Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json)
Hash identifier: /ggMGsvU8mudInjLsbAaQGFkQSQvzi1Zp/DbYJsFE08=
Subject key identifier: 1C:45:8D:59:12:E4:27:8F:37:AF:C5:29:A8:E8:7E:A7:50:2A:F5:5E
Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Certificate serial: 019A2477F62B3885B747F9EECB2A5B652294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
Manifest number: 0B1D
Signing time: Mon 27 Oct 2025 07:00:32 +0000
Manifest this update: Mon 27 Oct 2025 07:00:32 +0000
Manifest next update: Tue 28 Oct 2025 07:00:32 +0000
Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: 9dkLajxrePBLNm3wcrGuV0ONk9gB3uj8jlgPJKJqnMc=)
2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:f6:2b:38:85:b7:47:f9:ee:cb:2a:5b:65:22:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3
Validity
Not Before: Oct 27 07:00:32 2025 GMT
Not After : Oct 28 07:00:32 2025 GMT
Subject: CN=1c458d5912e4278f37afc529a8e87ea7502af55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:04:51:cc:c6:8f:eb:26:b7:f3:d4:6d:d2:
3e:bd:0c:02:9d:32:6c:be:26:69:e6:c9:66:40:4b:
09:77:cc:e8:dc:a9:a9:2f:0d:26:a9:93:73:16:a3:
62:9e:ce:3f:91:e4:b4:d9:a8:e6:46:61:d6:14:fd:
14:34:7e:8c:9e:8d:c2:89:8e:2b:db:42:6f:5e:61:
dd:8e:13:7b:6f:b1:b2:98:98:6d:b6:02:a5:42:2f:
d8:37:be:b6:fa:9b:80:39:8b:ec:7e:89:4d:e0:f1:
9e:24:d6:eb:6a:d7:01:63:a5:b6:7b:7b:db:a8:0d:
91:9a:89:9f:69:96:77:c3:02:76:0b:7d:84:f5:cd:
ed:41:66:cd:39:11:b8:2c:8d:1a:2f:54:f9:3d:27:
21:cc:eb:c3:62:17:35:f8:73:f6:d0:a1:c1:db:93:
99:0a:86:33:b3:12:ed:35:09:4c:18:ad:69:9c:9e:
81:b6:f0:5a:a6:db:85:87:93:76:3e:92:44:54:eb:
4b:d7:04:a5:8e:5a:18:49:42:44:a4:44:70:37:20:
20:1c:77:53:96:42:b0:86:32:41:fd:87:fa:29:27:
da:ce:3c:f8:14:62:17:48:05:61:12:b0:1d:44:1c:
ec:28:03:f4:35:c4:d8:67:70:0f:bd:96:1a:ce:5c:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:8D:59:12:E4:27:8F:37:AF:C5:29:A8:E8:7E:A7:50:2A:F5:5E
X509v3 Authority Key Identifier:
keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:bb:f9:aa:eb:4c:2e:63:f4:ea:be:aa:5d:b1:92:80:11:d1:
3d:98:16:20:0c:c2:eb:01:d9:d1:b6:b0:59:7e:2d:3d:b2:9d:
fc:3d:e5:11:40:8e:00:12:ac:54:78:1d:bf:1c:b7:a0:13:3e:
99:ed:1f:c2:73:84:81:1d:a8:7c:8c:4d:ba:b1:ee:35:20:fd:
fd:e2:8a:76:26:91:2c:76:4a:26:d4:af:21:e2:7a:f8:5c:66:
d4:e3:e7:26:05:bf:b5:0c:30:c5:1c:54:79:90:63:71:45:62:
37:91:78:a2:a6:1c:cc:5e:9e:d8:12:a2:fb:15:db:8f:b0:ba:
1e:ad:7f:bf:b9:f2:c1:0e:2b:89:2b:d3:64:4b:8a:bc:0d:84:
3b:a6:1a:b3:9b:42:9f:e7:89:c9:87:56:47:2c:12:29:7f:53:
55:3c:d4:71:e9:72:c2:7a:09:87:cc:b9:1d:6a:9f:84:0c:e9:
e8:02:29:3f:a3:66:0a:0c:5e:8a:bd:15:ad:da:8b:8e:7b:fb:
29:51:c9:85:7f:40:59:c0:7b:0b:d5:2e:88:0b:ee:cf:8c:b3:
98:9b:f5:04:9f:83:7a:22:e3:f8:bf:b9:ea:87:4c:40:21:14:
d6:e7:c7:10:f1:ac:1f:97:c8:07:71:88:ab:56:3d:27:d5:68:
60:4d:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:48:08 2025 by rpki-client