Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: Ia+oPEEjMbiLOfAjTK38pBbpv1EIanMMogrDetwROJo=
Subject key identifier: 32:5C:55:6C:D6:7A:09:5C:B0:46:42:44:9C:56:64:BC:94:48:B0:22
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019A71EEEC5F6F1B48A6A1FFCFBA5E40876F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 0D4A
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=)
2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: Byu7ObDYuubPL8nzDEcAZkQPKifRLiUPzTGVqw9H0A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ec:5f:6f:1b:48:a6:a1:ff:cf:ba:5e:40:87:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=325c556cd67a095cb04642449c5664bc9448b022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:a8:3b:2c:e1:13:73:98:e0:a5:34:ca:f2:
e3:e2:a3:bd:54:28:60:4e:74:6b:70:80:38:9b:12:
3c:6a:a4:7f:21:bb:47:e6:bf:07:7b:71:f5:8f:ed:
d5:d2:16:b9:9a:9f:e4:79:b0:a5:aa:75:7e:5b:74:
03:11:7e:b0:ff:e4:d2:b4:aa:36:fb:4a:c8:ea:44:
9b:3a:3b:9c:84:e3:e7:3c:0a:50:ab:35:1b:7e:8c:
10:7f:a0:e8:86:90:9c:88:62:a4:eb:45:96:05:5c:
bf:f6:05:a9:a4:98:cb:50:d0:93:2c:ef:7e:53:2d:
e4:30:83:18:c5:99:89:1c:b8:cc:e3:bb:ff:b5:28:
da:01:4d:3f:fd:0f:31:6d:f7:2f:7c:e0:9c:03:84:
ad:81:be:eb:ca:7b:60:2c:51:08:c6:0d:bf:89:cc:
e7:0f:5c:67:7a:ea:91:14:07:32:d3:3b:91:5b:9f:
e8:94:50:24:fb:e0:e7:ec:db:0d:d1:ff:d0:4a:e5:
ae:26:75:81:aa:fa:20:b4:65:2f:b5:a2:35:e9:cd:
27:2e:6b:92:68:27:22:22:71:91:57:43:ce:1b:bb:
af:33:09:a7:21:0b:01:04:a0:2a:1c:12:02:28:6a:
cd:ad:79:e8:b6:81:71:1c:ff:ad:a6:3e:c1:71:70:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5C:55:6C:D6:7A:09:5C:B0:46:42:44:9C:56:64:BC:94:48:B0:22
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ee:de:06:d8:17:d7:37:9d:b2:58:cd:fc:49:d8:f1:0c:90:
e3:bd:ea:26:05:bc:77:45:90:73:74:a3:66:f0:34:a6:d6:05:
bb:bb:8c:2a:a7:d8:31:32:ff:53:56:74:2e:4a:2e:3a:8a:69:
70:a8:44:e6:b4:4e:29:30:15:a5:4f:5c:a6:d3:34:ff:3d:05:
6b:7b:7d:32:69:1a:02:0d:75:c8:e9:ff:72:75:ce:fd:83:66:
c5:89:c3:c9:9a:ba:91:43:9f:e7:55:06:ab:92:d2:08:76:61:
ea:2c:3a:b0:76:aa:e8:67:9b:2d:44:49:b7:06:af:70:dd:23:
08:04:b1:d0:ed:3b:00:ef:71:7f:6d:ef:46:0e:f8:04:69:8b:
b3:c3:81:38:22:f2:12:b0:3b:1a:9d:79:e3:5c:4d:c0:e5:7f:
aa:87:24:72:1d:ab:f7:68:35:b8:eb:c3:a6:fa:69:6e:70:c7:
ab:99:e8:49:94:4a:64:12:75:f5:69:dc:e1:27:4a:ce:16:42:
28:5e:66:7b:6d:2b:59:71:88:60:4f:e2:7d:00:d6:5f:6a:54:
ba:64:9a:3c:b1:bc:e7:20:f6:6f:10:a6:c7:04:14:2c:25:da:
69:08:a2:4a:dc:ad:7a:9c:0b:2a:f3:2b:f5:e4:c5:41:c1:1a:
ac:6e:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:31 2025 by rpki-client