Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json)
Hash identifier: 3GWfYiSa57Qk2wehIijahmHhHgs41wLY68drujQthtc=
Subject key identifier: 80:4F:42:0C:FF:3E:AC:5B:A0:07:21:E8:C9:24:34:3A:F3:D8:6C:DA
Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491
Certificate serial: 019A71B89C5A28F79BA14ECA61E342CF2FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
Manifest number: 0942
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: wF7RnUFsnFog1G4orGI23TrGcs5u0pldeNmCcYVbXGk=)
2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9c:5a:28:f7:9b:a1:4e:ca:61:e3:42:cf:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=804f420cff3eac5ba00721e8c924343af3d86cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:53:71:d8:ba:1b:0f:53:bf:e9:09:71:80:
df:81:ce:6f:59:c9:89:e1:73:1d:98:33:02:47:e9:
16:ed:96:96:31:d4:fc:7e:cb:28:b4:6b:06:2e:f4:
cb:ec:83:d3:e1:21:69:f9:aa:90:87:93:be:df:00:
ed:a3:23:f3:83:c4:83:d0:56:c7:69:48:87:54:d3:
b7:f5:3d:89:e9:96:e2:ea:f0:8f:9c:a0:b2:7c:5d:
81:bf:68:d1:cc:e9:de:1b:e5:ab:ce:bb:73:4e:ba:
40:ea:0c:3f:46:16:1c:a7:7b:fa:b5:da:3e:0c:80:
b9:1f:94:ba:99:2e:f7:9f:d2:06:ae:2a:82:3d:12:
c8:68:f7:d0:3a:ae:92:37:4d:79:0a:f6:98:d8:a3:
2a:3f:9a:e4:26:20:19:96:44:9d:b6:10:e1:64:a7:
70:0b:ea:f9:ad:da:7e:e8:94:24:13:95:30:90:a3:
29:5f:25:a9:fa:56:f7:5e:f7:9c:f6:a4:94:70:c2:
23:93:b6:08:50:6f:74:3d:f0:ec:d8:13:43:dc:ed:
64:9e:a1:eb:b6:50:40:34:d2:42:02:bc:7d:59:c6:
fd:60:be:14:8e:70:99:72:91:be:39:53:ca:f4:38:
f2:29:46:50:60:66:09:d6:60:d8:89:d3:d6:5b:3e:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:42:0C:FF:3E:AC:5B:A0:07:21:E8:C9:24:34:3A:F3:D8:6C:DA
X509v3 Authority Key Identifier:
keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d4:c6:be:d2:5d:c8:5d:dd:93:f8:ec:34:00:15:75:11:cd:
eb:1d:ba:16:55:26:c3:1d:6e:a6:21:52:78:a8:7d:29:14:bb:
ae:1e:5f:9a:86:c3:ca:f8:cc:be:1d:c8:02:6b:9b:f5:ea:18:
f7:4e:2f:ce:b3:3d:6e:8e:2c:e6:fd:d0:91:d7:ae:06:b6:60:
69:f5:ac:63:23:02:59:4f:4d:85:fe:30:5f:33:da:99:e8:7a:
37:e8:12:22:8e:08:30:91:8f:77:ae:50:1f:75:3c:6f:14:cb:
73:cc:e9:fa:72:17:b0:12:91:44:19:7c:c4:e7:1c:a7:6e:7d:
68:ad:0f:db:bc:6e:92:ae:2f:e1:22:90:80:50:cf:38:36:69:
2a:db:e6:53:76:1a:66:ed:f4:4f:ea:4b:17:1b:c0:0a:74:cb:
c9:1a:9f:15:46:e9:81:a3:2a:12:51:3d:25:be:dd:ba:d3:e7:
d9:fd:9d:e5:48:d1:39:1e:27:55:93:4e:23:52:fa:fc:62:a6:
96:f1:cc:f2:4b:89:13:6f:9e:bf:ab:df:d9:22:94:7c:2b:42:
3c:a0:f5:6e:e6:6d:50:82:a3:5d:2f:d2:1e:b5:e3:68:77:7d:
32:d4:5a:c0:52:97:9a:f6:4d:d5:9f:05:42:e7:4a:33:e0:d9:
89:af:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client