Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json)
Hash identifier: ZCjyNohbHiPs0oonfdGKwLh95v30e5S/qTOsyjWFkxo=
Subject key identifier: 93:4F:81:2F:06:0C:02:AC:E5:F6:0E:7C:D9:D4:97:C9:96:9C:04:51
Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Certificate serial: 019A4DE1D18A779290121BE4EF9E5D86AC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:36 +0000
Manifest this update: Tue 04 Nov 2025 08:00:36 +0000
Manifest next update: Wed 05 Nov 2025 08:00:36 +0000
Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: vU2pFydW1vAhpLpSZTs0q/4EFZeG5Zgr/boZS82Y1yk=)
2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d1:8a:77:92:90:12:1b:e4:ef:9e:5d:86:ac:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7
Validity
Not Before: Nov 4 08:00:36 2025 GMT
Not After : Nov 5 08:00:36 2025 GMT
Subject: CN=934f812f060c02ace5f60e7cd9d497c9969c0451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:9c:9a:ca:0f:eb:14:56:c0:4f:06:0d:83:
99:0b:b3:56:86:b7:15:57:f1:cc:e3:cf:81:19:ec:
e6:7c:7e:96:4f:49:0b:12:84:cc:36:2b:0b:1c:58:
79:7e:28:9a:2c:4a:b3:01:d5:c2:72:a0:c5:58:5f:
7d:04:c2:bc:f1:9a:75:c3:83:9b:0f:89:52:71:1e:
b9:e5:b8:d5:12:d6:ef:52:42:03:e7:77:8f:06:f4:
28:77:7f:b6:c9:b9:b4:79:c2:a6:0d:5c:64:21:23:
55:84:6d:15:eb:f3:2a:c9:aa:2d:95:ab:0f:66:ce:
c6:1c:cf:b0:f1:93:e3:59:a5:27:44:a5:c0:95:3e:
2f:72:19:47:94:8b:65:92:ef:47:e1:d1:66:ab:ae:
5a:92:03:b1:6f:7d:12:ac:68:45:80:65:b9:e9:9f:
0b:92:01:de:cf:d9:4e:ec:12:e8:88:ed:86:c6:08:
d6:49:36:5d:d3:8e:97:9c:11:d3:12:f0:12:ab:b8:
0a:c0:c0:86:63:50:bc:70:2d:ae:f2:95:8a:26:b4:
1f:1e:46:4e:f0:a5:e3:3c:0a:be:7d:d7:93:2c:dd:
cf:a6:30:a3:4e:e1:b1:52:9c:24:11:e8:02:4f:d9:
07:bc:71:c5:ac:73:a6:6a:3e:eb:24:bd:ba:7d:82:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:81:2F:06:0C:02:AC:E5:F6:0E:7C:D9:D4:97:C9:96:9C:04:51
X509v3 Authority Key Identifier:
keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e0:38:63:59:5c:4a:d7:0b:0b:d6:3c:c0:f4:05:9a:5f:4f:
e3:b9:f9:be:94:7d:35:3f:6f:0d:f4:d0:7f:17:33:e8:25:6a:
c7:71:4d:55:e0:1a:57:3c:e2:4c:2e:61:10:c6:12:72:1b:58:
7b:40:af:d3:c0:e3:77:d6:cd:a4:2c:a6:4f:96:4c:15:cb:24:
4b:39:c0:fa:3f:c2:6e:fc:66:d6:77:06:51:2a:d0:99:25:64:
55:11:fa:ef:bb:3d:a4:95:45:0c:fb:ac:8c:d5:22:42:50:d1:
b1:c2:e2:19:55:5a:90:2d:19:6d:ce:1c:df:7c:8d:ef:8b:b2:
99:be:d9:67:77:7c:9c:71:17:c1:02:aa:bc:76:e6:03:67:9d:
b4:f3:0b:26:92:9d:ab:1b:98:40:4a:01:1c:72:0f:7b:83:06:
c8:df:02:f6:ec:29:2e:5d:52:38:a4:27:3a:1d:6c:41:ed:29:
3d:7f:5b:98:c6:e9:9d:5e:1e:71:21:dd:70:5f:48:f8:f7:59:
54:55:f6:15:88:a9:67:35:f9:29:61:85:35:5e:8c:12:71:3a:
a4:40:c0:69:15:fd:4f:59:80:da:ee:d0:ec:9a:a6:db:07:c5:
49:f6:1c:dd:2a:06:b1:8a:22:58:0e:db:57:53:65:4b:ff:f3:
2f:18:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:44 2025 by rpki-client