Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json)
Hash identifier: yYUocM83kxfLK6C7DScgZw5hcWhDJ2LmqVs98Bjg9M4=
Subject key identifier: 18:5C:D5:A4:9B:46:EA:FE:B1:4F:91:51:81:8C:94:72:C9:1F:04:F1
Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868
Certificate serial: 019A4DE15845F7D85CDB7B3D59559CFC7D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=)
2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: Gs5pgwN2z8s33FZKKnHTRK+2Kq6wu5s9RRnu1nx8id4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:58:45:f7:d8:5c:db:7b:3d:59:55:9c:fc:7d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=185cd5a49b46eafeb14f9151818c9472c91f04f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:83:c4:5f:b9:6e:fa:36:3f:ba:ed:f3:f7:
b9:93:9d:20:46:ac:7c:12:49:2e:72:a4:84:47:74:
80:e6:b3:66:ad:d6:61:be:1f:89:fe:59:d9:02:39:
b2:1f:64:c0:d8:68:4a:12:c1:d1:ff:1c:1c:4b:b3:
98:00:d5:d9:c5:73:da:e3:e7:cb:db:6b:bf:c2:c7:
7f:55:63:ab:3d:84:ac:f5:86:de:80:57:95:ed:50:
c2:23:ae:c0:df:f8:0b:4b:78:9d:d7:a6:a9:4a:03:
ca:2d:2f:7d:9d:25:90:4a:c5:98:8c:43:ef:e5:83:
8b:77:ec:5c:37:88:f5:60:b6:89:c8:b0:5b:c6:37:
55:9a:a0:c4:d5:55:3a:97:36:80:7c:12:9e:d3:97:
5c:cf:9b:0a:dc:23:3d:bc:02:10:3a:46:28:bd:eb:
67:fc:5c:27:c3:1e:b8:fe:52:f7:13:21:ee:86:9d:
33:c4:85:70:6d:4c:9c:e6:2d:5b:ed:b4:25:5c:5f:
84:6f:85:93:ca:59:58:4f:76:b1:9b:36:c6:e6:e5:
10:19:49:ab:56:8d:1e:2a:0d:fe:69:66:84:4b:c7:
ba:9d:d4:3b:e2:dd:f9:b3:43:1e:56:1e:39:bf:42:
b0:6f:4b:c2:85:be:34:ea:ab:c6:bb:d8:ad:b3:9d:
8a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5C:D5:A4:9B:46:EA:FE:B1:4F:91:51:81:8C:94:72:C9:1F:04:F1
X509v3 Authority Key Identifier:
keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:46:08:be:a8:c4:e0:9b:8d:a0:39:2d:8e:84:fa:2f:f6:dd:
68:fa:b5:a7:1a:38:6b:d7:d4:30:94:80:de:77:4b:17:aa:72:
35:df:71:de:d2:c1:60:a6:02:c5:20:2f:7d:83:3d:eb:ba:8c:
45:70:f6:c4:d6:f7:7a:12:9a:bf:74:b2:52:ed:43:f4:91:5b:
74:db:36:ac:a6:33:0a:f6:ef:4a:60:72:23:74:fc:c7:bf:44:
02:21:bf:ca:71:a4:76:9d:41:ac:c1:aa:4e:18:4f:f3:f9:df:
f6:ad:ef:4e:b6:c8:4d:25:2e:ac:87:23:71:2f:5a:fe:ae:86:
c2:22:43:72:5c:c6:bb:fe:aa:02:f3:75:bb:92:14:f4:37:3e:
59:a7:ce:90:dc:1e:4c:b3:48:b4:68:ba:c5:ce:b9:21:c1:77:
de:8e:72:4d:b8:40:ba:1f:7f:4e:5f:9b:aa:e2:0d:34:57:9c:
96:3c:2c:8a:62:99:71:2f:cb:51:08:d4:b6:da:1d:50:6f:20:
a7:f7:28:27:43:4c:20:9f:0f:5c:13:f9:c3:61:37:5b:56:62:
fc:5b:11:11:51:95:ea:cc:54:41:58:79:6c:4f:ef:04:6d:94:
17:b2:10:69:34:65:00:be:39:be:b5:ab:27:48:25:af:88:5c:
03:44:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:23 2025 by rpki-client