Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
File: xZKgYJDwFpQNMesbCbrhLZSxlbA.mft (raw, json)
Hash identifier: VddjXaNv7Ro3Atgka2MH1JdLFJea599met205QgaeFg=
Subject key identifier: 9C:70:98:46:0E:C4:29:D6:70:17:B2:F2:FD:B1:4E:50:F8:76:9A:5E
Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0
Certificate serial: 019A4EBD52D056503EDD7CE32C99CA3FAB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
Manifest number: 05ED
Signing time: Tue 04 Nov 2025 12:00:21 +0000
Manifest this update: Tue 04 Nov 2025 12:00:21 +0000
Manifest next update: Wed 05 Nov 2025 12:00:21 +0000
Files and hashes: 1: G68GMPXMUX3Qhn5n2oFwnwjBDXg.roa (hash: 6TErr3RLE+4ObuY83LCNvVHOw/1OAYj91Y93qk/e+tA=)
2: xZKgYJDwFpQNMesbCbrhLZSxlbA.crl (hash: zh8otgkbdYOoyTaJAU6HOWWaVU2Jkn7hDRBEJ60IAgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:52:d0:56:50:3e:dd:7c:e3:2c:99:ca:3f:ab:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0
Validity
Not Before: Nov 4 12:00:21 2025 GMT
Not After : Nov 5 12:00:21 2025 GMT
Subject: CN=9c7098460ec429d67017b2f2fdb14e50f8769a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:9f:79:5a:35:f4:13:98:5b:cc:29:4d:4b:
8e:30:e5:27:ef:36:f7:b8:5e:67:04:f2:fd:75:29:
db:7b:7a:56:7c:69:9c:88:66:86:9c:d5:8d:41:dd:
2f:3b:08:a6:68:b1:c9:88:eb:24:48:4a:b8:c7:65:
0f:91:ca:4b:9e:44:7e:2c:93:6f:45:da:4c:e6:f8:
37:79:a4:4d:d3:bd:16:0e:7e:5a:03:3d:9f:fd:87:
48:af:8b:00:5a:b6:65:ed:27:00:af:bd:4b:66:83:
93:40:03:5d:0b:95:7b:85:61:1c:91:d4:82:65:64:
a2:b1:60:94:9b:15:ce:8d:e9:f3:c4:13:6d:f0:9f:
ce:dc:c1:e8:92:10:fb:0e:fe:1e:27:f5:17:f0:de:
bc:dd:93:a5:8d:71:93:e9:59:e2:c9:e1:eb:62:26:
81:48:98:bc:42:62:7b:cb:aa:33:a8:8b:bb:32:4f:
2e:bb:67:57:9f:fa:9a:38:af:e7:1a:a5:c3:54:db:
68:d8:4e:45:8f:d3:9c:c8:74:33:4a:2d:ca:12:92:
d2:d3:72:cc:4b:fe:b0:bb:ff:49:53:8b:d0:7d:35:
08:bd:77:28:41:96:40:9f:46:06:1a:dd:92:01:e1:
bb:5f:90:e0:5d:74:a7:af:94:8d:67:5b:86:41:0e:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:70:98:46:0E:C4:29:D6:70:17:B2:F2:FD:B1:4E:50:F8:76:9A:5E
X509v3 Authority Key Identifier:
keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cb:d7:11:cd:3e:e0:51:41:65:7e:1b:f3:0d:d5:aa:8f:f3:
9b:3e:09:e0:2a:ad:db:cb:cc:58:5c:b5:27:bc:2f:c4:c5:1b:
ff:07:5e:bb:c4:35:57:54:4b:a9:26:bb:c3:fc:2b:71:53:9a:
9c:f4:b0:f6:f6:23:3e:09:67:c7:a6:52:fa:b6:2d:3b:df:62:
c3:4a:fa:42:20:aa:9c:91:6a:ef:cf:96:2b:c5:c7:de:ee:21:
47:a5:26:5c:43:1e:53:71:ab:52:1b:4c:52:80:ef:d5:c4:e4:
60:6f:03:4e:17:06:cc:0c:52:b5:33:98:82:8d:cd:31:4d:06:
b9:c8:61:ed:06:b2:8f:c3:93:52:9f:2c:b9:6d:d4:c6:75:e1:
82:c7:bf:e9:b8:a5:b0:69:2a:b8:d0:32:16:ef:cf:5f:e8:b2:
ea:10:b4:e3:a6:aa:81:eb:ea:e7:e6:91:88:36:26:14:e4:90:
05:01:90:7a:11:ac:4b:e4:36:ca:f5:11:dc:f8:a6:aa:86:da:
c7:70:8d:57:51:e7:4a:f6:5a:d4:43:9f:67:74:38:30:48:42:
6c:75:bd:32:ce:59:3c:d2:88:0b:e8:40:85:4f:a5:4c:bb:b9:
c7:72:9e:4f:af:b5:0e:7b:ee:f5:4c:50:a3:89:44:44:36:98:
7e:44:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:04 2025 by rpki-client