d209c49a061c64645aac6bb61b0df49b9c7c8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:d1:04:0c:77:66:52:4b:d8:ba:fc:d6:32:
9c:0a:f6:13:40:bb:bc:68:9e:e5:26:7e:58:44:97:
b7:14:d7:9c:fd:aa:e1:7d:fe:12:b7:3a:ee:91:9d:
c5:ea:72:1a:67:42:68:b0:e2:20:69:a5:e0:c8:82:
40:5e:7f:e5:df:cc:fc:76:d3:dc:fd:9b:a6:7f:dd:
f7:2a:30:9e:c5:51:58:01:b8:20:23:fb:70:2a:fb:
90:88:2e:20:23:0f:d6:15:69:46:fc:6e:32:3e:12:
76:56:a0:b7:5d:43:fb:04:4d:d2:e2:af:e7:b1:58:
25:7a:a9:cd:54:7c:12:84:09:c3:41:69:0e:f6:b9:
87:47:2e:96:51:44:95:17:7f:94:b0:3e:99:6d:b5:
81:0d:a7:56:ed:22:b2:c7:16:7d:0b:0e:b0:cc:f3:
15:58:76:0b:72:72:cd:b4:3b:01:e3:12:4a:13:91:
9f:72:f5:bf:ef:c0:3a:bb:f0:c1:93:1a:ad:fb:13:
a2:e7:44:7e:f6:0c:f8:c3:b4:a1:80:8d:e4:9a:8d:
fd:9c:cf:41:9e:ad:38:c4:20:6a:44:be:6c:04:c0:
1e:e8:b5:05:7e:89:51:45:f6:cd:eb:c0:cd:d1:38:
5b:51:b0:c4:36:9f:c3:b8:d2:9f:2d:88:31:39:24:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:9C:49:A0:61:C6:46:45:AA:C6:BB:61:B0:DF:49:B9:C7:C8:AB
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:4d:9f:4c:4f:78:3f:77:ea:c1:6e:11:f4:57:5e:05:a3:
5d:4f:d1:3b:bf:ab:98:81:26:b9:22:dd:31:c6:96:60:07:11:
11:54:29:83:8a:b2:bd:8b:c4:f6:45:76:4d:30:0b:0a:e6:11:
9e:14:da:e6:2e:ce:26:c0:57:ef:94:5a:bf:e4:f5:00:27:85:
c9:8d:80:c6:1b:70:fc:41:a4:e6:37:e8:ba:3b:e3:92:ca:e4:
61:69:89:66:36:a1:bb:0d:22:d3:0c:f5:71:93:94:0d:ad:40:
da:c9:03:55:3b:69:60:eb:68:07:43:5f:a3:de:45:7c:a5:a3:
f3:62:fa:cf:4c:b9:f6:47:c0:e7:46:c6:88:29:31:7e:17:ab:
27:c2:e7:78:77:d8:e0:dc:bf:75:79:85:76:14:cc:0d:10:b7:
20:54:0d:e7:29:0e:0b:15:09:a1:f2:54:f7:18:c2:50:a6:af:
83:78:71:fd:b6:07:91:da:70:ab:a9:2a:41:c2:b1:4d:d1:af:
c4:be:80:57:15:7b:de:9f:50:e6:88:5e:e6:ce:4c:d4:60:fc:
f2:53:a8:62:25:50:06:d9:d7:3f:df:1f:98:f1:16:d3:dc:66:
7b:5b:ed:45:08:5f:c3:10:6a:0e:79:06:50:67:4a:05:34:4f:
8b:56:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:50:28 2025 by rpki-client