Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: CMm8QsL4bBHdbDd6yFlRP23DJzTE7FTF6VokBiv9JZM=
Subject key identifier: 35:1E:6B:6F:7D:43:3D:30:DF:D1:FF:D4:70:DC:FD:53:FB:F7:12:82
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 019A5150D61BB61913B819A6CF59316A674B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 160D
Signing time: Wed 05 Nov 2025 00:00:43 +0000
Manifest this update: Wed 05 Nov 2025 00:00:43 +0000
Manifest next update: Thu 06 Nov 2025 00:00:43 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: 7kUCPa4O4Wm0dNAXJhgVpXCGYi3dYKdjHOdz1oeIuAw=)
2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d6:1b:b6:19:13:b8:19:a6:cf:59:31:6a:67:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Nov 5 00:00:43 2025 GMT
Not After : Nov 6 00:00:43 2025 GMT
Subject: CN=351e6b6f7d433d30dfd1ffd470dcfd53fbf71282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:29:d3:0f:2b:93:2c:d3:5e:88:72:f7:08:
d5:2b:ab:c4:b3:0f:98:b0:74:f0:76:8c:3c:b2:12:
1c:4c:b8:37:f8:04:ef:72:40:13:da:62:7d:f8:78:
79:4d:52:f6:93:99:e0:f2:65:2e:0c:1a:46:5f:ef:
9a:d9:ff:0f:3a:7d:55:2a:b3:ba:b1:58:91:ea:f4:
4e:69:f2:1b:05:74:b2:ea:33:bb:a4:b6:aa:6c:11:
3d:d2:92:39:58:e5:a5:e6:e5:8e:fa:85:54:92:73:
a2:52:d7:39:fc:9e:47:fb:49:e4:31:ac:28:f4:df:
75:e0:b8:b9:2b:08:a1:e4:2b:e0:03:6e:ab:f3:8c:
76:09:7b:aa:a0:a6:43:b4:f1:74:71:15:72:ba:6f:
c6:7a:ec:f1:80:f2:eb:51:37:22:b2:25:2c:28:8b:
b0:bc:27:46:2e:6a:67:51:26:3b:f7:10:a5:0b:95:
9c:42:ce:d0:cc:ad:6c:7b:0d:d4:eb:3c:a2:e2:58:
ec:8f:92:6c:6b:c2:d8:90:54:1b:49:48:a5:fd:85:
6f:60:10:f6:b5:d8:7f:f7:87:47:b4:94:c5:ed:16:
df:82:a2:f0:08:d0:4a:c1:62:4f:79:16:e7:c2:7d:
3b:d2:da:03:2b:96:21:ca:94:cf:9d:cd:7a:9e:ca:
dd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1E:6B:6F:7D:43:3D:30:DF:D1:FF:D4:70:DC:FD:53:FB:F7:12:82
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:8c:b9:c3:66:e1:88:df:50:26:18:75:52:9c:10:cf:e7:
78:f3:d6:c6:2b:c5:82:2f:c4:a4:fa:79:f1:f0:be:f8:39:dd:
83:85:f4:17:7f:04:0a:b9:f7:02:32:37:a0:d5:e9:66:32:e1:
eb:4b:7e:f5:8d:6d:d9:b7:57:78:46:6a:60:01:f0:3c:a5:69:
15:b0:ae:fa:b0:9d:e6:f6:df:7b:b4:17:53:92:5e:79:a1:d9:
4b:f8:7a:f4:22:9b:4a:6e:32:f9:f8:af:d9:35:c3:eb:5b:19:
b6:80:b3:71:48:35:2a:e5:4c:36:d7:84:cb:c8:5c:82:9d:93:
d3:64:03:1f:3f:3d:e9:11:08:b7:d2:b6:a0:03:61:51:78:ce:
50:76:be:2f:42:d2:4c:33:1d:e8:35:29:7f:80:ce:12:64:fd:
77:1b:ff:30:b6:2b:ca:9c:95:81:a5:10:d4:c3:d4:98:4e:af:
a3:b2:af:be:39:56:a4:e1:f3:5d:11:78:fa:6d:af:12:29:31:
be:b2:d6:10:e7:3a:a4:9b:05:52:33:f7:3b:86:7e:07:a2:ec:
7e:0a:e4:5d:ff:39:42:c0:0d:00:86:d4:a2:82:23:7a:cc:2d:
6f:d3:a3:a1:27:ad:cd:e5:96:36:bc:db:2f:e9:fa:04:b1:a7:
10:2a:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:12 2025 by rpki-client