Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: EOR6iMGKf0rL5zgnPIuHJnmyPTKMFAnE7rJjwROrpes=
Subject key identifier: 0D:8F:B5:E2:D6:3D:87:83:AB:EE:FB:78:D2:2A:22:CA:A3:6A:34:B2
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 019A4C615DAD78FF122333F15EBFCCE6CD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 01:00:40 +0000
Manifest this update: Tue 04 Nov 2025 01:00:40 +0000
Manifest next update: Wed 05 Nov 2025 01:00:40 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: M2HtNYGx5DrkBonylExCwzaKOmoEsbsLgYxn+wkgI+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:5d:ad:78:ff:12:23:33:f1:5e:bf:cc:e6:cd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Nov 4 01:00:40 2025 GMT
Not After : Nov 5 01:00:40 2025 GMT
Subject: CN=0d8fb5e2d63d8783abeefb78d22a22caa36a34b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f9:29:12:bd:6b:e5:08:5f:5a:65:14:55:21:
06:14:ee:2f:8a:fb:47:61:89:01:40:ef:c0:9b:bd:
cf:61:c9:83:4b:2f:65:9e:f1:33:a5:41:dc:e6:d6:
cf:55:12:e1:87:bc:ea:eb:dc:3f:23:e8:f9:36:12:
66:12:3e:ee:d4:42:a0:77:05:3d:7e:0f:70:f8:b8:
a7:f2:9f:13:7a:17:fc:a3:f1:8e:d1:e0:77:34:72:
32:fa:e4:b1:0f:b5:92:3a:e1:c3:f6:47:63:3a:3b:
98:51:db:58:fc:a6:12:07:17:74:af:04:51:e8:ac:
a7:5e:ba:6e:41:a2:e2:fa:61:f7:ae:7a:1f:00:8d:
7a:ad:d8:99:48:2d:dc:9a:f4:d5:eb:22:f4:d0:2e:
5b:66:45:a2:ff:fe:39:7e:96:0d:ef:2a:e3:e0:15:
e9:71:f4:8a:70:6f:0e:8e:c1:0b:33:60:38:5c:d1:
3d:67:df:c9:17:2e:69:56:e4:86:1e:33:70:5c:39:
f1:3c:df:a0:9f:5f:7e:be:ee:a2:15:b5:51:80:ea:
56:6e:28:2e:3b:b6:3c:68:ae:1e:98:16:8c:a2:a0:
3b:1b:95:34:ee:6b:61:48:38:13:71:b2:f8:d6:26:
8b:00:ac:96:d5:d5:02:16:f6:4a:8f:61:96:fe:54:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8F:B5:E2:D6:3D:87:83:AB:EE:FB:78:D2:2A:22:CA:A3:6A:34:B2
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:43:e5:84:b3:00:a4:43:fb:ea:4f:10:95:9c:08:ab:95:8f:
f8:1d:6d:33:4d:ae:b4:2e:2f:21:e3:0f:89:ca:2f:19:b6:e6:
3d:64:0b:e2:39:3b:53:2f:88:f6:3e:33:3e:88:eb:eb:d2:d9:
ff:6f:65:41:f4:43:75:99:83:33:f3:43:34:71:c6:10:a4:4f:
d1:a3:82:9d:a3:ec:aa:3b:2e:37:a9:b2:7f:2e:c4:15:33:00:
6b:3b:15:f2:cf:b2:48:0c:a7:e4:1e:26:12:04:f8:17:d5:7e:
33:b7:ff:e3:51:74:6d:77:05:d3:e3:c7:08:68:61:43:02:52:
9a:da:fe:85:7e:97:be:cb:94:2a:5b:1f:c6:5a:34:cf:5a:08:
4c:ec:ea:07:d1:79:8a:ba:41:36:f7:ff:e2:d5:76:21:0c:78:
08:be:e8:cf:0a:01:72:9d:e2:98:52:57:82:95:c7:58:72:17:
12:4d:f1:a2:86:7e:b5:9e:74:57:29:af:e2:28:e8:bc:75:74:
f2:de:07:04:0b:44:23:a5:c8:65:50:ce:75:5a:c3:47:22:b3:
df:e3:21:73:d5:d3:fe:b4:df:88:64:e2:11:e7:5a:a5:11:fd:
d4:29:2e:43:af:8e:55:16:26:61:fc:bd:a7:ba:cd:15:bc:74:
37:5c:d8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:45 2025 by rpki-client