Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: i4TqWNpdW7L7/S5rp9EImPO6V1ug1VoSV2ENkQnZq58=
Subject key identifier: A5:53:DD:F4:BF:B1:68:B4:B4:D9:16:73:19:47:4F:F6:B8:C8:96:6F
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019A503DFB738F5226719CCA849EC96A6C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:30 +0000
Manifest this update: Tue 04 Nov 2025 19:00:30 +0000
Manifest next update: Wed 05 Nov 2025 19:00:30 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: iFkAm/tSDjLOtihVRfMfhQaZa3zbJuth8gYrR5+Byfc=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:fb:73:8f:52:26:71:9c:ca:84:9e:c9:6a:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Nov 4 19:00:30 2025 GMT
Not After : Nov 5 19:00:30 2025 GMT
Subject: CN=a553ddf4bfb168b4b4d9167319474ff6b8c8966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:2c:9d:08:77:91:57:11:91:8f:a3:09:1b:
e1:bb:24:24:ef:0c:ab:28:a8:3d:b2:3e:0f:59:1f:
8f:52:b1:43:7e:c6:f4:a3:09:5d:96:9e:5f:58:a1:
2f:09:1a:76:f4:b0:e1:b2:4f:98:db:c5:3b:bb:cd:
ba:7a:32:82:89:aa:c9:80:e1:fd:0d:60:03:91:af:
70:7a:66:59:58:c6:88:13:c8:e0:ad:58:12:ea:b9:
fe:2b:83:1e:e4:43:dd:1f:9f:45:f6:f5:c1:2a:d5:
61:39:6c:bf:f4:0a:94:26:48:c1:b5:bc:1a:b8:fa:
92:94:ff:26:91:02:3e:0b:d2:7f:e1:4a:b1:72:a6:
da:96:72:1c:22:af:65:1a:d7:9d:54:82:74:96:9c:
0f:84:0e:dc:ec:e4:f0:70:0a:7e:70:c4:ed:8d:77:
e5:31:76:c4:f9:59:9d:30:fb:7c:e2:4a:d7:02:65:
8b:d4:d2:af:ae:a2:82:43:08:5f:45:3a:7c:02:55:
02:21:04:2f:a2:ef:96:40:de:a5:a8:b8:15:a5:03:
41:c5:7b:b0:9b:d4:73:aa:40:3a:a0:01:59:97:9a:
9c:00:38:83:05:a3:40:03:fe:39:43:8a:d5:72:ac:
21:6d:a0:22:f0:9e:a4:3d:f2:46:d7:1e:51:40:74:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:DD:F4:BF:B1:68:B4:B4:D9:16:73:19:47:4F:F6:B8:C8:96:6F
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2f:ef:f2:19:ab:83:25:a1:c5:1c:94:9b:81:b3:87:1b:7b:
b5:90:61:66:43:69:3f:62:80:ac:b3:3f:2b:89:29:e4:ad:4b:
29:ae:58:1f:87:78:ba:63:48:78:f9:e7:82:6f:5f:1d:b7:03:
47:13:5e:0a:3d:42:65:5e:eb:f4:23:68:8d:9b:80:eb:8c:0e:
95:bc:ac:0b:cd:3f:09:7e:52:e8:da:1f:68:c0:22:a6:b9:b6:
ec:80:f9:45:e8:9a:a9:87:6c:54:e0:67:b7:43:b8:7d:b5:a5:
8b:2f:4b:ee:53:be:84:4d:a2:54:a9:1c:ef:5f:3e:bb:73:54:
33:fa:05:e9:52:c9:98:5a:5d:cc:cb:6f:0b:17:c3:d0:eb:e0:
33:5e:6e:ce:98:19:6c:f6:2d:78:f4:db:96:f6:77:fb:9b:55:
0e:68:1e:2d:ef:0f:88:48:b0:1e:07:dc:56:f4:d2:2e:c3:a4:
de:17:05:be:5b:ea:d1:66:8e:3e:eb:eb:4c:c5:66:61:23:09:
3f:2a:29:0f:6a:b8:6a:d5:46:10:40:33:86:23:85:a9:bb:cf:
09:00:c7:b7:8e:40:ef:c7:9e:ed:15:48:cf:3d:87:dc:9b:6a:
f6:82:4d:0f:27:bf:7f:48:58:58:64:31:6e:95:2c:6e:7b:29:
1c:c8:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:28 2025 by rpki-client