Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json)
Hash identifier: uZNi+7S4MgUWCJAlluV9E08cN1CYipcqeSzswM1fABQ=
Subject key identifier: 0C:C4:5D:9C:73:1C:CC:02:FF:3D:8E:04:4F:A9:62:C2:A8:C5:D6:18
Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Certificate serial: 019A4EF4D18738A62E251DD3245A943982F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
Manifest number: 0D17
Signing time: Tue 04 Nov 2025 13:00:58 +0000
Manifest this update: Tue 04 Nov 2025 13:00:58 +0000
Manifest next update: Wed 05 Nov 2025 13:00:58 +0000
Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: DFtO9btIbF3m/KpopqIV6OBySt6XxjOi8q9p+Jmvhdg=)
2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d1:87:38:a6:2e:25:1d:d3:24:5a:94:39:82:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850
Validity
Not Before: Nov 4 13:00:58 2025 GMT
Not After : Nov 5 13:00:58 2025 GMT
Subject: CN=0cc45d9c731ccc02ff3d8e044fa962c2a8c5d618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:ce:71:7d:c9:54:40:60:ce:9e:93:a0:d2:
39:9a:ef:ee:6c:d8:06:37:28:ef:2c:f7:db:71:72:
17:ab:95:ba:7c:0b:a8:f4:fb:76:8d:28:a1:94:4f:
1b:25:e5:65:da:f7:f8:3f:52:c0:3c:c5:26:93:e2:
de:4e:44:a5:49:77:91:13:c3:33:62:9f:d3:98:18:
54:4d:8c:53:72:c2:46:f5:22:9b:42:01:ca:38:57:
42:f1:da:a3:28:58:02:81:60:c9:7d:df:f7:c9:b1:
58:9f:72:36:25:62:78:90:1b:42:ea:8b:20:bb:a4:
f5:d2:2a:7c:48:2d:1b:78:3b:d5:16:f8:32:79:ba:
9b:24:63:f7:e5:56:e5:7e:e7:9c:ea:fa:2c:77:db:
20:40:9d:ca:ae:1c:8d:55:79:eb:3b:2c:ac:45:c1:
da:ef:dd:47:24:8d:a5:41:62:da:70:a6:2e:d5:b0:
69:6d:f0:47:dd:56:c7:10:43:4f:bf:5e:b3:44:a6:
4d:d0:c6:18:6d:a1:b8:b1:0c:81:15:14:a7:50:f8:
b7:f8:4f:db:91:e0:50:95:a8:3e:da:b0:8e:94:32:
6d:be:cf:c2:67:f0:5e:98:04:9f:8a:91:dd:3c:1a:
7b:05:54:ba:34:e4:fb:66:73:6f:8b:52:d0:15:02:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:5D:9C:73:1C:CC:02:FF:3D:8E:04:4F:A9:62:C2:A8:C5:D6:18
X509v3 Authority Key Identifier:
keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:1b:f1:32:cd:03:3d:df:97:dc:6a:29:c9:8c:28:55:7d:
f0:20:86:3f:4e:bb:6d:66:e3:a4:eb:7d:00:55:9f:c9:ca:b8:
5e:e2:53:de:95:37:12:90:85:ce:59:ca:5e:da:0d:00:b0:e4:
12:10:64:9e:f7:c1:6e:90:23:9d:fa:38:8e:13:15:89:04:68:
f0:c1:26:da:09:ca:49:82:c7:a3:46:27:8f:13:a4:45:09:aa:
46:09:87:0a:c0:98:d1:83:10:16:74:38:c1:7d:f5:2f:28:26:
1e:e7:b1:4c:05:22:60:4c:74:8d:ba:64:a0:b3:e9:d4:3b:91:
b5:da:1c:f4:dd:08:47:12:8e:a0:fd:06:41:ca:a8:94:a5:ee:
0e:81:12:7c:e3:9a:b6:05:9d:9c:12:c2:6a:f4:83:98:97:cc:
ed:e8:4f:af:e3:6a:75:4e:67:45:0c:39:47:8f:23:53:40:10:
a8:35:75:5f:18:d3:2e:98:8e:ba:ae:24:77:9d:20:36:45:fe:
c9:54:bf:01:b4:24:ac:68:8d:74:1a:65:f6:4a:60:16:8f:65:
20:dd:0f:d0:f3:51:62:4d:cb:32:a0:36:9a:b7:41:5f:f0:f2:
40:72:b4:ae:ed:3b:2e:90:f9:ea:cb:ab:31:29:ca:96:bb:c0:
ef:88:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:46 2025 by rpki-client