Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
File: XeYTaCVSAQKY86aUoA18WQYGC5U.mft (raw, json)
Hash identifier: bG5XJZ4/SKDGhl69psKIVfzi7Ik1BJrniJoTvd+CtOo=
Subject key identifier: A1:EB:05:E8:74:65:1B:DB:13:30:73:93:31:7A:43:8F:D5:33:0E:83
Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
Certificate issuer: /CN=5de613682552010298f3a694a00d7c5906060b95
Certificate serial: 019A4DAAD385F3AF3B03AFDCFBEA5440B059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:31 +0000
Manifest this update: Tue 04 Nov 2025 07:00:31 +0000
Manifest next update: Wed 05 Nov 2025 07:00:31 +0000
Files and hashes: 1: XeYTaCVSAQKY86aUoA18WQYGC5U.crl (hash: 4KRh0+A4GJ90iwMOAdoDNqdBJXCmee1BBoJ46o3ihaw=)
2: auYlcZnEp-yqavQsok9_TPLHAq0.roa (hash: kbe3quRrlIxTjuDhfKrAisNkV8HOTBuxWR/raJshlU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d3:85:f3:af:3b:03:af:dc:fb:ea:54:40:b0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de613682552010298f3a694a00d7c5906060b95
Validity
Not Before: Nov 4 07:00:31 2025 GMT
Not After : Nov 5 07:00:31 2025 GMT
Subject: CN=a1eb05e874651bdb13307393317a438fd5330e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:a1:18:5e:66:68:bc:e2:41:23:ec:da:9e:
7e:30:17:b3:23:d4:aa:0f:3e:98:45:87:83:a0:2d:
f6:ee:ac:09:25:01:15:45:37:9e:ac:6e:77:26:bd:
10:49:95:0d:46:3e:3f:c2:20:47:cd:f0:86:83:71:
c5:21:31:19:00:33:dc:f4:c8:f5:e2:6a:c8:a0:0c:
12:08:5b:b8:70:be:0d:65:cd:bd:ea:35:ee:bb:0b:
34:cb:44:ea:cd:3e:ea:8a:07:b2:e6:62:1c:6f:67:
61:77:94:50:c0:af:e7:4f:31:0e:3d:e5:30:fd:51:
88:75:0e:f6:d8:37:cd:e8:96:06:8a:aa:8b:cd:34:
60:5e:8f:39:3a:71:df:41:35:08:95:3e:4b:20:be:
1d:99:0c:69:4d:6f:0d:ab:7f:b0:b2:b6:89:ba:d1:
b8:f6:32:de:55:92:56:a4:dd:cc:13:66:48:9e:6f:
e9:33:81:18:15:3c:e4:85:12:11:57:37:55:08:8e:
4c:31:5d:02:31:8b:60:6e:96:96:cf:7f:00:86:d0:
8c:13:53:e7:c7:87:c0:6a:c5:b2:3d:8c:e6:74:ad:
d1:43:7a:c1:61:0b:9d:8e:8f:bf:73:68:3b:82:48:
ea:ac:ea:a5:0a:03:40:ea:96:ae:db:0a:46:22:d8:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EB:05:E8:74:65:1B:DB:13:30:73:93:31:7A:43:8F:D5:33:0E:83
X509v3 Authority Key Identifier:
keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:00:38:b5:c9:7a:f8:38:9c:a1:27:e1:57:f1:72:78:dc:59:
4b:32:3c:45:91:9d:f8:87:e7:96:1e:ea:19:9e:ee:b3:92:d0:
64:37:23:d4:19:a0:7c:90:d1:80:60:ee:61:b7:cb:82:9a:95:
b9:3d:87:eb:58:c0:28:23:b4:6a:27:91:24:af:3a:0f:1f:0b:
38:88:81:10:e5:0f:0b:34:30:4f:cd:b4:7d:b2:2b:16:64:93:
77:92:05:08:b5:00:ce:f7:2e:be:54:ec:57:2d:f8:57:25:85:
6d:fd:a0:cf:ba:c5:72:94:c3:d7:8b:8d:65:67:e9:78:3f:44:
9d:a4:7b:00:67:d4:c4:91:3f:eb:89:56:7b:5a:5c:b3:7d:98:
28:19:1a:ff:72:fe:be:34:04:a9:d0:e2:37:6d:ef:ba:c7:16:
16:50:19:c6:45:32:af:d3:98:74:cf:9d:21:67:c1:11:2e:c8:
1f:fc:d7:12:12:65:55:be:06:4f:13:93:a9:2e:c7:8d:55:cb:
84:71:1e:b3:41:09:d5:10:eb:76:c6:45:aa:98:dc:b0:c9:90:
ce:e9:80:74:37:76:10:b6:5a:07:8a:16:07:a5:87:cd:91:eb:
74:68:98:4c:11:4b:c8:9a:aa:0f:d4:fe:9d:73:6e:50:a9:83:
10:a7:f3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:43 2025 by rpki-client