Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier: P9l/WCfyr6SZdVS2EVm6MPw7aqMhyU9VwwdyQ4SuFqo=
Subject key identifier: DA:22:52:38:E2:7F:BC:8C:89:AA:7F:E1:19:36:29:C0:4E:74:83:92
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial: 019A4EF5DDD55F54282BA7E4B36989723402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number: 065B
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: QXjexILuqCXldkX9x5V76rqNbwF1UVMKC3vJNPqDExo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:dd:d5:5f:54:28:2b:a7:e4:b3:69:89:72:34:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=da225238e27fbc8c89aa7fe1193629c04e748392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b3:92:49:23:50:7e:51:d8:79:e1:d6:f7:d8:
3f:d9:95:e1:c4:1b:4f:6b:74:4b:7f:4c:7d:6a:0f:
5d:76:0f:02:03:e9:55:5b:a6:19:b5:89:9c:14:37:
11:37:b4:91:c2:7c:b9:89:10:b6:fc:16:f5:54:d2:
02:ef:c3:e8:04:54:73:09:cf:f9:ed:c5:55:a3:49:
24:16:9a:15:f3:15:7d:1e:2f:a0:d8:42:e0:0f:c2:
78:1e:e7:91:c3:11:e1:a1:70:36:7f:bf:a3:26:d7:
1c:5a:5e:e6:93:41:c4:be:86:c1:3e:2b:ce:b3:29:
19:18:c9:89:31:61:a9:ce:4d:13:b2:1d:0a:85:6c:
81:cb:7f:e6:18:95:56:d0:ae:31:e8:aa:37:4a:74:
3d:d5:41:77:c2:26:7e:46:fe:56:a1:50:b7:b8:ba:
33:95:55:01:3d:20:f9:4e:ac:90:8c:62:6c:fd:2c:
d9:7e:ce:ba:3f:3c:a9:1f:ee:22:d3:48:36:9b:3e:
09:2e:05:94:69:dd:5d:ca:53:84:c9:8e:63:35:ca:
7f:4b:77:87:07:94:cf:f5:d1:a6:7d:ba:af:dd:dc:
4c:d6:91:25:fe:73:b1:5f:46:c3:9d:be:a0:91:eb:
61:69:b2:6b:d7:2f:04:73:32:9e:2f:70:b1:ee:91:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:52:38:E2:7F:BC:8C:89:AA:7F:E1:19:36:29:C0:4E:74:83:92
X509v3 Authority Key Identifier:
keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:85:15:b1:cf:77:fa:e7:92:1f:e2:e0:cd:8d:16:53:66:7d:
ae:3a:f4:e5:28:dc:48:4e:e2:44:25:1b:ff:8c:b3:36:b5:ce:
40:3d:2c:f1:38:4a:48:c9:87:c0:ff:4b:60:a1:2b:6e:e7:e0:
c0:6d:7c:fb:c9:97:cc:00:38:a7:ad:7b:1c:01:7c:3f:79:b1:
e6:d2:04:03:37:4e:2d:dd:58:f3:c7:0e:a6:4b:44:ee:c2:ea:
d4:81:34:fc:4b:de:67:5e:03:54:36:9b:9c:a3:13:55:0c:df:
39:66:a0:e1:fa:de:d6:eb:b6:3a:7b:b6:35:a3:d0:88:b2:55:
eb:71:df:ce:47:59:11:b3:c2:ed:5b:e9:df:c5:7f:b4:66:86:
9a:9f:c3:c7:34:e1:9a:5a:69:46:16:93:56:32:93:1d:68:94:
85:45:67:93:49:7d:41:37:c1:b2:53:29:3a:62:f6:d9:3b:3b:
6b:ee:86:4c:26:7b:96:89:3a:e2:d8:03:43:7c:27:7e:a3:c7:
c6:78:fa:8a:67:94:7a:dd:62:68:df:33:b3:a2:35:26:ff:8a:
a4:30:00:54:56:79:0d:df:62:35:8e:79:25:2d:ae:ef:85:7a:
de:b1:b1:c6:85:ef:7a:4d:99:f3:7a:2d:07:51:3e:93:b0:8e:
5b:23:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:46 2025 by rpki-client