Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: q4JtTbgiCg7iiPYAGFz7pAC0YForHWpFYnlFvU7VVnQ=
Subject key identifier: EC:E3:68:69:10:16:00:B0:05:3A:92:BD:66:A4:39:45:8D:18:00:A2
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 019A5150E86E715A69171BC4A37C69C8A06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 00:00:48 +0000
Manifest this update: Wed 05 Nov 2025 00:00:48 +0000
Manifest next update: Thu 06 Nov 2025 00:00:48 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: 1FRbWcNZdD+Dwr34YyunKB/E0FBk9j96ErOx9X2Uhzs=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:e8:6e:71:5a:69:17:1b:c4:a3:7c:69:c8:a0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Nov 5 00:00:48 2025 GMT
Not After : Nov 6 00:00:48 2025 GMT
Subject: CN=ece36869101600b0053a92bd66a439458d1800a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:00:0a:92:71:99:0d:64:de:4a:4e:ba:f6:
c1:17:17:5a:72:89:a1:47:33:e1:8d:08:a7:37:45:
12:72:4f:9e:95:99:1b:64:1c:8c:fc:40:98:37:53:
6f:fc:6c:16:61:d1:9c:64:f1:ea:ae:9e:f2:62:84:
76:3f:8a:9f:17:1f:df:5f:33:55:44:15:dd:fd:df:
b3:8e:d6:45:7e:07:9b:09:e0:72:e7:54:d1:c2:bb:
f9:6a:e5:2b:e5:ba:ee:7a:a5:5e:0b:81:f5:98:72:
5a:fc:c0:4b:69:d4:1f:aa:ed:4f:1f:bc:d8:9d:d7:
42:77:30:4a:91:33:47:cd:53:e8:a1:34:58:c5:59:
64:e3:f8:ac:f1:ef:41:c9:56:d1:72:12:6f:31:0e:
4d:33:64:21:f0:74:b4:10:b8:ab:9d:95:d0:a9:df:
a3:ea:f8:e1:93:31:b3:32:59:18:f5:75:67:e4:8a:
e5:c0:9a:5a:94:53:11:ae:45:39:83:77:3c:fe:43:
f9:65:6b:c7:cd:51:47:2d:b4:d1:9a:35:10:26:d5:
e1:c1:24:b8:0a:1a:c6:a2:4d:35:2d:03:29:b9:f0:
d8:9e:0b:50:db:20:f3:c7:3b:3b:69:1b:e3:2b:dc:
16:ed:65:49:05:81:ab:26:ae:97:50:d0:de:e6:e2:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E3:68:69:10:16:00:B0:05:3A:92:BD:66:A4:39:45:8D:18:00:A2
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:45:86:97:fe:51:e2:8e:dc:a0:4c:dc:3b:38:af:7a:17:19:
07:2f:c6:ea:11:2b:3c:64:79:7d:07:53:fc:a5:74:53:a6:4d:
57:ba:4f:62:db:2f:94:ef:2f:7d:96:f0:06:f2:1b:89:ba:43:
63:c6:fd:43:49:fc:1a:42:f1:21:6c:e8:73:2d:76:eb:19:d4:
87:0a:9a:c9:6b:7c:a6:d6:34:97:bc:63:e8:43:6a:4b:76:b9:
73:52:b6:cd:86:cc:07:9b:97:e9:34:c2:78:ae:8e:7a:63:56:
db:52:c8:4d:84:e7:96:2c:c7:7d:8f:1b:77:bc:12:b5:5f:f1:
c7:51:d5:94:4f:28:72:e5:b4:16:b0:bf:2e:15:16:4f:2f:8d:
c6:3c:66:36:81:46:4b:54:e6:cb:43:36:fb:ef:ad:2f:06:c9:
47:db:be:ba:dd:f4:0f:5e:7b:86:ed:01:c0:91:54:ff:7b:b3:
c8:0c:6f:c4:4a:a4:14:f4:1b:d9:89:28:9f:2a:45:5c:64:71:
61:c4:d8:18:a3:c9:91:4e:17:bb:c1:ae:e8:03:7b:93:80:15:
20:46:e7:da:e3:34:75:b9:04:b3:28:84:23:20:93:12:dd:3e:
dd:fd:c0:e0:4a:2c:b5:c4:b7:06:48:2c:04:a9:e7:03:06:ea:
16:59:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:19 2025 by rpki-client