Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File: Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier: rixUG/VRbnW8YyMyJuN5D5thng+LJt6PfrzRPtzX0zM=
Subject key identifier: B9:6C:FD:80:43:BD:23:04:64:C4:47:C9:73:4F:B6:85:F9:A6:99:83
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer: /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial: 019A4F2B7AD1B43E8D933D0FA34F7B0BAA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:40 +0000
Manifest this update: Tue 04 Nov 2025 14:00:40 +0000
Manifest next update: Wed 05 Nov 2025 14:00:40 +0000
Files and hashes: 1: B9inWc_Zru3DBQYoTCckNvJAJjc.roa (hash: rR3/vKr9FiP0LIExuGsty/9oTkiBHkZoBOxEJZQ25PU=)
2: N2iXQzwnJ7HrnDOcVCjZn3aCcVw.roa (hash: YJwpPg1gpuiDf+AucM/2eZ40ZoPeyXC6eibq/R/5usA=)
3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: O1ghVN0Y6Lv0F0fJD6mT3NIk6KNa/Mtl2GsHPy5jISM=)
4: fXCcgUSD-6HNgkjQxM90O6lfJzY.roa (hash: hPPYSOb/+jw/H4XCWA1NGkrCD/90gdTOvYWg/h1cmfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7a:d1:b4:3e:8d:93:3d:0f:a3:4f:7b:0b:aa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Validity
Not Before: Nov 4 14:00:40 2025 GMT
Not After : Nov 5 14:00:40 2025 GMT
Subject: CN=b96cfd8043bd230464c447c9734fb685f9a69983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:76:bf:23:40:cb:c8:4c:d0:2f:ce:0a:c4:
a5:6a:69:18:c0:17:f3:da:1e:39:72:a7:e9:52:54:
8c:da:a1:fa:71:6a:a5:a0:bc:d6:35:fb:26:cf:cb:
c9:b3:52:4a:60:94:5f:a9:a9:fa:db:69:c4:de:54:
85:5c:00:4c:87:06:79:66:48:9d:96:63:4a:f9:ee:
b5:ba:d3:8b:7c:a7:ee:8b:87:31:3f:06:fc:09:a8:
2e:df:e2:48:ca:82:c8:f5:bc:ad:af:ed:fd:f8:69:
f5:a1:66:ce:ad:2f:e0:78:69:9c:2e:f7:b2:a8:37:
7a:40:0c:02:6a:67:fe:70:db:4e:cd:5c:46:e3:a8:
e2:08:19:7d:d3:46:39:ea:26:12:7e:b9:a5:04:72:
2a:88:ef:86:e1:f2:a0:28:78:9c:89:a0:95:00:c4:
cd:68:95:64:58:3e:a9:20:7c:a8:12:48:ce:cd:ce:
11:df:58:ab:b0:60:eb:67:18:ee:9b:9d:a5:fa:cd:
cb:22:43:52:a6:97:19:73:9c:23:55:02:22:0d:4f:
3d:d4:d8:7e:24:66:1b:41:ed:a1:17:08:9f:c9:d8:
5b:1c:76:9e:70:d9:7d:42:c3:f0:2d:72:5c:61:a2:
4d:ec:ec:b1:e5:dd:36:c4:e2:19:af:83:1d:da:4f:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6C:FD:80:43:BD:23:04:64:C4:47:C9:73:4F:B6:85:F9:A6:99:83
X509v3 Authority Key Identifier:
keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0c:10:23:e0:4b:d1:86:ce:45:2a:0b:0d:7e:68:df:41:43:
7f:7d:37:1c:69:c6:3c:d3:0e:9e:d7:f8:97:1a:b1:3d:02:0c:
78:cd:f7:fa:a1:d3:a4:77:3c:79:33:d9:fb:b8:b8:4f:7f:a9:
10:37:d0:96:a9:9b:e7:06:d6:cf:7c:c5:84:96:dc:7e:af:b1:
51:d8:26:8c:c1:af:e6:d9:a7:07:83:67:ba:8e:d4:74:36:3f:
82:c3:11:39:ee:ec:33:45:9a:f8:d3:d8:05:eb:9a:77:7c:1b:
98:22:13:8d:ca:e0:37:31:0a:c8:a5:e4:5b:bc:b4:21:d6:1c:
b4:e4:fb:04:88:d6:69:15:82:eb:2f:48:82:dd:99:e6:82:f2:
40:a4:c0:1e:14:f5:27:ff:99:f0:55:56:08:1a:6b:0b:85:3b:
e0:87:b7:3e:79:da:6f:46:07:d6:c5:00:1f:ab:3c:e7:98:71:
56:38:d7:99:64:db:ad:51:34:b7:90:91:48:11:e9:96:6c:6f:
70:db:15:a6:cf:c9:54:8e:1e:a2:96:94:21:39:da:92:f1:ee:
48:3c:07:05:20:6d:5a:b8:33:45:7f:9e:1d:4d:db:7b:d1:d5:
3d:14:14:90:9c:ec:77:c8:68:0b:12:e1:b9:f6:c0:b4:9d:62:
f1:3b:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:33 2025 by rpki-client