Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
File: XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft (raw, json)
Hash identifier: r89/ESX4AGZOS+m2ptmH8BEl7RzXgs49f4L3ndYPKWg=
Subject key identifier: 77:49:F6:3A:DE:0B:E3:EC:12:FE:22:14:C9:5D:56:95:C7:27:8B:9D
Authority key identifier: 5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
Certificate issuer: /CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Certificate serial: 019A4D742C3AAE04D21F03416B34EAA47A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:00:50 +0000
Manifest this update: Tue 04 Nov 2025 06:00:50 +0000
Manifest next update: Wed 05 Nov 2025 06:00:50 +0000
Files and hashes: 1: XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl (hash: l05GJi/kNGpLW/8BXQ1qdvIcowWx17MnBg3SxHJF8Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:2c:3a:ae:04:d2:1f:03:41:6b:34:ea:a4:7a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2643ec29f8b04f838d6e5dc5069c1064c5bd25
Validity
Not Before: Nov 4 06:00:50 2025 GMT
Not After : Nov 5 06:00:50 2025 GMT
Subject: CN=7749f63ade0be3ec12fe2214c95d5695c7278b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:71:d8:7d:b5:be:4b:f5:26:5a:ce:92:3d:
db:25:4e:c6:db:02:7a:09:59:dd:d8:58:bc:72:12:
74:f2:14:be:2a:a8:94:3f:b0:75:78:e7:0b:b4:fc:
6a:42:12:0a:4a:b6:63:38:5d:d6:2a:f4:7a:2e:5b:
2c:cb:68:25:d2:22:0a:2f:78:47:7e:6a:de:23:39:
f9:d3:c3:12:8b:71:4b:76:cd:59:65:20:61:a9:aa:
d2:bb:14:d9:f6:3b:55:95:71:4e:57:ba:35:f7:d4:
0e:2a:0b:8d:c5:14:38:83:47:13:f4:33:fd:6c:ac:
4e:42:9b:ba:ca:c7:35:dd:6b:88:3a:8f:f3:a7:bf:
b5:bb:b7:c8:fe:4c:46:db:bc:0c:f4:a8:22:78:8b:
2b:b4:3d:bc:9f:f7:2b:43:62:3b:53:fe:bc:fb:71:
03:11:dd:cf:c9:12:c6:10:06:9c:41:51:24:65:e2:
8c:d7:72:dd:5c:db:ae:91:13:79:b1:ee:e2:d8:93:
b9:de:5c:6d:2f:09:92:93:d0:c6:c0:9a:ff:69:d6:
c6:ec:a2:ea:69:32:bb:24:bb:aa:84:04:76:85:94:
b7:6a:3b:f3:ea:29:2f:a6:29:bc:74:a2:7c:87:35:
09:ce:8b:69:20:06:86:8d:0f:ff:3e:a5:48:1f:9f:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:49:F6:3A:DE:0B:E3:EC:12:FE:22:14:C9:5D:56:95:C7:27:8B:9D
X509v3 Authority Key Identifier:
keyid:5E:26:43:EC:29:F8:B0:4F:83:8D:6E:5D:C5:06:9C:10:64:C5:BD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZD7Cn4sE-DjW5dxQacEGTFvSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/82c4e6-0ab8-4f46-aed1-a4c3a85f3f0a/1/XiZD7Cn4sE-DjW5dxQacEGTFvSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3a:7f:1c:9b:f2:a6:9d:4e:39:9d:bc:0b:8d:cf:12:9a:b0:
33:94:93:79:83:33:5e:a7:f4:28:a1:3c:9e:9b:f0:b2:14:60:
ab:fa:b5:17:2d:f7:9d:71:0d:15:4d:a9:15:fa:4d:65:8b:8a:
03:85:b3:38:17:f4:d1:cc:83:0e:b6:50:20:c3:3d:0c:75:61:
ee:7b:5d:5f:8d:fb:65:c9:9c:a3:96:01:cd:cd:de:26:a8:9d:
79:0c:39:fd:96:33:ae:a2:b8:65:c6:dd:0c:fc:6e:46:22:ef:
0b:d6:98:55:9c:b1:c1:40:4e:ba:53:59:8f:09:52:17:28:50:
48:65:fa:32:13:0b:bc:3e:5e:91:a5:45:8e:94:c6:f0:ad:0a:
44:85:cf:28:4b:a3:b8:2d:e3:40:14:6e:84:d2:f4:e7:b9:bc:
b4:9a:ee:90:96:4b:00:f6:d4:16:f2:b6:85:04:bf:f5:ab:d2:
88:70:d8:b7:c8:ee:63:14:11:31:6b:76:60:99:f3:db:ff:eb:
2e:8a:3b:de:b7:91:5a:4f:f5:c2:f2:29:e5:bd:bf:a6:61:a0:
48:d8:bd:b4:09:2f:70:1a:6e:6a:b0:c9:1e:f7:c8:22:7f:2f:
a9:88:3f:e6:00:52:c2:7a:c5:24:67:3b:6c:34:65:b1:6d:95:
91:de:90:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:54 2025 by rpki-client