Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
File: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft (raw, json)
Hash identifier: 55bxZAbV7us/pY0PZskRBTXb4G/GOaeQFwwMdd9vZLY=
Subject key identifier: 2C:09:B8:CB:A0:C7:23:FB:E0:B4:68:A5:87:61:6D:44:A6:F8:24:28
Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Certificate serial: 019A07EE2D0E3B9EAE78338F5576D91569DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
Manifest number: 061D
Signing time: Tue 21 Oct 2025 18:00:40 +0000
Manifest this update: Tue 21 Oct 2025 18:00:40 +0000
Manifest next update: Wed 22 Oct 2025 18:00:40 +0000
Files and hashes: 1: SzmhUfWJuFhyT5TGLouRAgBLoIM.roa (hash: Qov0MeRXvHn6kZBTJQaoc48+Yw0xT2B5xVOV+b6Nifs=)
2: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl (hash: kqktjZv6g2ZvzZMMbeoTySnuBwr+2gw+MgiHVsuM1Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ee:2d:0e:3b:9e:ae:78:33:8f:55:76:d9:15:69:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074
Validity
Not Before: Oct 21 18:00:40 2025 GMT
Not After : Oct 22 18:00:40 2025 GMT
Subject: CN=2c09b8cba0c723fbe0b468a587616d44a6f82428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:a5:b9:b5:7d:89:3b:4a:0b:9f:15:46:16:
0a:c9:51:dc:74:f4:b0:19:6e:3d:8c:c3:6b:1e:71:
e5:6b:54:9e:62:3b:ef:dd:68:ab:31:6c:8f:40:8c:
09:00:15:0f:00:bb:bc:8c:56:c4:6c:af:e5:5b:37:
dd:bf:69:0f:68:12:91:39:e1:7e:42:eb:7b:49:10:
ee:3b:68:f7:88:16:fc:73:64:25:29:aa:8a:aa:e1:
a5:6e:1d:34:e3:8f:61:cd:d2:1d:91:fb:4c:c2:b5:
b6:4a:08:25:23:4e:4a:1c:73:8a:f2:81:fe:05:ba:
e2:ea:61:30:1c:e3:ec:85:b1:d6:23:2e:a5:f8:d5:
cd:ee:e0:f4:c4:d5:05:36:3e:24:68:30:e2:8d:a9:
7a:30:5e:58:c4:36:ad:c0:89:c9:f9:c9:9d:3a:c4:
de:85:3d:22:4e:4b:32:95:12:03:b5:34:48:e0:e9:
f1:21:bf:1b:21:1e:d8:6f:1d:ff:45:7d:4f:7c:84:
9a:9b:d3:3d:2c:aa:bb:a7:2a:35:2a:13:cc:88:45:
ae:ed:08:91:c0:70:22:9a:d6:63:22:9b:9b:10:19:
13:0e:f8:a3:ec:4d:ae:0c:73:ab:5e:c0:d1:81:67:
cc:c6:3a:90:0c:25:a7:e8:85:d6:dc:8c:95:64:61:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:B8:CB:A0:C7:23:FB:E0:B4:68:A5:87:61:6D:44:A6:F8:24:28
X509v3 Authority Key Identifier:
keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:ad:31:39:c5:13:07:52:37:68:79:19:f7:d9:71:ca:1c:
20:90:99:f0:d9:13:44:31:5a:0f:77:db:0c:a3:03:21:87:60:
bf:62:0f:35:e2:ec:c9:a2:db:68:5b:c8:9b:0c:c4:a9:2e:61:
22:84:28:a7:b6:82:bb:9c:5f:a2:2e:12:99:f6:94:ee:0e:e8:
f5:5f:08:2b:27:d8:0a:63:29:b2:e0:bf:74:1d:23:9d:f7:f8:
65:ba:68:5e:8c:a0:a9:01:dc:f2:9f:17:69:17:3d:ae:fe:1e:
66:d9:9c:cd:d3:c9:89:1d:d8:1a:d8:06:a9:32:a6:e0:a5:72:
18:3a:86:05:a4:11:3e:b5:1c:d2:fa:75:e7:c9:b3:09:0c:00:
44:d2:ad:23:63:69:b4:f5:18:5e:9a:f3:96:f2:f3:0d:b7:fd:
23:9c:42:61:c3:37:71:a5:54:1c:41:05:e5:48:25:d4:f8:af:
4b:61:d0:f1:be:b7:b2:9b:f3:16:45:c2:c6:9f:67:97:76:cf:
95:2a:12:71:43:95:6f:cf:41:17:24:a7:9d:d6:13:7e:b3:98:
ea:be:82:20:19:d5:ce:37:96:20:bb:23:3a:82:4a:77:8f:73:
ab:69:ea:a6:b2:76:51:78:6d:99:12:20:9f:15:be:d5:cd:f7:
6d:a3:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:38:49 2025 by rpki-client