Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json)
Hash identifier: XblNxrcSH1jKPctHrR5rwMkr0X7oGJedT4aOofukHaw=
Subject key identifier: 15:AF:71:4B:15:71:47:5F:AF:86:2E:04:3F:91:38:F8:9D:61:8F:18
Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Certificate serial: 019A7112BD98D0A0482736F61906A3CBC52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
Manifest number: 0E06
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=)
2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: /vE6wu3MP6B8kp5BvfgZqiJ7GI5Z3ODqQLO43pmIv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bd:98:d0:a0:48:27:36:f6:19:06:a3:cb:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=15af714b1571475faf862e043f9138f89d618f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:1e:19:f6:90:35:17:eb:e5:9c:75:6e:cc:
f0:6f:0e:2a:bc:84:82:ef:9c:4e:1f:3d:65:3b:bf:
23:04:73:27:bd:74:db:a2:54:08:4d:96:3f:5e:f5:
c7:92:41:16:a6:12:d6:09:fd:65:1f:48:d1:b1:2c:
fb:56:05:a8:67:02:b7:8f:b0:7d:e0:e7:78:a3:1c:
00:c0:e8:63:15:a0:5a:63:50:8e:04:0a:54:b2:69:
18:71:03:98:db:96:5c:7a:8f:ea:c6:1e:78:d8:cf:
dd:ae:85:4c:35:0a:c1:6d:b7:f0:5a:91:2c:17:41:
3c:d1:77:ae:07:9c:33:f4:62:dd:ce:6f:88:1b:1b:
95:4d:f4:c1:f9:91:e9:f4:c8:e0:ab:29:02:54:d6:
02:ac:57:24:3f:89:f7:32:8e:0f:21:9c:75:b8:56:
29:49:67:96:d5:81:53:34:23:46:82:6c:c6:8b:2c:
16:87:ba:31:1d:e6:50:ca:18:4c:82:87:f2:ac:7e:
b0:3c:e8:2f:cc:05:58:5a:20:ad:42:eb:7a:a0:79:
1d:92:b0:e5:1d:dd:52:fb:cb:59:bf:83:c0:06:a4:
fd:71:00:18:4a:9b:0f:58:00:22:eb:7a:4e:3b:48:
50:0c:b9:3a:b5:b8:cd:81:ac:4c:42:31:05:05:15:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AF:71:4B:15:71:47:5F:AF:86:2E:04:3F:91:38:F8:9D:61:8F:18
X509v3 Authority Key Identifier:
keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7c:32:81:0a:eb:5d:03:78:f0:dc:b8:fb:2a:0d:e9:cf:15:
a7:7e:c6:30:d9:99:41:bb:10:29:f8:9c:3d:2b:2c:8d:ad:31:
73:b3:15:b6:f2:05:06:ac:44:2b:8b:00:62:ad:21:a1:13:72:
29:e3:e8:bc:6f:ee:da:a6:2e:82:26:19:00:9a:e8:e9:b0:83:
7d:b8:e8:44:aa:42:35:41:ae:fa:65:2c:a3:bb:1c:dc:54:f8:
e4:f5:2f:7c:13:75:94:5b:5c:1e:5c:1c:f3:5e:43:36:a3:6e:
0c:75:b1:16:24:ff:b3:dc:52:8a:b6:b5:08:7f:6b:88:9a:e2:
4a:c9:24:4e:5c:fa:59:91:4e:71:52:c7:57:c6:1c:09:b7:ed:
ca:81:5a:c1:98:ea:43:93:fa:93:35:3e:f6:8f:56:8a:f4:c8:
51:aa:1f:b2:ad:4b:31:dd:9c:38:2f:9b:c4:e1:17:10:53:10:
7b:18:8e:c9:2b:41:93:b5:f2:3b:b5:d4:34:69:01:b9:47:54:
51:40:cd:55:0e:0c:57:a6:a0:1d:d0:00:cd:35:4d:7b:b0:1e:
3a:98:b2:dc:c7:08:93:0e:84:4c:2f:e3:86:d9:a9:fa:d3:dd:
d8:60:19:18:6f:5d:40:d1:c4:79:ac:0e:b6:b0:2c:05:75:fb:
13:33:9c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:48 2025 by rpki-client