Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
File: XWU9B97R6Nf08uoEvTaELFsS8V4.mft (raw, json)
Hash identifier: igsF3U7ElM3EkukBuWR+tcRuLL6V8DUsvSZbj+rUk+w=
Subject key identifier: CF:C5:2C:E9:A2:23:CF:BB:25:98:D5:08:77:65:47:67:FA:26:B7:4A
Authority key identifier: 5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
Certificate issuer: /CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Certificate serial: 019A4D738553E720F1A3D1A6604114C4869E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
Manifest number: 0F34
Signing time: Tue 04 Nov 2025 06:00:07 +0000
Manifest this update: Tue 04 Nov 2025 06:00:07 +0000
Manifest next update: Wed 05 Nov 2025 06:00:07 +0000
Files and hashes: 1: LETlz166RFHGtOnMtZqu-hVYTtY.roa (hash: R/HDeBwYS+y6cI45NJn8rpNKDr4lgvNm8JPFpPhGnoo=)
2: XWU9B97R6Nf08uoEvTaELFsS8V4.crl (hash: eU6VG2Lq5nXMfvvJl8h6QtZEmk0jLcsl59RnEskWPJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:85:53:e7:20:f1:a3:d1:a6:60:41:14:c4:86:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d653d07ded1e8d7f4f2ea04bd36842c5b12f15e
Validity
Not Before: Nov 4 06:00:07 2025 GMT
Not After : Nov 5 06:00:07 2025 GMT
Subject: CN=cfc52ce9a223cfbb2598d50877654767fa26b74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:3a:e5:08:44:9d:51:d6:51:e0:fe:40:ec:
9a:2d:7c:9c:b5:f1:2d:c5:d7:52:c6:82:01:cd:37:
49:5e:8a:41:16:94:c3:69:ce:cb:a3:63:34:ff:0a:
eb:b9:ec:47:f2:86:68:32:98:be:8f:71:cc:f9:0e:
ba:72:94:f0:af:af:f1:10:5a:af:06:c6:b4:df:c5:
ef:b1:59:60:78:57:1b:8e:fb:31:20:88:ba:26:e6:
bc:82:4c:f8:67:7e:af:09:fe:3c:d9:a9:cd:29:85:
20:df:e0:19:ad:65:4a:0c:e0:b9:5c:59:f6:34:a1:
8e:f7:b3:1d:99:bc:70:70:04:8e:ed:27:27:ea:41:
08:03:72:81:fe:d0:6d:90:2d:2b:1e:d2:b0:8c:c5:
f2:e3:e6:a0:b9:d0:00:75:63:0a:ec:95:30:9d:ca:
71:8d:ab:bb:d5:bf:c1:fc:79:0e:94:c2:7f:90:86:
55:68:8a:ca:4f:a3:66:44:6e:6c:42:cd:f1:31:46:
72:fd:81:76:5c:c1:28:cd:07:e6:12:7b:2f:e7:b5:
48:e4:9b:e2:0a:2f:30:77:0a:d1:ca:c1:e5:91:63:
72:d8:4a:04:d4:63:14:07:34:f5:13:d3:6d:32:83:
dd:86:fd:a8:d1:d9:02:be:40:a6:8d:a4:a3:e1:45:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C5:2C:E9:A2:23:CF:BB:25:98:D5:08:77:65:47:67:FA:26:B7:4A
X509v3 Authority Key Identifier:
keyid:5D:65:3D:07:DE:D1:E8:D7:F4:F2:EA:04:BD:36:84:2C:5B:12:F1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWU9B97R6Nf08uoEvTaELFsS8V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a0475f-ca97-4b16-96db-2145ca75e383/1/XWU9B97R6Nf08uoEvTaELFsS8V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:22:48:3a:10:a9:c2:72:0d:3d:4d:44:3f:89:1e:cf:75:eb:
d1:23:32:8a:d6:86:fb:82:10:27:46:c8:da:1d:c2:ce:f0:f5:
b9:98:08:14:aa:86:0f:57:e7:59:33:ce:1e:b9:2e:09:01:b6:
7b:9a:59:93:09:ff:fb:df:6f:1b:f3:80:93:5c:b7:c0:43:56:
2d:3f:13:bd:3c:f6:f8:92:bf:91:89:22:f8:19:ce:30:b4:37:
cc:e2:1f:51:95:05:69:c8:e9:eb:5a:5f:42:ff:7d:9c:14:4f:
97:3b:fc:c2:30:b9:22:91:94:02:04:e5:59:3d:b1:fa:88:93:
6a:be:c4:b0:1f:7a:b7:fc:2b:33:aa:17:be:76:cb:ee:0c:ca:
f3:df:df:e4:65:6d:a2:94:fb:1b:72:3b:fc:67:92:cb:10:0d:
53:74:72:bf:37:35:49:ca:41:2e:aa:6d:39:5e:18:9a:07:65:
49:0e:34:c0:99:63:83:d6:41:18:86:42:2b:72:11:bd:c7:25:
bc:09:85:f5:f7:23:10:57:95:14:ba:5c:de:b0:37:d1:ce:ae:
a3:f8:49:bd:01:77:e2:9f:e3:5a:7b:59:ec:6b:74:2e:be:00:
58:6c:3e:a6:2a:21:e8:ec:dc:de:c5:75:91:5e:2c:1b:8f:41:
ba:2c:40:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:43 2025 by rpki-client