Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: i8bE7izk9MpQ7X8OkZGMBV5+QmFm6ZV/hk12JWMHKIA=
Subject key identifier: 49:BB:37:D9:4C:B0:EA:1C:61:C9:D1:80:C5:3B:84:2B:69:15:F2:B3
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019A4C97F0E9FAEF468E232D5F86A2D3AF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 05C0
Signing time: Tue 04 Nov 2025 02:00:17 +0000
Manifest this update: Tue 04 Nov 2025 02:00:17 +0000
Manifest next update: Wed 05 Nov 2025 02:00:17 +0000
Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: neXVugOwJUEwR9lMdAtIjIH9UxXgRM0K/XgxpI2s3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f0:e9:fa:ef:46:8e:23:2d:5f:86:a2:d3:af:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Nov 4 02:00:17 2025 GMT
Not After : Nov 5 02:00:17 2025 GMT
Subject: CN=49bb37d94cb0ea1c61c9d180c53b842b6915f2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:75:24:68:4f:d2:33:b5:56:0a:fe:e1:b4:0a:
bc:04:cb:7c:5f:00:33:82:ca:c1:2d:02:5d:af:26:
ed:1c:4a:74:89:39:7e:ac:11:2a:c0:40:63:aa:c0:
7d:59:50:3a:75:cc:08:ac:66:fe:d0:85:11:ad:5e:
d3:7a:df:49:c3:b1:f7:c4:50:97:4d:0f:d2:39:a2:
bf:13:10:de:76:0a:4c:67:fc:4b:e5:9b:e1:85:8b:
39:f9:26:82:0b:60:4f:4e:7b:be:27:5c:11:98:fd:
95:3f:60:47:56:15:0f:3f:0d:61:e1:b5:c6:f5:db:
ff:09:1e:57:b6:a0:e3:7f:fb:e8:93:3d:37:2a:03:
70:5b:7b:46:3d:f0:60:1b:bf:c8:a8:37:91:37:2f:
80:6d:b5:12:be:e7:12:36:50:e7:e9:35:64:b2:cf:
00:8a:bb:0b:ef:f4:71:a3:0d:be:74:ad:13:0a:bf:
bf:0f:85:bf:c9:05:f6:c2:50:dc:8c:96:f2:52:c2:
64:90:c3:db:96:4b:4f:0b:a8:10:c8:29:bb:87:aa:
ec:36:34:f2:ac:32:35:1d:f4:04:b2:96:4d:b0:be:
7e:b8:7d:05:c4:a4:a3:9f:3f:11:04:51:34:8d:fe:
28:00:d8:94:1d:18:7b:c2:d2:11:fa:c2:7b:d8:9b:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:37:D9:4C:B0:EA:1C:61:C9:D1:80:C5:3B:84:2B:69:15:F2:B3
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:53:90:c5:33:07:49:47:59:d8:d9:b8:80:c3:31:8c:69:b9:
11:ef:b0:54:66:92:f9:05:1f:4e:d1:2d:97:ff:65:02:8d:ec:
b7:69:e3:10:0c:e7:4b:06:38:d5:b0:7a:09:b0:f2:63:4a:7c:
56:9c:cc:15:4e:02:77:3f:96:31:2d:6b:8b:84:87:a6:e3:28:
e0:4e:6a:12:dc:4c:5e:a2:c2:fa:f2:79:cc:ec:1b:b3:7c:13:
8c:b2:12:48:d1:7a:7d:03:4e:51:a3:45:73:81:85:0f:55:00:
8e:95:69:4b:af:b3:8e:13:fa:68:e4:20:40:23:a9:36:b1:3c:
93:4a:8f:92:c2:c2:44:0d:f4:b6:ae:f2:57:f5:f4:76:60:83:
84:10:8f:c7:07:1f:ce:4f:37:5e:c6:f3:5b:ff:03:de:93:19:
94:5a:f2:05:6c:c9:22:7a:f0:8b:b5:dd:6b:26:dc:fe:31:ea:
19:2f:6a:71:ee:db:5c:8c:4d:e8:62:5c:e9:0f:6d:e2:ef:a5:
b0:a5:b0:e7:e8:96:a7:42:eb:83:6b:f2:f7:31:af:f3:28:7e:
49:d0:02:66:4e:c8:1c:45:f7:2b:2b:db:89:3c:30:2a:8a:ab:
83:4a:cd:82:a5:8d:8a:88:9b:6e:62:41:18:2c:57:25:b7:d8:
9c:eb:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:36 2025 by rpki-client