Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
File: Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft (raw, json)
Hash identifier: 7c7TbgUXxgMRSymymWueMWGjYTkDvXDI5diHS4CB12w=
Subject key identifier: 2B:9B:91:E0:F8:03:97:A0:F4:72:6B:78:F0:3B:43:81:03:D8:87:14
Authority key identifier: 5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
Certificate issuer: /CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Certificate serial: 019A71B90E1F75ACB78E5F59A73FCFB00632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
Manifest number: 0FDC
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: 66N-Djv17QzbVu829sfhkH4hbUI.roa (hash: o7cYwZM94fRtcojgCS537Z8P4XC0rgicA4bzBkhVpiU=)
2: Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl (hash: UCNhEMSxsODoXcprptiZjtKQ9KIEQ9eICVimbwYzijk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:0e:1f:75:ac:b7:8e:5f:59:a7:3f:cf:b0:06:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0f162afa7bfd7b847c1dd0eb4aebea93c469cf
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=2b9b91e0f80397a0f4726b78f03b438103d88714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:77:c4:b1:6d:d6:70:eb:8a:32:27:4f:a8:e3:
da:1a:b1:b0:69:e2:1c:27:e9:75:3a:cf:b5:4d:b6:
df:24:f1:60:9d:ad:0c:8b:1e:5f:73:9f:5f:5b:b0:
36:b1:a8:c7:d7:b4:51:56:69:55:50:35:e2:29:0e:
83:df:ff:3f:c8:21:12:7c:d3:4b:f0:a0:04:ee:17:
f0:0d:07:42:7f:77:ed:e0:13:9a:5d:06:e4:4f:31:
37:38:be:84:a1:c6:d8:45:90:46:7d:e9:55:ac:83:
95:ed:c8:f3:14:86:4a:ee:e1:f1:c2:80:92:04:42:
c0:fd:cc:8a:1e:ed:aa:29:77:60:44:71:41:96:48:
54:2a:84:57:8e:54:1e:b9:1b:dd:bf:48:9f:ea:58:
60:20:2e:ee:8e:2f:ef:94:4a:4f:da:cb:4a:a0:50:
76:e0:00:3c:d4:ac:79:f4:cc:02:eb:3c:72:9b:55:
9f:a8:0b:78:59:d1:52:c2:53:44:7e:4b:1a:76:e8:
6c:52:06:77:0d:15:75:68:89:24:c4:1d:ad:1f:5d:
aa:91:1d:34:c2:3f:11:65:cd:4b:77:88:53:70:aa:
aa:12:f6:05:fc:36:42:f3:17:fe:31:c7:78:14:c1:
fb:33:6c:c9:d3:b0:d0:db:76:1c:57:1f:61:20:a9:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9B:91:E0:F8:03:97:A0:F4:72:6B:78:F0:3B:43:81:03:D8:87:14
X509v3 Authority Key Identifier:
keyid:5F:0F:16:2A:FA:7B:FD:7B:84:7C:1D:D0:EB:4A:EB:EA:93:C4:69:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw8WKvp7_XuEfB3Q60rr6pPEac8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/82d6af-eac8-4d18-9aea-cee4c518770d/1/Xw8WKvp7_XuEfB3Q60rr6pPEac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9e:92:8b:3f:4e:71:e3:7b:dd:ef:bd:38:cd:f1:3a:ca:74:
63:e1:e2:f8:29:42:1e:d1:35:eb:b0:95:e6:2c:9d:07:77:0c:
cf:1e:43:6d:5a:76:61:43:02:fc:f0:83:6a:6a:27:29:9b:c2:
3f:e0:af:53:b6:47:d2:94:09:d6:a4:32:b1:aa:b3:ad:d3:f3:
4e:2a:b1:1f:5b:6f:59:8e:ea:8a:c6:ef:89:66:53:2e:bd:76:
ac:11:c1:48:a8:73:8c:a2:90:fd:c5:28:b9:f9:a3:01:28:35:
d4:48:f8:90:ff:52:59:12:49:88:c7:f7:84:bc:38:dc:c8:7d:
93:47:62:3c:14:d0:2d:52:fa:91:c0:b6:bc:99:c1:bb:21:d2:
88:83:aa:f2:aa:a6:23:d2:6b:7e:3b:bd:62:5b:be:96:e9:c3:
f8:1b:0a:f5:a2:96:0b:b3:cf:d7:3d:61:60:72:73:3b:58:53:
ed:61:9c:8a:8a:b6:e9:b3:8e:c1:ff:30:1a:25:d3:b8:8f:21:
72:fc:ab:5d:47:e4:72:3f:26:94:16:c4:15:71:71:f8:ad:f1:
6d:e3:08:14:5e:17:e6:64:90:f4:c0:fb:a3:d1:6b:87:2a:ae:
7b:0a:bb:1d:ca:52:cd:ee:d7:12:a0:a7:b9:58:d0:63:23:d9:
fc:58:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:26 2025 by rpki-client