Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: XdZzuKMIxuFb1MNCPWzLYfgoaSSslLWS21xuHDxyDig=
Subject key identifier: F0:91:9C:D9:91:16:88:41:EA:52:38:23:20:56:71:22:7E:8F:24:DC
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019A4DE1AF94827084EEBF7315C1F09359DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:27 +0000
Manifest this update: Tue 04 Nov 2025 08:00:27 +0000
Manifest next update: Wed 05 Nov 2025 08:00:27 +0000
Files and hashes: 1: RMEEjlIMkQn-eVpgsZKUIgD2naA.roa (hash: ueUC7fhvm5el60XIzYyUHLJfoQdXhv3L7jiX08frMs4=)
2: pD7HPK_aW3QH3PPrNYbHeMKhGy4.roa (hash: GJeO7Q27YxmGksDjROFyKoncsMRwot0oI2b9og4LUSw=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: lK8CPZx0crMOQbajUNn5faPXlK0qaerrOLFOLfRNVoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:af:94:82:70:84:ee:bf:73:15:c1:f0:93:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Nov 4 08:00:27 2025 GMT
Not After : Nov 5 08:00:27 2025 GMT
Subject: CN=f0919cd991168841ea523823205671227e8f24dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:8a:88:eb:c0:58:1a:40:e7:79:f2:21:10:
92:cd:5c:a2:21:54:c5:5a:6c:8b:5e:ca:3b:a2:fe:
19:7f:7b:4b:57:b1:e8:1c:35:5d:e7:1c:b9:c9:ef:
aa:b7:cc:45:db:a4:a3:96:7c:07:76:48:28:9f:2d:
57:9d:32:65:b9:8b:43:48:98:5c:10:8e:c6:1c:5d:
01:0d:32:e4:f8:97:cf:6c:c3:b8:59:56:9f:05:b5:
8d:45:a6:67:02:d9:eb:b0:14:c3:04:5f:1d:97:79:
4d:e9:95:da:70:07:ff:6c:46:16:a4:15:e7:44:17:
19:2f:fb:d1:42:4c:82:93:68:ea:c1:1e:94:50:6b:
89:1f:d9:7b:0a:fb:23:eb:f9:17:73:8c:b2:8e:34:
02:48:60:ca:c4:ff:4f:8c:97:ac:3f:2f:84:cf:03:
d1:e5:0c:1e:4a:50:d6:97:03:ac:04:7e:29:58:5b:
5c:18:49:90:39:ac:39:a9:60:27:7f:4b:84:17:8b:
1e:8e:8d:76:82:28:7d:2c:c4:44:00:b9:84:d9:ce:
c4:fb:e3:94:a8:1f:13:08:27:ba:13:52:70:49:eb:
b2:01:4e:a7:6d:45:e2:d4:1e:75:98:42:99:0f:3a:
e5:e3:db:a1:87:47:1f:32:0b:4f:30:6c:53:d7:07:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:91:9C:D9:91:16:88:41:EA:52:38:23:20:56:71:22:7E:8F:24:DC
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b1:ea:00:9a:38:b2:36:66:fd:50:f5:1c:cb:91:d4:bb:6b:
a7:42:78:b0:91:e6:e8:a4:ab:01:08:10:42:74:d4:6c:c2:f3:
10:85:54:60:64:ef:5e:e6:6e:3e:68:4a:e3:26:5f:b5:e9:f5:
0c:ae:e2:09:56:72:e8:56:d1:bd:40:3a:ab:37:b4:ce:42:83:
17:27:08:00:c9:d8:b8:c5:15:14:b7:07:9d:ab:72:dc:cf:95:
24:5d:79:11:70:9a:f3:5b:9a:3b:32:38:3f:d0:fb:50:d6:31:
cf:f1:08:4f:51:fa:83:2d:79:67:52:45:5c:2b:99:8a:bb:9c:
c2:13:65:6b:3b:63:2d:4f:54:11:fa:c2:ad:e0:14:5a:f6:c0:
fc:89:ad:28:1c:76:92:07:01:2b:70:af:66:07:d6:74:2e:fd:
aa:8b:f5:2d:ff:68:05:f2:3f:85:12:69:21:e9:9e:a1:3f:a9:
72:ba:16:9f:94:f8:ff:f5:6a:8f:9a:18:41:3d:9e:15:f5:ba:
e7:f5:cb:a6:e3:3b:7b:fe:8f:02:70:d0:f7:a2:6a:2a:44:28:
34:ba:4e:87:98:c6:9f:6c:ba:2f:6d:70:07:e5:aa:27:25:8b:
42:33:bf:2a:54:51:fb:c1:00:b0:d5:5e:d0:83:50:0b:2a:aa:
dd:37:22:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:01 2025 by rpki-client