Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: BvePTp4ZBF8ETnRq/a94rBr7kbW4yD22PXEf9+xIVjU=
Subject key identifier: 28:00:DB:1A:C6:10:80:F7:1B:0A:B8:B9:35:0F:FE:1E:E1:9F:3D:62
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019A4FCFD6DCEAF089F6EA90FB250EBA3EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 169E
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: znauWmeqaGspuAqudZFAvN16xNBiL4+aS3wltp+PcOU=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d6:dc:ea:f0:89:f6:ea:90:fb:25:0e:ba:3e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=2800db1ac61080f71b0ab8b9350ffe1ee19f3d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:76:da:b9:22:b7:92:05:2a:54:fc:7b:3b:9c:
ab:e7:4e:8e:62:3e:58:c0:87:29:17:40:eb:da:96:
af:80:a3:5f:0a:9c:6f:de:25:1a:41:59:40:f3:d7:
68:eb:d4:09:ab:b2:bd:7a:f4:93:39:9d:d3:82:31:
74:9b:d2:d4:42:78:ea:84:a4:70:8c:11:ae:7d:b8:
a9:dc:d0:d9:d1:54:44:14:95:ae:41:00:ec:c3:12:
55:db:5f:09:60:9b:f1:c2:87:ef:3a:13:2f:0c:49:
9b:8c:9a:68:dc:fd:5d:fe:71:1d:82:ce:0b:34:ec:
d1:c8:7a:0a:4c:fb:dd:d7:9b:c9:6a:a0:5f:ce:c0:
0a:e0:96:7d:6a:72:cd:a3:19:74:0d:9f:a6:74:ed:
3f:70:3f:e3:25:c0:da:76:56:60:66:08:b0:48:61:
95:75:51:35:74:ec:85:59:74:bc:b3:6f:f4:d5:f4:
3b:e6:3f:1a:a1:85:0e:4a:d7:c7:64:21:0f:d3:6c:
a8:ff:ca:84:95:e1:dc:e3:ac:29:5f:0c:73:f8:c9:
da:2e:8b:10:b7:93:92:7e:0d:bd:1b:f8:2b:4f:89:
8d:b1:b7:71:04:ab:a7:7c:8b:69:e7:40:57:8c:3a:
6b:04:d1:ba:78:e3:de:ad:19:44:e5:35:84:db:56:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:DB:1A:C6:10:80:F7:1B:0A:B8:B9:35:0F:FE:1E:E1:9F:3D:62
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d0:a2:37:7e:9d:8c:06:28:1c:a2:2c:a9:cb:45:76:1e:73:
4e:35:7c:bc:81:67:e6:23:b4:70:2f:35:14:c4:03:b0:32:ac:
6c:1d:97:78:2f:63:1d:ad:c7:74:bb:d3:1b:bd:73:85:97:4e:
cb:64:1c:92:8f:3f:5a:00:c3:a1:22:23:14:3f:89:95:46:6f:
a8:5e:87:72:d4:b9:a7:a5:0d:1b:3f:f7:b6:3d:be:ce:63:9b:
75:f5:d5:e4:dc:88:75:aa:e6:c2:9c:54:d1:82:36:0b:aa:f5:
cc:04:d0:8f:b8:ca:53:5c:67:c3:42:52:82:bc:c4:2a:dc:f9:
b8:dd:d9:d3:73:6e:4c:3c:c4:19:bf:f9:cc:e8:d1:29:b6:be:
10:e4:75:df:67:62:08:81:2c:2b:b3:d9:85:05:c0:3e:e7:a7:
a4:f8:60:30:bb:b0:60:4e:37:1c:09:5d:2d:3c:42:54:5c:c6:
99:53:53:b0:c7:0d:d9:23:7f:66:8e:d3:af:b4:3b:94:83:0f:
b3:c9:98:0f:9d:42:f2:48:23:11:bd:ec:ff:28:fe:90:55:97:
31:d6:71:90:63:96:63:c3:c1:c0:a8:93:10:02:59:28:8b:ba:
9e:fa:b0:25:21:d3:58:00:44:0c:25:53:3e:e1:91:b1:97:33:
82:e9:e6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:21 2025 by rpki-client