Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
File: xVFHJIBoPGGXD2BfsZnuturhIYs.mft (raw, json)
Hash identifier: ZGGAJRJqQjRF/JK/t8zsFG5MS+o9gqPXH9DaQ8uIeBY=
Subject key identifier: 18:70:F0:2B:E2:2A:F6:D8:F5:4F:20:FD:88:C5:FD:92:89:C2:C9:99
Authority key identifier: C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
Certificate issuer: /CN=c551472480683c61970f605fb199eeb6eae1218b
Certificate serial: 019A4D06DB40A829BABE49CCF110F4B330A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
Manifest number: 140E
Signing time: Tue 04 Nov 2025 04:01:26 +0000
Manifest this update: Tue 04 Nov 2025 04:01:26 +0000
Manifest next update: Wed 05 Nov 2025 04:01:26 +0000
Files and hashes: 1: 7CZAgUvQPu-wrbV-N9bEd3CgOWs.roa (hash: sMayzuz7AI9s61a/aq9HH1Cc6asWKL5qDPVUoL1bHKQ=)
2: xVFHJIBoPGGXD2BfsZnuturhIYs.crl (hash: KCZRs2sgg7mUG38MAm6ZC9zhhkFarXk32nkSEG9BQz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:db:40:a8:29:ba:be:49:cc:f1:10:f4:b3:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c551472480683c61970f605fb199eeb6eae1218b
Validity
Not Before: Nov 4 04:01:26 2025 GMT
Not After : Nov 5 04:01:26 2025 GMT
Subject: CN=1870f02be22af6d8f54f20fd88c5fd9289c2c999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:82:33:78:ab:4c:78:9d:b8:e6:60:d0:9b:
40:dd:59:80:cb:62:05:46:7b:8c:44:15:8f:30:61:
de:05:bb:09:c6:07:3c:16:9a:0a:d2:38:5d:17:09:
eb:91:ca:0d:73:93:32:a8:68:97:2d:dd:da:db:47:
eb:55:e2:a1:ea:7d:0f:6b:c8:80:c2:fe:8b:99:00:
4f:56:fd:51:44:7c:ff:07:67:e9:7d:b8:17:84:77:
84:08:c6:ea:aa:85:76:ba:1d:70:82:05:40:50:a1:
7a:3b:49:c1:9f:0f:5f:c1:6c:81:1d:eb:50:ee:7a:
a8:46:f0:6c:63:63:e5:83:cb:07:a0:dd:61:9e:c8:
59:e9:ee:af:02:3c:13:dc:39:d9:c3:a9:f1:51:93:
f1:bc:06:cc:7b:55:9b:68:36:68:8a:f6:1e:34:b2:
6f:62:e6:fc:c7:09:22:6c:90:0b:6e:ce:0f:9c:07:
52:d9:27:c7:c5:05:64:4a:be:91:5d:8a:70:25:2e:
a6:ea:b5:98:91:5c:9b:97:36:fa:ec:d1:7b:5d:06:
6f:2a:b9:1c:40:f5:2c:27:64:15:c1:83:11:f6:09:
0c:e4:36:87:5c:48:70:fa:a0:a3:be:49:82:a9:f3:
20:14:a6:e5:64:49:a7:2e:2f:ba:ac:20:48:fd:5f:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:70:F0:2B:E2:2A:F6:D8:F5:4F:20:FD:88:C5:FD:92:89:C2:C9:99
X509v3 Authority Key Identifier:
keyid:C5:51:47:24:80:68:3C:61:97:0F:60:5F:B1:99:EE:B6:EA:E1:21:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVFHJIBoPGGXD2BfsZnuturhIYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/39ef81-db85-47d6-87c2-57eb5ef896e1/1/xVFHJIBoPGGXD2BfsZnuturhIYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d9:75:c8:b7:33:70:8f:12:aa:13:91:f5:a9:dd:31:91:59:
f2:09:f7:92:9c:05:69:11:66:d9:8c:9d:01:20:12:4c:cb:ed:
a6:9c:6d:88:a3:c3:0f:cb:7d:3c:85:d9:4c:24:0a:59:ab:79:
c9:6e:c1:65:31:15:33:8b:59:04:b2:8f:56:71:36:ef:d8:d3:
d8:ad:ac:51:ac:01:6b:9b:1a:55:2e:06:8f:49:5e:d8:50:c1:
37:e4:9c:5a:26:db:b8:71:40:eb:2b:07:90:42:c1:9a:4e:9f:
ee:1f:46:55:7e:65:fc:92:ed:38:e9:e3:a1:8c:4f:a8:fa:b8:
b8:60:99:56:1a:f7:71:62:ab:e5:2f:9f:45:66:02:eb:65:a4:
34:da:01:f2:68:56:57:f2:08:f3:a1:c3:cf:78:77:af:c5:c1:
c7:e5:75:f8:9c:bf:18:bd:3c:58:e7:7e:bd:9f:aa:98:a3:5e:
60:04:88:ff:2e:99:d9:f5:aa:a8:11:2a:08:e3:bb:a7:0c:1b:
11:d3:dc:43:09:7d:d6:80:f0:ed:45:e3:d8:04:59:f0:50:a5:
61:8f:d5:46:d3:51:f6:62:7e:4a:f8:c5:46:b5:1f:d6:f2:7d:
cd:e9:55:4e:4e:4b:0d:69:a8:8c:74:b4:8c:87:5b:a9:a7:86:
81:1d:e9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:01:57 2025 by rpki-client