Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: XOZeVum79rtTXg5irvHv312t8sx12m3i/Uf2xGnYdHg=
Subject key identifier: AB:CF:76:06:C1:24:DB:49:62:AB:99:97:13:54:FF:D1:5F:37:AE:C2
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 019A4E4F88C5433A1EED8558166CA0A88653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:26 +0000
Manifest this update: Tue 04 Nov 2025 10:00:26 +0000
Manifest next update: Wed 05 Nov 2025 10:00:26 +0000
Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: A3EPb1vuDwZ1Dq/Ly4hjsw2SiunrY/YNKYlHi/ofG4g=)
2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:88:c5:43:3a:1e:ed:85:58:16:6c:a0:a8:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Nov 4 10:00:26 2025 GMT
Not After : Nov 5 10:00:26 2025 GMT
Subject: CN=abcf7606c124db4962ab99971354ffd15f37aec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d3:76:25:70:8b:7f:5e:28:44:98:66:34:77:
71:f6:11:66:52:f5:85:18:0c:1d:e3:f0:83:fc:4b:
df:9e:68:44:b3:ee:e8:2f:b1:b3:08:13:88:cf:3e:
d5:52:ad:cc:dc:00:f0:e1:69:bd:c5:d1:8b:3c:56:
96:2d:5c:de:6e:60:05:6c:86:81:89:25:7f:b3:46:
c8:27:df:34:3c:0d:b0:4c:bc:4e:39:51:77:a1:21:
e3:69:a8:d0:b0:a9:75:70:e2:5a:9d:a9:fa:c2:55:
16:3c:2b:90:fd:f7:34:aa:8a:22:76:42:64:55:29:
a0:e9:e1:89:8a:3c:8a:f6:cf:08:2d:cd:9b:75:dc:
4b:dc:2e:9e:5e:0e:b5:c6:6b:c4:7f:e3:6c:6b:2b:
39:dd:fb:49:4b:43:82:51:86:07:55:10:e3:05:d9:
53:9f:c0:ac:14:21:50:73:44:d0:b0:ab:ca:c4:89:
69:aa:19:60:86:fa:a7:7d:da:e6:e2:30:73:ad:46:
64:73:cd:9a:5e:e8:b2:61:fb:7c:4c:bb:2d:06:e5:
90:75:99:92:60:45:d9:31:36:08:29:92:68:3a:2e:
8e:9d:ed:a5:17:fc:a4:9b:3c:1a:67:3d:a2:74:20:
94:cd:dd:d9:25:df:fe:2c:9e:a8:56:36:c6:10:69:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:76:06:C1:24:DB:49:62:AB:99:97:13:54:FF:D1:5F:37:AE:C2
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:fd:26:4e:84:c5:a2:78:40:e2:81:e3:55:d0:ec:56:17:a7:
1f:a6:a4:95:d7:fc:19:68:de:99:41:c9:28:0f:31:0c:1c:fb:
0a:7e:c9:8b:96:24:5d:c9:a1:cd:72:97:2c:29:c4:48:e9:90:
97:4f:9e:f0:b2:a7:a8:fc:24:b8:3f:40:96:f8:6b:b8:ee:f8:
df:5d:7e:9b:dd:08:2e:09:cc:6f:25:de:ae:5b:a5:e6:1a:e1:
e7:59:b1:6f:d1:78:d8:43:97:b7:a9:2a:ce:8f:19:b0:00:01:
43:2a:76:47:ad:84:8c:70:4b:3b:58:32:ce:6a:d9:32:c5:12:
2a:b1:db:34:ee:1a:65:65:d3:dd:e3:50:d5:e0:d8:6b:23:ee:
5d:7a:82:b6:f5:26:1f:ec:9d:c7:6d:1d:d1:2a:f2:2b:cb:82:
2a:18:62:11:71:6a:ef:8a:d1:3d:ff:94:10:5b:4a:ad:65:ba:
91:3d:3a:e4:38:86:98:0c:38:e0:b4:01:ff:36:8c:ae:d7:17:
4f:d1:d9:3f:0b:8d:12:d1:25:2b:45:d6:1b:63:5b:17:ac:66:
e7:7a:1e:da:84:c8:4b:e0:f8:46:2a:52:37:3a:19:7a:a7:b0:
72:84:50:49:f9:92:47:2b:0f:bd:e3:6d:18:49:89:d5:73:89:
cf:b7:33:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:46 2025 by rpki-client