Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File: xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier: fuUggdu/pqykzdXwdUmjGtZtjaImqk+K5tS+3y2NfgA=
Subject key identifier: 9D:AF:FF:DC:E8:7F:E6:1B:E6:80:BF:68:91:6C:84:2A:49:6D:6A:53
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 019A4E86D8AD0BACBF5E268FEBC68DACF1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 11:00:51 +0000
Manifest this update: Tue 04 Nov 2025 11:00:51 +0000
Manifest next update: Wed 05 Nov 2025 11:00:51 +0000
Files and hashes: 1: 16AVPBqy4CLiJAk_oq82Ze4GFUc.roa (hash: 8ne68iP0EWlMyJtqhCBtDaybFvVR1nQvVur1A40T90I=)
2: VXYSc8jV8LV0YUvD9GqhiG_Wg3I.roa (hash: gf+aTqupU26rjaPk4p/iExUHTOVBZ1BKZ/eBJG/4oJE=)
3: kJyTZGrKIJP-guAGkQfidQemnN0.roa (hash: 5VNjlZQ2lTGQgsP/MAa7aAdGIHpHVpDviDdJ3Ul/giI=)
4: oZ13AtjecChXKw5f_3lLaOPw8Ks.roa (hash: /XejTxxPIA/m0yG5qUhn06Ei20l/pmuOP7i6MWx0h1U=)
5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: 9H1i9g9qi3lpa+rGpOwRKt+a+oNDGPjkaHoyN9zY2u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:d8:ad:0b:ac:bf:5e:26:8f:eb:c6:8d:ac:f1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Nov 4 11:00:51 2025 GMT
Not After : Nov 5 11:00:51 2025 GMT
Subject: CN=9dafffdce87fe61be680bf68916c842a496d6a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:e9:e8:3c:af:c1:85:20:d1:41:25:6e:d0:
2e:8f:3d:d6:fd:28:df:f2:d5:d2:42:23:d9:b8:ac:
a7:30:60:2b:e2:f3:bd:c2:98:91:47:14:38:97:a7:
6e:24:a6:82:35:f1:d2:f7:bf:e7:b6:ba:77:c5:72:
3c:81:f7:90:1b:91:33:9a:b4:27:6b:69:13:1f:35:
97:7b:88:70:82:07:d8:e8:75:2f:05:22:99:a9:72:
ee:f5:4f:af:7e:ec:a9:2f:dc:2c:51:5f:90:8f:88:
4e:46:c6:76:55:22:f5:46:31:1c:2e:2e:2a:82:ca:
62:4a:82:56:f8:51:c1:63:7e:25:2c:00:9a:39:85:
0c:ff:a1:9f:19:d0:4c:45:0a:b6:e3:71:ab:a1:aa:
bc:db:01:a3:6e:72:9a:5b:b6:99:5e:bb:87:e1:16:
c8:f7:5a:0e:85:c7:75:1f:98:fe:aa:5a:70:cf:a7:
81:9d:df:22:df:77:a8:32:fd:f5:c7:b9:61:77:6f:
b4:a8:69:7c:8e:00:03:d2:65:63:92:5f:a4:e9:3b:
74:9b:ce:6c:80:c2:36:dd:dc:b8:ea:fa:1b:06:e9:
ab:17:5b:1c:ed:d8:e1:2e:fb:87:37:fe:7e:12:17:
98:fe:41:ea:03:e1:c4:27:42:5b:88:1f:1d:e5:a9:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:FF:DC:E8:7F:E6:1B:E6:80:BF:68:91:6C:84:2A:49:6D:6A:53
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:ba:6a:bc:73:01:2f:59:3d:88:53:3a:35:5c:ae:e1:42:
40:19:c1:f6:2c:96:d3:c9:f2:f8:44:92:77:1c:b7:81:00:b4:
e3:44:c2:ff:08:00:cb:67:55:e1:d0:cb:c6:e2:a1:cd:a4:66:
46:47:68:12:9a:07:89:88:0f:58:b7:5c:26:80:60:51:50:6d:
c5:43:58:52:bf:2e:aa:22:a0:0e:47:f9:0c:27:9c:64:02:b5:
c0:40:48:04:51:6d:08:78:98:a5:b6:55:1f:25:c4:54:af:25:
52:25:d9:70:9d:ba:e2:ab:21:54:75:b4:16:70:81:4d:e1:b4:
7f:97:a3:3c:39:b9:89:5e:7e:82:03:f1:35:7d:58:bf:83:8f:
2e:2e:aa:b4:96:8c:01:1f:5f:b9:a1:5b:16:6d:f1:fe:16:2d:
e1:80:c9:2a:20:c2:8a:e8:8c:65:f9:3c:71:e0:3a:e6:a5:78:
0d:d3:da:50:2d:8b:90:a1:9b:25:d7:e1:42:60:44:5a:95:9d:
73:f1:94:bf:5f:7a:f8:3f:c6:10:14:84:e0:4f:73:75:99:3c:
48:dc:4e:e9:10:d5:01:ca:47:a5:1c:fd:50:5c:f7:8c:3a:b6:
09:3a:6b:8b:a8:2b:a8:4d:7e:dd:52:80:f3:c6:cd:28:e5:a7:
7a:25:de:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:10 2025 by rpki-client