Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: FXdVTPSF1sfDN40qTzu8MJcCZlIyo2dekvP/Pj15Q90=
Subject key identifier: E3:28:18:A9:69:44:0F:9B:F7:70:AF:FB:57:A8:C5:DD:A2:2F:17:EC
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 019A71B7D2BADEE7F1D212B19D51B59D4B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0D29
Signing time: Tue 11 Nov 2025 07:01:03 +0000
Manifest this update: Tue 11 Nov 2025 07:01:03 +0000
Manifest next update: Wed 12 Nov 2025 07:01:03 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: elosK16mIMg3jr+KmYt9nv6kS3bCLiQprSmHy8JpRFA=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d2:ba:de:e7:f1:d2:12:b1:9d:51:b5:9d:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Nov 11 07:01:03 2025 GMT
Not After : Nov 12 07:01:03 2025 GMT
Subject: CN=e32818a969440f9bf770affb57a8c5dda22f17ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a6:3f:8e:d7:e0:75:74:42:1b:d1:4f:65:0a:
49:c8:e5:b2:38:92:91:d9:e8:11:88:0d:a3:f0:9a:
1b:50:63:00:c5:4c:44:52:94:99:55:45:6b:9b:05:
34:8f:a0:16:81:46:d6:d5:05:d5:93:5d:d2:cb:d8:
f2:e9:b8:5f:20:53:4b:5f:ed:05:b5:36:21:ab:5b:
6e:58:49:82:b6:6f:ec:c7:f6:a0:1b:98:34:ff:cf:
b3:4a:88:bf:b0:59:58:67:ac:cc:3b:8e:bf:97:b1:
0d:c9:60:db:6a:c8:1d:8f:cd:1c:85:2b:fd:2f:32:
18:46:54:24:35:4e:24:ba:e5:17:a7:a8:f5:31:4d:
eb:50:c4:68:c5:1a:32:df:3a:3e:e1:a0:6a:74:18:
74:e8:22:d3:91:cd:65:04:ff:3f:fe:df:d3:81:10:
cc:c8:30:f8:de:ec:8e:00:a4:8c:4c:3c:87:6a:c5:
e4:f9:48:10:4f:a6:23:30:04:cd:d4:c0:d9:1a:d9:
9f:a3:27:57:0a:cf:dc:75:36:cf:76:16:8d:d9:99:
36:f0:d6:28:0f:a5:73:3f:0f:0b:dc:28:84:c9:9b:
41:d6:10:5f:bf:9d:bd:ea:53:dc:7a:52:fb:46:9e:
9f:a1:0d:dc:aa:65:78:6b:b1:41:c2:ce:51:fd:cd:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:18:A9:69:44:0F:9B:F7:70:AF:FB:57:A8:C5:DD:A2:2F:17:EC
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:db:e0:84:e4:24:c7:c5:69:84:a4:58:9e:ea:21:2c:53:13:
6e:1d:30:30:81:46:81:46:95:e6:6d:46:e1:2e:4d:b7:b9:e3:
7b:27:25:ab:67:81:f5:06:b8:29:a9:f9:43:32:a5:f9:fc:c8:
f4:c4:9e:57:16:68:62:93:0d:6c:8b:3d:5c:56:80:2f:d8:ca:
94:c4:65:94:22:fe:20:ba:9d:e0:7d:24:7a:1a:01:f3:64:81:
70:57:48:5e:cc:ed:5e:8f:26:03:97:c6:87:4f:08:c5:45:a7:
e4:61:87:29:f4:72:db:ba:e4:57:49:04:ad:84:11:92:27:a2:
1f:a9:45:8e:d5:5a:6b:aa:08:8d:d2:72:aa:fe:59:91:40:68:
bf:e3:bf:10:c0:10:2f:f4:4c:c9:f4:91:2f:ef:0f:e2:e7:b8:
06:3b:d7:d2:84:2c:61:43:84:b1:26:38:33:f1:53:1a:ae:d1:
bd:b8:5e:3e:1b:41:1f:b3:29:20:79:4a:40:b9:bc:a9:05:30:
7f:81:b6:38:2a:05:26:d7:30:b6:d9:b2:b2:fa:bd:0c:7e:2b:
a3:15:1e:ee:98:a0:59:36:99:8b:29:24:79:1f:0e:08:98:c8:
40:3a:3a:32:c2:64:cc:d1:72:d7:c4:89:7d:2d:6b:8d:bd:51:
10:b4:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:17 2025 by rpki-client