Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
File: xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft (raw, json)
Hash identifier: oZvxG+IxKnI6skmswKOVzJUJkZdK/nWhqBywaDRMpsY=
Subject key identifier: 6B:58:19:8F:DD:F0:33:08:F2:8B:8E:F5:AB:E7:F5:44:BD:66:96:31
Authority key identifier: C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
Certificate issuer: /CN=c613276cbca6793c33457a9bf22fc10b382301f4
Certificate serial: 019A4D070D3A558D95B0E77BDB7520F391ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:01:38 +0000
Manifest this update: Tue 04 Nov 2025 04:01:38 +0000
Manifest next update: Wed 05 Nov 2025 04:01:38 +0000
Files and hashes: 1: b9YzzhOPHDVo_soINWMmjLB7fhk.roa (hash: lwz89foq6Y4dt/R5BV0uIhhLjFL2sOp+mEH46qLg0yk=)
2: xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl (hash: Y8gTLEmyIP6lHR424KMl0CvRjB38D7Py/mCJfMuEk2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:0d:3a:55:8d:95:b0:e7:7b:db:75:20:f3:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c613276cbca6793c33457a9bf22fc10b382301f4
Validity
Not Before: Nov 4 04:01:38 2025 GMT
Not After : Nov 5 04:01:38 2025 GMT
Subject: CN=6b58198fddf03308f28b8ef5abe7f544bd669631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:9b:09:87:45:89:83:c3:c7:ee:d2:11:66:
de:79:f6:37:a8:4a:ab:c8:fe:ef:66:9f:ce:57:47:
f4:d5:f4:8d:95:32:4a:88:61:17:10:cd:8c:af:14:
8a:ac:a4:a9:96:cb:0d:15:2e:39:1c:5e:43:15:bb:
6a:47:51:ad:0a:18:2d:c3:65:17:fe:0a:c8:3a:a3:
6c:99:cf:03:9b:68:c5:2a:62:17:cf:5f:86:8f:0d:
d6:b7:b5:b6:49:7c:29:32:2b:7e:cc:93:6d:74:ab:
7c:79:04:a1:d7:f8:8a:d1:94:d1:ae:4b:95:c8:4a:
b0:0d:52:df:98:b4:91:4b:27:c1:24:9f:fc:4a:62:
9c:73:66:d2:9a:b1:e2:02:4f:ef:f5:2c:ef:b5:47:
12:97:60:ec:cd:72:0e:92:ce:d3:87:0f:85:7f:2f:
8a:21:97:96:36:12:d8:a2:3a:89:24:2d:4b:ae:ae:
97:15:39:f6:cf:1a:e4:6c:6b:16:ca:80:2f:52:19:
d4:39:db:af:11:48:e8:5f:26:1f:96:d5:5f:89:64:
d0:5a:4a:93:72:df:37:00:2d:ad:01:06:cc:46:e5:
1c:18:93:2b:61:38:7e:9f:16:4f:c8:f2:59:ac:eb:
a1:28:15:1d:52:c3:67:a4:f7:00:0f:2c:ff:69:5c:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:58:19:8F:DD:F0:33:08:F2:8B:8E:F5:AB:E7:F5:44:BD:66:96:31
X509v3 Authority Key Identifier:
keyid:C6:13:27:6C:BC:A6:79:3C:33:45:7A:9B:F2:2F:C1:0B:38:23:01:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMnbLymeTwzRXqb8i_BCzgjAfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2818b6-1c13-4724-be92-8cd438b5f260/1/xhMnbLymeTwzRXqb8i_BCzgjAfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:01:ca:2b:19:9e:e9:2b:24:54:22:92:55:18:86:2f:55:1c:
37:65:47:6a:20:80:9f:3c:56:0c:de:be:9d:48:3e:2b:bd:8e:
d3:45:92:6b:b8:f7:9f:ad:6d:bc:6f:a8:bc:c2:73:2e:78:cf:
ec:21:87:5c:2f:7e:44:33:e3:2d:1a:59:00:ee:f9:e6:b9:ac:
01:da:f7:b8:17:6a:23:ea:4c:db:1e:e9:19:3e:b3:13:9c:ef:
1b:40:07:f2:03:14:c5:06:7a:2c:04:2e:a3:9a:ab:8e:81:68:
63:e0:7d:89:65:02:f4:e8:59:f6:fc:73:71:12:e2:14:59:00:
f3:3c:f0:e3:48:94:a6:16:55:c5:3b:3f:3e:bc:6c:52:4e:0d:
fa:e6:f2:87:b8:84:00:89:12:de:fa:43:fd:c9:a7:96:9d:81:
22:0c:06:96:19:e5:d3:00:c2:4a:a4:74:52:c3:da:90:03:0c:
3c:f4:f6:08:70:01:48:9c:56:73:73:2b:7e:46:6a:61:90:db:
7a:53:64:9d:64:0c:41:16:10:a0:7a:7a:7c:f9:6c:8a:67:b5:
41:9b:c1:4a:9a:3a:20:52:bd:50:fd:4e:30:dd:ad:fc:89:c3:
d1:ff:5b:bc:6e:51:d4:5a:bf:52:44:47:1f:a9:a6:9c:24:d2:
1b:a4:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:46 2025 by rpki-client