Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
File: X3paFlsT13BshCWTR0SlIWYu5KQ.mft (raw, json)
Hash identifier: G8+j2tP2XbWlKHcpiqlECh/eNjiVYDd1qP0/wBhrIQY=
Subject key identifier: 36:7C:CA:99:86:FE:74:33:D1:29:B9:39:A7:18:43:82:0F:9C:00:BC
Authority key identifier: 5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
Certificate issuer: /CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Certificate serial: 019A71B898FBF44ACBCA613B905243C1BF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
Manifest number: 0326
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: Q5n-gsTTf7hg6eJkVUTk6kduwmw.roa (hash: J5MrFTnouOiXkCs/jmtFgO8v6FwPob+xp3uwbDL0SHE=)
2: X3paFlsT13BshCWTR0SlIWYu5KQ.crl (hash: mlxxh/Cs7SYCwLeBB3ETzMf5YLTPypa89tnqT9h/BZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:98:fb:f4:4a:cb:ca:61:3b:90:52:43:c1:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7a5a165b13d7706c8425934744a521662ee4a4
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=367cca9986fe7433d129b939a71843820f9c00bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:79:69:d9:5e:9f:33:02:4f:2e:26:cc:ed:
01:5e:16:cc:f1:e6:01:27:bf:83:6e:85:4f:8e:87:
3b:9e:fb:a8:06:af:b8:f2:c0:a0:40:5e:2f:54:5b:
a9:7f:bc:a5:26:01:4f:74:42:77:36:2c:78:84:21:
5b:a4:d0:19:6e:f7:c2:43:e6:d4:43:be:28:b6:70:
50:85:44:f4:ba:39:d0:94:6a:80:89:92:e2:44:e1:
4c:20:a7:27:2d:78:44:c1:fc:f5:0a:a1:86:95:f3:
e1:f5:3a:28:af:2d:28:6d:96:81:a0:10:b2:c6:4d:
46:b5:03:54:03:d7:62:07:ee:68:89:b9:9f:54:47:
ed:8b:06:ee:43:b2:e1:ba:9b:5e:4e:ec:e8:74:93:
22:45:cb:df:07:a6:7d:1b:a5:4e:0f:ba:7a:97:6f:
1d:16:4e:f0:7a:96:af:af:b0:33:9d:23:97:82:c3:
15:df:c9:f4:ef:82:d7:5b:53:fd:30:1c:4e:9e:d4:
96:ea:b9:ff:8f:c2:55:72:96:01:e9:31:7e:66:21:
df:22:5e:1d:c5:4c:b9:2e:56:25:fe:89:ac:f6:69:
95:a8:7c:6c:3f:54:82:06:74:60:26:8c:3a:e3:a9:
6a:e7:68:41:ba:79:a7:67:c3:4f:24:76:95:e0:03:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:CA:99:86:FE:74:33:D1:29:B9:39:A7:18:43:82:0F:9C:00:BC
X509v3 Authority Key Identifier:
keyid:5F:7A:5A:16:5B:13:D7:70:6C:84:25:93:47:44:A5:21:66:2E:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3paFlsT13BshCWTR0SlIWYu5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e62c3a-263e-4cee-9c89-49c6fcbbb5a8/1/X3paFlsT13BshCWTR0SlIWYu5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f4:28:d9:34:59:f6:33:d9:2e:2f:6e:b2:8a:73:67:d5:05:
06:4f:7f:dc:58:be:fd:11:ab:ff:5a:c5:da:ed:9b:39:c6:e8:
67:7d:05:b4:74:c1:ae:b8:a5:3f:e0:ef:65:61:aa:4d:71:51:
71:a2:be:94:42:8c:a6:31:05:0f:f6:d7:60:48:d0:71:37:be:
44:80:94:c3:15:eb:a3:50:55:e7:a5:e3:b6:1b:ca:80:19:fc:
92:a6:06:0c:ee:04:b0:8a:fb:d3:82:e1:be:e8:74:ea:23:b0:
ed:87:8c:27:60:b6:9d:d2:03:76:02:7c:b8:53:46:19:fd:74:
14:1e:c9:27:16:b9:66:ed:c3:80:00:4b:1c:3b:eb:5e:60:e7:
ef:fc:2f:88:1e:ba:a6:94:e8:63:6e:ec:d2:d0:42:d6:15:a0:
f3:c5:9c:84:7c:09:36:c7:06:a8:80:c5:ef:73:91:0e:11:ab:
84:06:3e:b9:a0:8c:c0:8f:9a:17:63:76:db:2f:b9:22:52:61:
ed:e9:15:f8:7d:d3:90:4e:8c:3c:1e:e4:f6:af:a8:c1:a0:3b:
81:3d:5e:78:a2:2a:c1:7f:fe:0b:59:6a:95:3f:9c:66:e4:bf:
6a:fb:0f:ce:9e:ba:69:68:db:d7:c6:0b:db:48:0c:3b:0d:db:
c8:81:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client