Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: XWHd/NnmMcanSa2KnEyGRmJ5w5rAI2or50gGRjo/71w=
Subject key identifier: C6:17:93:53:A5:01:78:1A:31:B3:37:70:2B:6E:92:8B:A8:28:A0:6C
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019A4E18DF19A68A584B6FCF17E3F41ECB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: S2p0lnCCUnPM1NpTWZTLd2OPlmrr6RGA2QZuecABK10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:df:19:a6:8a:58:4b:6f:cf:17:e3:f4:1e:cb:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=c6179353a501781a31b337702b6e928ba828a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:86:82:81:c5:61:65:f6:d0:fa:6b:2b:77:
16:e1:06:ee:ad:f0:57:b5:f5:3a:61:ce:d3:49:c8:
87:70:54:62:63:94:cd:19:b1:4f:12:be:dc:ef:c3:
22:60:2d:54:6c:e3:8e:eb:76:40:98:aa:06:39:02:
92:e9:0e:bf:3f:10:1b:21:48:e4:4b:d4:8f:3c:12:
5c:bf:a4:97:48:72:c2:09:10:e9:fc:9c:c0:71:56:
43:ea:e6:fc:49:36:bc:60:6b:1d:83:0d:19:48:c2:
67:1e:3b:1b:a4:b5:68:47:ee:dd:dd:67:db:6a:dc:
0c:06:f4:56:09:78:62:b4:a7:df:d4:9c:8a:7d:ec:
93:f6:16:82:43:b2:d4:66:54:1c:2f:21:c7:6f:c7:
3f:0f:e7:c3:17:41:e8:81:0b:d1:63:3a:1a:c8:26:
b1:15:cc:37:7a:32:8a:85:8b:af:ce:e9:32:35:da:
d9:71:2d:e2:ca:e0:3c:65:f7:6a:20:e4:8e:c9:28:
39:25:2f:db:3a:2f:a3:36:9b:23:20:84:72:df:9f:
19:e1:44:54:fd:97:d4:22:20:d6:39:cf:24:fe:30:
09:47:9d:68:65:86:32:6f:71:c2:90:0a:2c:c7:6d:
7e:1e:71:66:c3:6b:d9:49:96:61:fb:23:0e:55:0f:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:93:53:A5:01:78:1A:31:B3:37:70:2B:6E:92:8B:A8:28:A0:6C
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:dc:83:b1:7a:71:32:53:0f:b5:66:3a:cd:87:bb:0b:d0:f0:
0c:72:83:2f:85:ec:c1:75:1a:2f:cf:53:82:af:c3:49:46:96:
ae:e1:9d:83:b0:04:72:bb:c1:2f:03:b1:e8:48:16:fd:26:32:
70:76:42:fd:02:82:32:ae:59:7c:93:0c:a6:13:77:19:37:15:
26:2d:46:d4:13:f0:b7:df:6c:db:b8:b1:c3:a4:61:f1:60:da:
36:27:64:f6:d3:37:31:22:17:3f:d6:96:6c:4a:9c:f8:b3:a2:
c6:ad:07:a9:70:fc:41:22:09:12:42:9e:0a:2b:cd:3a:83:36:
95:1c:06:fa:a1:9e:e7:f0:5b:cf:65:99:e8:43:d9:6d:8d:eb:
e3:84:7a:d6:b9:a4:e2:42:ca:de:f7:f9:f6:3a:fa:7a:b7:ff:
a2:b4:b9:fe:98:ca:cd:a0:0c:f6:52:52:b2:11:3e:92:a4:cf:
43:74:d4:1c:ae:ab:99:f4:f0:2a:ec:a6:9f:3d:18:b1:7a:aa:
2e:7d:b6:a0:91:08:72:38:91:fa:d6:a0:f7:a2:5f:97:ad:c2:
71:04:98:6f:9e:6c:af:55:e5:93:ce:7f:40:56:cb:a5:6b:ce:
b4:52:fd:cf:5a:b5:df:70:f7:27:6a:c9:b3:ad:74:f0:35:66:
53:61:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:43 2025 by rpki-client