Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: z6KBft/FM9DnyWwPMKHRYjlmyppT1taw4Oy3M4bLWdY=
Subject key identifier: 96:F8:58:2C:33:8C:54:34:2A:BC:56:0B:45:69:B0:AD:45:0B:19:BD
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 019A4E18B98820F0D660FE2D819DC5B44068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 5IdXodnCvQCBXqkFVtD9o-FVq60.roa (hash: 2nbX3JtMn955Hg0IyNJHCw2qggcvidZLlm6WpY5eTuM=)
2: 6X3WzJSI2dXN_Jv7mc-rIkDboF4.roa (hash: VArQPPbGMQURZ0LnkmgsgojEeQq56v52vVQluQg+EAo=)
3: EeFrQoh3jQtKJMeag4hpJyiwDGw.roa (hash: mlC92xTYSop56qk5KpOKiOZu5+t0f3FZU33GKeD5VtY=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: fitKCsM/ZP1AnIlakZfuhRucsoN1MMHH8lw2djWmFi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b9:88:20:f0:d6:60:fe:2d:81:9d:c5:b4:40:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=96f8582c338c54342abc560b4569b0ad450b19bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:30:f8:0e:73:3e:91:ac:4b:1f:f0:8d:42:
4d:d8:b6:fa:8e:3d:40:27:b3:d4:6b:25:31:3d:f4:
d0:13:08:67:f2:35:06:67:77:02:fa:a9:9a:01:26:
53:b1:00:a4:59:24:05:e8:28:c2:68:a3:70:0f:5b:
a9:7a:2d:82:3f:3c:e9:c4:a0:d2:02:ae:f5:0f:5c:
29:7f:18:14:73:2c:42:09:fa:45:aa:d8:44:46:90:
c3:d4:35:42:49:fb:8f:d1:c4:a6:9d:31:09:20:3c:
36:f9:9d:9f:cc:0c:2e:e7:92:9d:8c:a0:3e:6a:83:
8f:27:f4:58:4c:22:84:bf:a0:49:b3:fb:f5:5f:3b:
75:b2:21:8b:18:cf:8d:31:25:03:81:9c:17:55:20:
01:a1:5d:39:f8:b1:d3:4b:94:29:13:eb:72:c0:b5:
94:89:a9:08:2b:16:21:e7:8a:8e:34:2a:ab:9f:8d:
3a:69:72:03:9b:a6:41:e9:cb:ec:c1:aa:4e:03:7a:
71:5e:f5:bb:25:d2:51:b5:38:d8:38:7a:f2:56:c6:
47:18:16:cc:a3:ef:e0:7b:b5:3d:1c:67:f1:c8:e1:
e7:0f:22:29:09:cd:f9:6c:e9:b0:57:bd:ef:22:34:
1e:37:d1:16:2e:f3:df:05:8b:f6:a7:1e:1c:ec:b3:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:58:2C:33:8C:54:34:2A:BC:56:0B:45:69:B0:AD:45:0B:19:BD
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9c:b6:35:37:bf:eb:91:b1:e7:15:f8:df:90:76:45:1d:94:
6a:3e:32:4b:1f:cd:3a:70:f5:80:9d:e1:a8:ce:86:f7:8c:e7:
92:7d:1c:af:6c:6d:3a:4a:0e:af:2b:3d:ea:37:63:d5:fa:3d:
d3:4a:4e:bc:87:71:16:c3:69:57:5e:95:4a:94:d3:35:b8:33:
1a:eb:c5:51:2c:c6:06:1c:c8:ca:53:28:c1:f4:85:b0:7b:d5:
e9:7e:d0:b4:b3:9d:8e:a0:78:f7:77:7a:2b:85:0c:b3:a0:30:
a9:7b:7b:f4:0f:11:8b:5c:a7:da:ad:ee:9c:18:74:39:94:e1:
0c:29:39:2a:cc:0b:b1:b7:72:2b:55:83:57:18:33:92:ba:2d:
5c:d9:7e:d9:2c:6a:42:10:76:3a:91:a4:5c:a8:d9:28:3d:dd:
9e:9e:04:56:af:1d:13:df:89:60:0e:00:74:e4:8b:6c:fa:8d:
20:2c:bb:3b:b5:3b:d7:9b:31:39:f3:09:eb:d6:df:07:65:ea:
f2:e5:87:69:4e:60:4f:93:06:f8:2c:80:99:f1:65:e0:25:5d:
b5:a3:3c:b2:15:62:5a:ef:db:88:9d:cd:49:11:b1:25:fe:dd:
98:18:06:8f:92:14:91:e2:8c:20:eb:80:81:87:a4:84:65:83:
b6:5d:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:13 2025 by rpki-client