Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
File: XiMd-Hvf4ien5eQZNANwurMB4nk.mft (raw, json)
Hash identifier: Op/KEjV6WR5aCExMWuRNI0PX62CWc3yiLA/NV6xOklw=
Subject key identifier: A1:CE:BA:9B:D3:53:07:A2:6B:CF:8E:90:63:FC:A0:EE:FE:EA:1A:3B
Authority key identifier: 5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
Certificate issuer: /CN=5e231df87bdfe227a7e5e419340370bab301e279
Certificate serial: 0199180AA76E8AA2E54A20506754E09F664E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
Manifest number: 0C6E
Signing time: Fri 05 Sep 2025 04:02:55 +0000
Manifest this update: Fri 05 Sep 2025 04:02:55 +0000
Manifest next update: Sat 06 Sep 2025 04:02:55 +0000
Files and hashes: 1: XiMd-Hvf4ien5eQZNANwurMB4nk.crl (hash: auBZgHc5fsIq6ou4PD2Bk+hEe0uSZXBknscUxSXSgKE=)
2: w5D1yX-tZICiSwFR7jL3CytqOn4.roa (hash: 2NNJMvsHwacMFGzvYSwe5becAnCEvkEVPVyFOuRSFjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 04:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:a7:6e:8a:a2:e5:4a:20:50:67:54:e0:9f:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e231df87bdfe227a7e5e419340370bab301e279
Validity
Not Before: Sep 5 04:02:55 2025 GMT
Not After : Sep 6 04:02:55 2025 GMT
Subject: CN=a1ceba9bd35307a26bcf8e9063fca0eefeea1a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:ab:67:b5:ba:f6:07:59:9d:c0:ea:9c:39:
df:48:6b:c3:d1:e9:8f:4c:d0:08:31:c4:ed:a1:67:
ce:5f:a2:2c:97:39:02:d5:23:65:e2:ee:45:71:25:
48:1b:16:bf:f7:80:d4:2a:a0:9d:a9:46:13:76:da:
2e:92:a8:c0:91:ed:b6:fb:71:95:70:cb:28:a8:8d:
d5:68:6b:69:2c:2a:1c:9f:4b:8e:8c:55:71:3d:f9:
e0:d4:e9:b4:cd:cb:5e:3e:5d:0b:14:6d:12:55:7d:
24:ae:97:e3:3c:7d:60:be:65:4e:e4:18:2b:5f:2e:
a8:99:66:c5:fb:a2:9a:49:25:28:fe:7d:8b:f6:1e:
6a:2d:b0:b0:8d:ce:ce:46:28:53:20:fd:ab:76:da:
c2:50:0c:51:c3:52:f5:6b:35:dc:0e:6d:bb:4c:bc:
09:f6:e0:88:db:f8:b3:b0:fc:e0:84:4b:1a:91:0b:
bc:90:35:2a:a6:7a:1b:86:b9:6f:f2:67:7f:4f:77:
49:17:76:bb:3e:aa:37:53:e7:f5:64:ca:30:f9:c5:
ed:be:a8:e1:5f:ea:db:fd:03:1d:51:12:b3:b7:a0:
c6:da:3c:e9:a3:30:cd:e9:54:01:b2:16:a0:76:43:
db:f6:8e:ca:2d:8d:84:6f:06:54:48:67:13:51:58:
70:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:BA:9B:D3:53:07:A2:6B:CF:8E:90:63:FC:A0:EE:FE:EA:1A:3B
X509v3 Authority Key Identifier:
keyid:5E:23:1D:F8:7B:DF:E2:27:A7:E5:E4:19:34:03:70:BA:B3:01:E2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiMd-Hvf4ien5eQZNANwurMB4nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f58e8a-6227-4d07-ac59-76ed5cb0e022/1/XiMd-Hvf4ien5eQZNANwurMB4nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:70:fa:19:7c:a8:52:ca:50:a1:ff:5b:8b:d6:f5:4d:9e:7c:
cb:a9:0c:ed:c3:14:58:53:26:1f:f9:dc:a8:59:be:38:df:de:
b6:b3:29:f2:4c:69:90:43:e5:d2:61:49:89:08:66:44:c8:eb:
0a:95:2f:85:7f:0f:74:ad:d9:3a:f6:b5:57:62:68:82:4e:33:
64:b1:17:d4:e8:18:53:28:92:ea:6a:93:dd:d3:b9:84:0f:48:
3d:bd:57:ef:e9:5e:bc:36:a3:38:d0:13:2f:83:2e:8c:66:b2:
86:cc:a7:be:8b:45:5a:85:84:32:67:50:31:0f:cc:69:65:4b:
44:fe:77:09:a1:52:5a:de:1e:56:63:e9:ea:e1:3e:77:8f:3b:
7d:8d:22:d8:1f:2b:42:09:de:63:ab:93:59:83:12:61:c1:1d:
d7:37:10:1c:f6:4a:3d:eb:ca:bd:67:3f:19:1f:82:1c:c8:c9:
e7:b8:7a:ce:a1:3c:b0:ba:3e:ef:c3:05:46:dd:6b:f0:04:d8:
c6:bb:be:68:32:0c:76:5d:3d:ed:dc:77:67:0f:a5:ed:10:7f:
af:46:53:44:d7:55:bc:6d:64:36:1f:e5:0d:75:c9:26:ca:60:
af:62:ea:6a:e2:3a:de:c3:5c:60:a2:97:10:08:ad:ea:25:22:
f0:2f:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:29:32 2025 by rpki-client