Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
File: xVCFAF0ORJ07r6McXLQp_4nSxLc.mft (raw, json)
Hash identifier: agar8+oCN1jha+ULQNRvporWjU20ujXotljG4s/P2pE=
Subject key identifier: 5B:5D:0D:B0:5C:3E:2C:08:CD:D5:3A:2B:F1:2D:1F:64:51:A3:D1:2E
Authority key identifier: C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
Certificate issuer: /CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Certificate serial: 019A503E61ED2782CBE9770284A1A155BC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:56 +0000
Manifest this update: Tue 04 Nov 2025 19:00:56 +0000
Manifest next update: Wed 05 Nov 2025 19:00:56 +0000
Files and hashes: 1: qW8p1VoO0rmUxSBMMtwtZyhbaDM.roa (hash: qyIGTJ6GSXvozvgOJxEgitWAj9Fu7yaT8GLFsC9Ti8Q=)
2: xVCFAF0ORJ07r6McXLQp_4nSxLc.crl (hash: c3monPDyDV1aqGKCdf6pilkKlqqHr7se7LMVfcRDIvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:61:ed:27:82:cb:e9:77:02:84:a1:a1:55:bc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55085005d0e449d3bafa31c5cb429ff89d2c4b7
Validity
Not Before: Nov 4 19:00:56 2025 GMT
Not After : Nov 5 19:00:56 2025 GMT
Subject: CN=5b5d0db05c3e2c08cdd53a2bf12d1f6451a3d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:86:63:f5:bb:7f:cb:3d:40:c8:62:69:5f:a4:
78:e9:23:ca:e2:0b:66:84:e5:0a:7b:42:1f:c9:29:
9d:25:a9:34:95:14:6b:cd:bb:7f:e0:2d:b8:9b:3c:
19:e8:9a:fe:00:7a:a0:44:79:53:3a:dd:b8:a6:8d:
de:fc:22:bc:06:4a:3e:64:7d:cc:4a:72:91:2f:c7:
c4:da:f0:05:ec:2c:ab:c7:d9:0d:64:01:11:0a:57:
3a:b0:c4:8b:61:52:33:9c:86:0d:e7:34:41:2b:69:
38:be:5a:a2:49:04:c7:7b:27:c4:f8:c7:b9:94:53:
11:ca:42:8b:9d:12:71:85:a8:54:68:5d:36:32:7a:
b9:c5:5b:7e:62:58:97:0a:38:73:13:ec:50:10:2d:
63:55:65:ff:3d:be:ed:f3:56:97:69:1a:11:b3:dd:
f8:ba:f7:b5:6d:84:e6:fb:c2:e4:47:5b:1a:e7:21:
1e:68:f8:e2:23:b7:5d:3b:d9:87:ee:67:a9:1c:44:
3c:b4:5d:a4:bb:17:22:40:d1:57:af:a5:38:a7:e7:
8d:f6:da:7b:d8:22:aa:81:20:43:a9:0a:16:5d:0a:
a8:09:89:fd:25:8a:5a:15:c0:03:f8:9b:a3:66:bc:
f1:ee:61:f0:95:db:ce:bf:c4:ad:d1:64:1d:3a:79:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5D:0D:B0:5C:3E:2C:08:CD:D5:3A:2B:F1:2D:1F:64:51:A3:D1:2E
X509v3 Authority Key Identifier:
keyid:C5:50:85:00:5D:0E:44:9D:3B:AF:A3:1C:5C:B4:29:FF:89:D2:C4:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVCFAF0ORJ07r6McXLQp_4nSxLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/738801-ddc6-4843-936c-20acc38bc8ff/1/xVCFAF0ORJ07r6McXLQp_4nSxLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:96:c0:72:23:4b:ee:17:ee:20:d0:c2:60:15:db:3a:0f:ad:
42:c4:3b:b9:d8:2d:e1:76:f0:cd:22:58:6c:9c:34:ed:af:29:
b4:e3:5f:09:c1:03:0c:29:b8:08:bd:32:83:be:26:30:5c:ae:
25:c8:a1:6e:5d:5c:7d:44:d6:22:be:14:25:a1:25:dd:94:af:
ca:81:88:44:ca:f0:b3:5b:17:3f:4d:71:86:86:9d:f9:74:45:
32:d2:04:4b:3f:a2:b3:8b:44:77:b5:91:8b:1b:a5:3b:9d:29:
bf:24:90:7e:7f:bb:47:1c:27:87:25:4f:66:03:82:e6:97:59:
e9:56:68:aa:cd:9a:6d:43:f4:27:ac:b3:0c:52:84:c2:85:12:
d7:fa:91:5b:07:cc:af:3a:3a:b6:a0:98:82:03:7a:7a:41:4e:
bf:5f:e2:18:fc:c4:b7:bf:05:bd:b5:fe:6e:b4:2a:68:d8:1c:
ef:22:af:10:26:40:99:40:6c:99:2e:53:0b:b8:27:ee:53:43:
7a:f2:d7:a5:a0:36:f5:a7:1b:9e:17:e3:7a:db:79:44:57:79:
e8:50:3a:33:d7:ed:d7:0b:7e:c0:a1:a6:6c:05:e2:3c:a5:13:
3d:bc:04:6c:93:23:88:75:fc:f2:f2:dc:36:e5:2b:76:65:12:
fc:7e:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:30 2025 by rpki-client