Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: xZBareEqr/7cL7BfL+GoewFLq+bw0A93fj4cJ0ELiX4=
Subject key identifier: 2B:18:94:49:ED:F7:E2:F6:F0:7C:59:38:53:98:38:EC:55:F5:1A:F2
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019A4D3CC337A226D6819414F317C59FE062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 05:00:18 +0000
Manifest this update: Tue 04 Nov 2025 05:00:18 +0000
Manifest next update: Wed 05 Nov 2025 05:00:18 +0000
Files and hashes: 1: VV0lcvnlnG9WTkwgXPk5TRHRcZQ.roa (hash: DsDIMEW7TR5yp1+sD2rXx7TV58t745Rd1fkPc4+bsBs=)
2: a85p_GEp5p6Bf3FjSd5TigV6wZQ.roa (hash: wqCCsxCv3hdKMkQBIvYu4j0t7kjF+iiKKHzp3iWmOnw=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: qTZL5xkDDKjMrJM7cVUVAI+wFF6+SvupboQJ/2yGMss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c3:37:a2:26:d6:81:94:14:f3:17:c5:9f:e0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Nov 4 05:00:18 2025 GMT
Not After : Nov 5 05:00:18 2025 GMT
Subject: CN=2b189449edf7e2f6f07c5938539838ec55f51af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ee:a5:77:c7:75:31:2f:78:76:2f:45:09:1b:
83:28:ac:53:a3:30:44:59:12:b5:ca:2d:bc:ae:f2:
3f:49:7e:93:af:c3:5c:5f:74:cc:79:ba:24:98:e5:
29:29:3c:ea:ff:0b:5f:49:44:90:c3:82:9b:7c:2d:
c4:9f:07:ad:ac:49:b2:5d:63:5b:14:8a:03:94:0b:
aa:ce:f5:5d:e7:fa:7f:48:b0:b9:5d:dd:f4:de:20:
60:8c:e6:b9:7a:3b:ad:38:c5:bc:ae:8d:ce:c9:9a:
42:51:b2:99:fb:1f:e1:88:f1:4f:8a:fb:c3:58:bc:
9f:fe:34:ac:05:6a:04:b5:5b:8a:a1:9c:b9:d5:5b:
5e:fb:42:59:6b:c6:6e:15:ac:b1:11:b2:b4:24:de:
b3:f0:11:5f:22:19:2b:05:27:03:c7:8e:68:ea:d8:
58:1a:52:43:7e:10:ee:8b:2e:c4:23:42:6c:ed:bb:
f3:e2:2f:16:f7:14:92:2f:7d:f6:2f:da:cb:24:02:
63:ee:de:1e:43:f9:d0:7c:37:64:b1:43:83:34:94:
48:cf:63:96:6c:c3:16:01:f7:57:9e:d9:d4:d0:b5:
2f:a9:ac:78:63:81:ef:dd:45:c0:3f:3f:02:9e:1e:
e2:40:48:8b:01:19:f4:e4:08:46:dd:2f:56:a6:48:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:18:94:49:ED:F7:E2:F6:F0:7C:59:38:53:98:38:EC:55:F5:1A:F2
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:73:dc:2f:3d:07:64:18:2c:1c:46:e5:bd:11:10:6e:7b:ed:
ba:fa:a5:9b:86:95:e8:f9:91:87:dc:96:b1:fa:11:00:45:53:
d1:2e:2c:24:0d:df:4e:23:9f:67:99:46:b3:77:95:53:f1:a1:
70:4b:8e:1a:3e:0b:a5:a1:73:03:92:4f:be:ac:e6:09:6b:91:
2f:9e:27:0e:7b:f9:d0:d4:1c:59:98:db:fd:0e:af:28:c7:7b:
8e:7b:03:42:8c:20:0c:01:ba:2f:e2:c9:f1:33:06:bd:d4:36:
7c:d5:94:fe:d5:22:8d:23:12:90:b3:0b:ad:0a:10:d4:e5:b0:
fb:77:eb:98:b6:88:1a:82:66:94:10:3b:c2:e7:ca:85:84:a2:
0e:f7:2a:14:79:7d:73:4f:67:39:88:44:cd:e6:ed:9b:51:64:
58:55:06:59:8b:4a:4d:51:78:ff:ae:52:4f:d3:5b:64:96:09:
be:19:2a:37:48:f9:b5:bd:1a:b0:5e:97:4f:8e:a3:4d:15:ba:
64:e7:13:13:fd:b1:09:4a:06:58:ba:ab:6d:c7:3b:ba:36:6c:
37:5f:ad:58:d1:fb:bf:ba:82:d4:14:7a:35:59:5a:c1:f3:06:
4d:e7:55:70:e1:92:96:18:ad:22:84:ad:e2:4c:c5:fe:3f:ab:
7d:7c:7b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:14 2025 by rpki-client