Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: oTAlotvzgY9o6Tsj90pgwaXxkgfKKR/cwOp5KfxsU/g=
Subject key identifier: D8:A4:C9:FD:C8:3F:AE:5C:3B:5F:A2:3A:9C:71:A9:DB:43:D3:E4:82
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 019A72938D59C83B135F4166B85AC14E37AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 06E0
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=)
2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=)
3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: NECALivhF0EiS0CMRII4nupDnA1z3FQFmDANpZ73aqg=)
4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=)
5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8d:59:c8:3b:13:5f:41:66:b8:5a:c1:4e:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=d8a4c9fdc83fae5c3b5fa23a9c71a9db43d3e482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:47:ee:ca:fd:b7:d2:9d:3e:06:96:e7:4a:
ce:01:0c:9d:57:16:1f:26:b0:55:2f:e7:75:77:b0:
67:ac:e3:22:58:3e:d5:8f:4d:a0:8c:97:32:d8:f6:
3a:12:13:63:6e:a8:07:83:cd:97:b0:e9:e9:09:57:
48:a0:34:6b:a8:83:42:95:68:ea:b9:8e:5d:d9:b7:
27:fd:dc:d4:09:eb:fd:c5:32:6a:cc:d4:ea:4f:5c:
12:b5:6a:2c:d0:f5:ca:69:df:54:8a:c9:90:20:41:
f8:13:60:0f:60:12:65:7d:d1:7e:2d:9e:11:fa:5f:
88:0b:e4:a4:9b:09:7d:2f:85:be:4b:df:cd:92:59:
0c:41:a9:e0:7f:65:ff:00:72:a6:9e:64:0c:27:93:
cf:32:c8:70:6e:af:e2:5b:0a:69:5b:45:00:61:74:
91:91:13:bf:5b:fe:a8:a3:45:d9:c9:77:03:a8:0e:
a7:79:5f:40:dd:71:ff:35:6a:05:3f:0b:c8:82:92:
56:1a:e4:51:bc:55:6a:6f:0a:5c:7f:b1:eb:26:bb:
b4:9b:76:62:cb:6a:54:f9:fd:f8:1c:ae:b4:73:66:
a4:82:36:a0:44:26:31:9a:4e:38:73:53:48:1a:0b:
7d:c0:98:da:bd:6e:cc:64:50:fe:72:eb:86:ef:68:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:C9:FD:C8:3F:AE:5C:3B:5F:A2:3A:9C:71:A9:DB:43:D3:E4:82
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:ee:f3:32:3a:5d:2f:86:21:6f:65:bb:d2:dd:9f:6d:04:
fe:5a:81:88:7d:83:f4:db:19:f7:2b:f9:79:cb:1c:c2:7c:eb:
a4:92:2a:dd:85:a6:48:83:89:3b:dc:26:97:19:c8:f3:ce:74:
b8:c5:a0:bd:ad:e8:7c:7e:0a:e5:7e:f6:ca:bf:76:54:75:1d:
0f:01:8f:4f:a4:cd:50:de:b3:34:5d:f5:15:93:86:6c:f8:11:
62:86:e7:a8:e4:74:9b:b2:d5:a9:de:14:6c:ac:60:bf:02:22:
7b:84:80:d0:f1:ae:e7:5a:93:e2:23:4f:9e:61:6a:a0:0e:c1:
bc:f4:d2:f9:ad:1c:73:e3:19:55:2d:2f:ab:65:47:60:81:bd:
54:21:70:9e:0a:93:da:81:c0:04:2b:9d:9d:f0:e4:c6:cc:8c:
d1:b5:c8:90:93:8d:3b:36:af:3c:2b:cf:17:fc:cc:b7:cd:dc:
ff:2d:0b:4d:cc:60:91:1b:db:7d:49:ed:20:20:5e:84:50:2e:
55:ef:f7:5a:0a:ec:61:d9:3f:cf:7d:87:e9:2b:a6:fe:a6:4d:
48:cf:94:fe:68:10:76:26:00:cb:ff:4b:a9:0c:52:17:37:8c:
7a:ba:72:43:90:fb:ab:6a:aa:3b:af:b8:94:71:9a:2f:b6:e9:
af:d0:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client