Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: XpZ3rnYBiw16wWo1juMkwmQLh+KLr5mOLz7Lpayh0oQ=
Subject key identifier: 09:40:46:A7:87:9A:18:94:ED:B7:A9:BE:43:8D:C1:37:62:D6:6D:18
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019A4D73743693B48BFAEDF5D0CC15B2385B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:00:03 +0000
Manifest this update: Tue 04 Nov 2025 06:00:03 +0000
Manifest next update: Wed 05 Nov 2025 06:00:03 +0000
Files and hashes: 1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=)
2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=)
3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: i8L3xNQvrmvoYHj2Iz3fq8XapImM3GgxQPynxTX4lA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:74:36:93:b4:8b:fa:ed:f5:d0:cc:15:b2:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Nov 4 06:00:03 2025 GMT
Not After : Nov 5 06:00:03 2025 GMT
Subject: CN=094046a7879a1894edb7a9be438dc13762d66d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:e9:c6:07:e2:6b:d0:ab:1c:b0:1f:ad:2f:
24:f4:53:64:e8:0b:61:e5:00:df:9f:fb:82:30:5c:
8d:fd:79:6d:89:5b:76:af:2e:4f:98:cd:a7:bf:38:
df:07:58:b4:88:84:10:92:63:75:76:92:7a:70:b4:
62:aa:38:7d:b2:17:2a:bd:96:84:6f:a5:50:a2:a3:
03:97:b3:de:36:b5:f0:79:2b:19:8b:4a:5d:2f:17:
51:1e:1d:75:5a:7e:de:c1:bc:a6:9e:c0:53:8c:d4:
4c:ff:17:08:e5:d2:fc:a8:7a:36:d5:64:f0:6d:4e:
ea:48:31:44:3b:92:95:13:b8:64:52:87:42:92:33:
4a:ec:19:28:44:6f:5a:11:5d:9a:ff:36:92:e6:86:
47:89:82:e7:e5:91:db:45:ad:c5:07:1e:fc:3b:36:
c0:62:6c:c4:99:7f:bc:2c:d6:0e:56:a6:ec:e1:30:
d1:1f:09:ed:e5:70:5e:91:5a:0e:bb:c6:50:c5:4c:
f5:d4:05:c9:eb:25:5f:52:02:12:c0:57:58:32:ef:
55:da:d0:50:f5:98:a3:84:ae:2c:51:05:8c:7a:8d:
58:f9:de:ba:77:fa:f1:00:38:bb:02:62:2e:d5:b3:
7d:dd:2a:43:c3:ff:2c:fe:94:bd:77:82:95:90:fe:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:46:A7:87:9A:18:94:ED:B7:A9:BE:43:8D:C1:37:62:D6:6D:18
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:27:75:38:c5:70:02:32:0d:8e:e1:12:cb:49:9d:72:0a:
9a:c2:1a:66:2e:d2:3d:96:42:d1:30:72:b5:6d:9c:52:7e:74:
9e:d7:15:59:be:44:62:98:3d:49:99:48:ba:d3:4f:a8:97:9e:
5f:de:cc:51:c3:30:e2:46:c3:4e:75:94:48:d1:89:06:39:64:
e7:83:2b:53:89:22:22:bd:93:6d:b5:19:df:7e:b3:a3:1b:d8:
0f:fc:7a:c7:a6:d4:5b:f8:6a:d2:08:a9:30:f9:17:80:a7:90:
4b:e3:bf:ee:53:74:ac:7a:9e:2b:34:25:b8:a3:91:87:9e:a0:
22:26:de:21:ce:ad:49:69:cd:1e:d8:2c:34:56:7b:c9:ae:00:
ee:d3:d7:d6:b4:62:fc:f8:2a:1d:d8:9a:98:1e:65:88:47:41:
7e:28:48:00:3d:c6:b0:1e:8c:0d:cf:d5:f5:3a:92:48:a5:11:
b4:01:28:45:0b:fc:fb:cb:8e:70:6a:d6:e9:8b:3e:69:44:bd:
aa:63:0c:33:e4:3e:98:79:6f:01:f5:e7:26:d8:9e:3a:1a:cf:
10:8a:62:0b:00:87:bc:d1:97:8c:b9:53:f7:89:8b:19:c0:4d:
a4:0e:8f:df:87:16:ad:c2:b2:3d:68:16:8a:8e:97:10:3f:5b:
54:b9:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:14 2025 by rpki-client