Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: TPkacJrhPnFxNNX+iB40WIDSpQMZKZylOKwbBtwBqxo=
Subject key identifier: 43:ED:D5:8B:A1:52:E6:CA:61:CE:E4:40:06:83:81:11:AB:8A:F2:84
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 019A50075E688DF7B7509212F8E36F8ED368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 18:00:51 +0000
Manifest this update: Tue 04 Nov 2025 18:00:51 +0000
Manifest next update: Wed 05 Nov 2025 18:00:51 +0000
Files and hashes: 1: 1gXwwzbhOt1hhfZYV2fBPdSTJbg.roa (hash: /+nPsAg4u83TQZZz46kK0QTPr5Dhmsg+FCh0CrrMzt0=)
2: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: U0p7aQtKwn76BI0kcfCoyu8QNDlNQXpHuVt97/UdUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:5e:68:8d:f7:b7:50:92:12:f8:e3:6f:8e:d3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Nov 4 18:00:51 2025 GMT
Not After : Nov 5 18:00:51 2025 GMT
Subject: CN=43edd58ba152e6ca61cee44006838111ab8af284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:eb:9d:e3:4b:f1:35:f9:37:95:c4:a6:cb:
04:b2:0c:45:8a:e0:85:0a:1c:73:9d:37:e3:df:7f:
54:15:e1:0d:6d:6f:cf:38:e6:a8:9f:e3:9e:45:e9:
2d:08:75:6d:7e:f3:70:68:71:d3:08:0e:70:fd:80:
fa:16:c7:bb:70:6c:77:09:55:80:f2:a5:f6:a7:cd:
b3:cf:0b:5f:dc:35:b5:d8:69:c9:36:c4:29:2a:8f:
94:77:46:b8:60:e3:54:ab:f8:94:20:b7:7d:68:9a:
36:89:08:2c:65:63:32:7c:f1:b2:b6:b8:57:9e:a7:
d7:fc:be:25:e3:e7:0d:fd:d4:a4:3b:81:b5:8c:33:
46:ba:1e:d4:55:52:1e:f6:d2:5f:3a:3e:04:20:c6:
1e:45:7a:f6:16:6e:9d:0e:af:ba:9a:96:27:4e:23:
85:db:a3:28:c2:7e:f0:ad:91:94:65:36:96:a1:f9:
b9:66:63:ce:ef:48:92:72:54:6e:b5:1f:0b:7d:d2:
ea:8b:b3:6a:37:fe:65:43:0b:86:ee:72:ba:20:32:
89:b7:19:61:a2:f3:73:87:88:7f:32:cd:5f:ef:59:
2e:9c:f9:0c:ca:91:5c:e0:6d:ff:63:f2:cd:7e:4f:
b7:3b:34:01:a6:dd:b3:7a:1c:c0:a6:ff:1a:26:34:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:ED:D5:8B:A1:52:E6:CA:61:CE:E4:40:06:83:81:11:AB:8A:F2:84
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ea:82:79:0d:bb:af:d3:4c:fb:24:50:66:66:07:a7:f0:ba:
cd:14:94:f7:20:95:94:43:df:20:a9:a9:8f:45:1a:09:c1:ff:
7f:dd:cf:01:dd:9f:17:c7:f8:84:9d:0d:74:74:0a:13:64:5e:
98:5c:66:ac:ee:7d:4f:0f:45:34:94:7b:10:cc:dc:f2:21:b8:
d8:a0:d1:c1:04:91:e6:ee:2f:b3:99:2a:5d:e4:80:33:5c:eb:
96:18:29:13:dd:cd:0f:3c:0e:cc:2c:8d:1b:03:d3:8c:e2:70:
79:79:d6:77:e2:a2:e4:61:c9:fa:7d:4e:41:ae:c6:41:3a:35:
a1:d3:a9:2b:77:7f:91:4c:75:60:68:8a:58:05:42:4a:75:6f:
f4:9e:1e:c2:a9:b3:bc:4e:33:22:8d:8c:71:76:03:a7:fc:33:
2f:58:6b:40:8c:59:28:10:62:68:c3:d4:ff:4a:3f:36:39:6f:
c7:ca:a1:be:14:d8:65:c6:52:2f:cd:ea:44:06:f8:3b:8b:53:
4c:05:e6:4b:25:f6:c2:41:72:8b:be:47:fe:7b:1f:8d:13:7b:
3e:c5:87:66:c3:bf:86:58:5e:b9:30:87:4a:98:73:1a:e3:7b:
4f:31:9d:e0:a8:08:aa:a7:cc:21:95:69:33:26:d1:64:69:e6:
9d:1e:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:00 2025 by rpki-client