
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File: xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier: L4S6pmOkuKGzK0RlVPUY5WBkpcwK32fBBhMY09PbOAo=
Subject key identifier: E7:E7:10:FF:8F:C3:C1:F5:CE:AD:3A:8A:25:0D:1D:20:91:D0:8E:97
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 019A533F2244ACB053B3B7E12DB8E4D85A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number: 172F
Signing time: Wed 05 Nov 2025 09:00:37 +0000
Manifest this update: Wed 05 Nov 2025 09:00:37 +0000
Manifest next update: Thu 06 Nov 2025 09:00:37 +0000
Files and hashes: 1: 3V6q1-UeO36fLmJlReM_Gz13sMA.roa (hash: PylpUbq0fhCG4XR5C05AhKT8758HGTKJAPQDgwx9IwI=)
2: AGkNk2ZYDTGltyEXWoEVhtwt9oY.roa (hash: dlqvyvQ8Rvf4T+DKyr3OY+YZh3rtTCxaYzwHy40bMgA=)
3: BG-IwhP94ukLbxm2X3VxR4W5Nbc.roa (hash: 8rlyAUIx0xWV/NVKgvLdoyGMltHPy6j1FAqFmhNaiKg=)
4: NGphx2qhBW9gE8CfDHfoJNe6mG0.roa (hash: ECnwkjX75lQ4kRJVM7O1TZuPUXkcSD/08JlEytcC2F8=)
5: kwPr5vzt3-ySJo5MI-LQFyEqrD0.roa (hash: wgaBbEuKlBEgI0/63TFwHnJqqn8xIpVCdKTwEP7oyo4=)
6: pNjGXJ-Sea4Ni2pVy1WIRiDYEDE.roa (hash: nLlZJFuKRcHnPRrTWYdH+coSN27tpwhU2HPjFKfGC1o=)
7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: sy/4g34jDih0ax7f+PlMZUGTE0AMaqAxlS6TcIcTOGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:22:44:ac:b0:53:b3:b7:e1:2d:b8:e4:d8:5a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Nov 5 09:00:37 2025 GMT
Not After : Nov 6 09:00:37 2025 GMT
Subject: CN=e7e710ff8fc3c1f5cead3a8a250d1d2091d08e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:ff:1c:c7:d9:e3:36:4d:75:ea:83:15:84:
97:17:d7:47:fd:53:3a:22:da:1a:2e:8b:72:92:bf:
d0:36:f7:f5:52:84:2d:76:e2:2a:01:a8:df:10:34:
ec:be:40:b9:a7:88:94:3e:a8:6d:cc:e4:bb:69:71:
e3:28:84:6c:5c:01:b0:cd:70:34:7c:88:bf:13:01:
99:96:f6:b7:85:d7:a8:18:33:6d:af:d1:89:59:5a:
33:e6:50:49:e5:c9:99:e6:93:e2:e8:e9:38:75:6a:
d7:2a:83:68:7e:f1:c9:d2:19:b7:2d:e5:50:02:b3:
3f:24:9c:74:a9:13:ff:8b:68:47:49:97:2b:b3:e1:
7a:b4:bb:dd:eb:85:14:8c:79:9e:d0:50:c7:21:a2:
d5:dd:b9:d8:07:51:0e:b6:50:97:ab:e9:3c:86:cb:
c2:76:af:d1:ee:22:ae:2a:53:dd:f4:a8:4e:c0:bc:
06:88:36:ae:4b:b6:33:58:13:5a:2c:12:79:27:b8:
6f:0e:3f:7b:72:80:8f:9d:70:66:da:9e:20:97:35:
e0:a5:b2:7e:13:be:14:37:29:c8:4a:1b:47:b8:ec:
de:34:e9:b5:5c:4f:1e:f4:1a:b4:78:d9:88:fa:b8:
e4:28:f0:24:c5:fd:f3:e3:39:72:fc:47:cc:8e:ba:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E7:10:FF:8F:C3:C1:F5:CE:AD:3A:8A:25:0D:1D:20:91:D0:8E:97
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:b7:2d:a2:67:33:3f:00:eb:70:dc:2a:18:f4:fe:49:53:
a4:82:84:54:c4:82:b7:12:ad:79:1d:0d:fc:4a:a4:ee:a1:ff:
11:3a:3d:c2:42:82:25:05:e8:84:d0:85:92:87:4b:1d:7b:75:
ed:63:da:37:f5:a9:aa:e9:ff:e8:3d:66:06:36:c4:0d:73:bd:
53:28:63:98:2c:62:9a:c6:f5:7d:2b:b3:4e:9f:1e:28:94:50:
46:26:b5:0c:05:3d:d5:58:b6:f0:bd:82:48:90:af:00:43:80:
f1:1a:8f:1e:66:9d:21:5b:42:fc:be:cd:33:bf:89:f0:f5:0a:
a8:10:2d:1d:98:f5:1b:e0:70:a6:0f:b9:af:3f:1d:d0:b1:41:
67:39:1d:01:28:e8:a9:0b:90:d9:75:8f:ea:31:c9:99:58:38:
97:01:29:b8:c3:87:db:85:05:e7:cf:98:d3:e8:23:f9:6d:60:
f0:d1:90:7c:26:60:85:03:ac:a3:2b:85:25:08:07:1b:8b:43:
9b:3a:bb:27:aa:69:e2:47:3e:0a:54:3e:c9:87:91:b5:50:c2:
34:dd:fb:d9:31:00:06:76:2c:e1:24:60:20:e1:01:c0:7a:c9:
66:07:ea:46:ea:0e:58:96:39:3e:61:e7:e2:99:8e:d8:c9:42:
63:9d:31:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:52:18 2025 by rpki-client