Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: s+HEPmUZruZ7o6GwZKPHL9YpyNGebsFAMBU4tIeGJw4=
Subject key identifier: 02:68:A7:05:50:85:A5:90:66:89:3C:1B:E2:FC:4D:9D:FC:BC:36:5C
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019A4F98CC30F5768903C26D5520363D3B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 141E
Signing time: Tue 04 Nov 2025 16:00:04 +0000
Manifest this update: Tue 04 Nov 2025 16:00:04 +0000
Manifest next update: Wed 05 Nov 2025 16:00:04 +0000
Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: zyf9JrgH7C7HicxTu1MtAkDpGKBc5uhOfpgS7W20Cyo=)
2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=)
3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=)
4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:cc:30:f5:76:89:03:c2:6d:55:20:36:3d:3b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Nov 4 16:00:04 2025 GMT
Not After : Nov 5 16:00:04 2025 GMT
Subject: CN=0268a7055085a59066893c1be2fc4d9dfcbc365c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:a3:48:e3:9d:c3:92:3e:e9:92:ee:c5:c7:
1a:94:78:86:42:56:4a:49:5b:21:89:70:f6:88:99:
88:41:ee:67:20:e4:2b:92:43:db:d9:54:46:3a:98:
f8:bb:2d:ef:d7:f2:16:fb:03:e9:7a:74:d3:f7:f1:
bf:67:e6:3f:ab:d3:16:dc:6e:d6:a7:1b:b8:e3:e5:
19:3b:8c:81:0c:6e:74:a7:19:dc:b0:49:35:69:56:
2a:4f:b2:5f:30:bb:83:90:ee:2e:41:a2:f4:63:ec:
94:2f:96:fb:de:dd:e5:11:f5:0e:9f:22:72:2d:25:
6b:6c:1d:1d:69:a7:12:12:56:b1:f7:3c:a0:40:ff:
7d:dc:2b:a3:6e:dd:13:6c:ed:a9:de:d9:90:7c:0e:
c2:72:bd:6c:49:a8:ea:c5:f9:bf:5c:c9:07:41:01:
ef:cc:5f:c7:d6:e3:94:47:cb:27:51:4f:32:c6:f8:
11:72:c3:70:b4:10:01:c0:18:c0:8e:b5:fc:3f:b8:
2f:6e:07:a4:04:ca:74:30:41:36:71:40:1a:e6:f5:
89:f8:79:69:1c:8e:a0:5d:5a:e1:0a:11:3c:a6:9a:
11:73:0c:e8:6b:02:69:4f:13:2f:88:75:fa:4b:82:
cd:df:0a:79:94:6e:d1:e8:96:a5:ed:9a:72:58:38:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:68:A7:05:50:85:A5:90:66:89:3C:1B:E2:FC:4D:9D:FC:BC:36:5C
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:11:74:57:ed:74:4d:ed:66:1c:d4:f5:1c:9c:12:80:47:
8d:92:0d:19:8d:8b:22:84:7a:4d:83:06:69:9b:86:b6:ad:f9:
be:e5:fa:1d:a2:8d:33:ba:67:4e:89:1b:f0:90:9b:5d:83:e1:
25:68:93:07:46:a5:fd:62:00:0f:f5:59:d5:c0:ce:4f:a9:ee:
ec:d3:ee:39:b3:6d:a0:71:22:92:95:22:e9:4a:6c:16:97:5f:
70:a2:ce:ec:fc:42:f9:d2:6b:30:bb:e7:ad:cd:1c:70:82:2b:
8c:b0:16:98:40:4f:67:18:d8:3d:bb:0c:eb:10:2e:8e:a1:e0:
35:5e:7e:06:4d:f7:a9:3a:e5:68:57:f1:b9:56:63:a4:f7:cb:
91:56:f7:ec:37:9c:45:94:9e:c8:03:3a:dc:26:62:14:71:23:
17:11:29:6a:b5:9e:c8:b6:67:c2:7f:63:18:97:78:4c:36:7c:
14:11:91:53:2d:1e:71:95:5b:70:8c:24:69:14:98:bc:c7:61:
93:37:a4:99:1f:b0:d6:e1:09:97:3e:94:9c:6d:f3:22:da:e3:
ab:0e:6e:ee:36:b6:68:2a:cd:83:3e:ea:43:7e:3e:4f:16:64:
7a:e2:1d:53:4c:af:5c:9f:e3:c4:19:64:12:e2:ae:18:9f:b0:
06:b9:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:40 2025 by rpki-client