Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: nWJS9HffHig3c7AStwwLgxeDZjZwnvjYBhWGg+7Oe+Q=
Subject key identifier: 64:C5:3A:80:E7:54:E9:97:4D:9B:8E:0D:68:89:09:04:84:AF:62:16
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019A4D3CD7392E7F21438E7E8848BC4C6592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 06FC
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: AYZF24EgOrNz6WZhkXpTDIKj7Uw.roa (hash: XuYEiMGlP57vEAu/M5jaVByOWmDwAZB50X25JNOPTpo=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: St/GMTL51WZU+42NBwaopn1yGVKekAbPlvzdHVnvwk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d7:39:2e:7f:21:43:8e:7e:88:48:bc:4c:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=64c53a80e754e9974d9b8e0d6889090484af6216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:61:d5:f1:88:34:dc:95:5e:00:12:4b:14:
5f:d1:35:0a:43:24:f0:53:d5:75:a7:de:86:76:70:
87:a8:04:31:8c:b6:2c:e6:5a:3a:5b:b9:10:b8:6b:
db:44:d3:0d:39:85:f0:5f:20:8e:ff:88:34:bd:4b:
b8:fd:c1:f8:bb:24:93:d3:4d:2c:8e:05:22:6e:94:
63:8e:a5:c0:52:ad:55:c6:64:d5:03:a6:5c:d5:58:
59:93:07:97:9b:5d:14:73:47:91:4c:3d:b2:2b:ee:
c6:4e:82:95:ed:6b:57:10:3a:aa:30:7c:fa:06:56:
0d:80:e2:08:fb:7f:c4:e0:c3:7e:0f:bf:3d:08:9c:
9e:08:24:f1:05:cd:0f:09:76:60:d5:76:1a:73:c9:
d6:e3:fa:88:8b:89:73:77:02:e5:9d:a9:4d:c5:3d:
45:ef:b1:56:80:47:fa:e1:f7:11:51:32:2c:90:e7:
82:b8:36:88:3a:ab:ba:a1:ed:81:91:26:8a:d5:ab:
bf:a5:dc:95:11:45:2e:3d:3a:e9:43:d2:20:91:55:
73:45:da:28:9a:bd:4e:4e:c2:fc:5b:f2:ea:ac:71:
2c:7a:fe:59:59:84:c9:6c:8e:e6:0d:76:6a:ba:05:
bb:14:8b:50:99:dc:61:3f:e0:2a:d1:71:91:fc:1b:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C5:3A:80:E7:54:E9:97:4D:9B:8E:0D:68:89:09:04:84:AF:62:16
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3c:7b:e0:34:67:68:06:8d:62:6b:b2:30:f5:15:08:fa:b6:
13:1e:37:74:f6:dc:42:30:fe:08:a6:f8:61:b7:f5:53:a1:f9:
22:c6:81:42:e0:cd:2e:2a:34:a6:e4:c3:7d:c0:d8:bd:75:58:
8c:2d:15:1f:e5:18:05:be:5c:0f:c8:23:52:fc:77:86:a0:b1:
ae:9c:9e:23:76:bb:d6:e4:3e:95:15:31:65:f1:f4:91:f9:91:
39:13:96:fc:af:d5:6f:d0:8c:75:a2:32:bd:6d:c4:13:8a:27:
16:6d:99:3d:1d:56:42:6c:f6:05:58:ef:47:13:24:ff:47:28:
0c:c3:4f:ef:ac:80:fa:4a:50:cb:db:eb:48:b3:90:c4:ba:da:
ac:5c:84:94:3b:c9:74:f3:7d:be:ba:ba:5f:00:b7:9e:71:62:
d9:7a:24:4e:0a:dd:dc:be:b9:94:fb:66:8d:2e:52:7d:34:f6:
cf:37:67:9e:93:f5:f0:d7:9e:29:47:09:dc:31:42:2a:6f:7e:
6e:2f:7b:b6:f6:ea:c0:0f:bc:56:6d:50:50:44:7d:7e:56:04:
c1:f3:31:74:80:11:bb:1b:fd:9e:8e:b2:15:11:d9:36:05:e8:
78:61:3a:01:8c:4f:e4:58:43:f2:49:cf:e7:4d:bf:da:96:31:
dd:85:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:45 2025 by rpki-client