Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: Cgt/284caLqIcmQ/5Ri4PURAwwJAnhX+qCW1ATAXw0k=
Subject key identifier: A9:17:4C:3E:AA:FB:13:DE:20:49:00:5E:C2:B0:D4:5C:EF:8C:26:F0
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019A4D73D398EB4686D7610260F876186AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:27 +0000
Manifest this update: Tue 04 Nov 2025 06:00:27 +0000
Manifest next update: Wed 05 Nov 2025 06:00:27 +0000
Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: 7IwgMSfWDdqMj+DLy8TWu3gxJw4N8BOWufDKDSfaf/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d3:98:eb:46:86:d7:61:02:60:f8:76:18:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Nov 4 06:00:27 2025 GMT
Not After : Nov 5 06:00:27 2025 GMT
Subject: CN=a9174c3eaafb13de2049005ec2b0d45cef8c26f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:7c:e0:d1:7c:f5:27:78:94:6a:69:4c:2a:
fc:ce:ca:c1:15:eb:fe:7b:f0:4c:71:60:b3:0c:ee:
41:5f:1a:8e:ef:2d:bf:84:98:c9:77:c5:a0:3c:f9:
91:fc:76:28:56:2e:6f:17:1a:50:97:f7:28:18:17:
94:3f:89:3e:95:29:fb:b1:c5:b7:78:10:e5:6c:bc:
e8:27:d8:af:1e:00:40:9e:cc:9e:e0:40:34:79:4a:
2a:83:a7:65:89:b0:10:05:9c:64:72:2b:fa:dd:a3:
b2:6d:5e:fc:90:0c:d2:cc:d1:09:36:19:f1:b3:f3:
59:d1:ca:56:6c:5a:94:bf:d5:46:04:1b:3d:39:01:
b2:f0:ea:5e:53:46:42:e1:bd:85:11:14:22:84:82:
7b:c2:13:15:3b:f2:40:c4:cf:1e:38:95:a3:9b:4f:
5c:55:5e:2d:d1:8e:ef:86:6f:e3:c1:cd:03:39:28:
ab:b2:27:f7:e2:68:92:b4:3b:92:ac:39:11:02:de:
06:7a:8a:25:b7:be:b7:85:02:af:59:48:a5:00:cd:
c9:5e:a2:9b:61:a9:2c:a7:7c:36:a2:5b:1b:01:c3:
da:fe:82:56:46:f4:f0:fe:7a:9c:26:4e:44:c3:d8:
9f:bd:f9:b3:ac:f4:d9:e0:0d:f1:0a:4a:3a:76:26:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:4C:3E:AA:FB:13:DE:20:49:00:5E:C2:B0:D4:5C:EF:8C:26:F0
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4f:e1:77:e7:2b:ca:7c:33:c3:b4:eb:b0:47:47:ca:aa:1b:
34:39:85:26:ee:c0:06:67:1f:15:fe:28:d7:69:ef:35:78:bc:
a6:c0:f3:d2:31:58:5a:5d:d6:bd:2a:22:64:3c:cf:b3:ad:a7:
fe:66:f8:04:7e:df:dc:2c:7e:95:66:5e:d5:7e:d3:8d:a9:a9:
45:76:c5:10:6e:90:b6:b7:c0:14:28:a1:8c:67:b8:f1:50:11:
b6:c2:08:4a:be:a3:9a:3c:f5:13:eb:4e:93:e4:47:1f:28:5e:
9b:88:ab:c3:58:f0:f0:b6:fe:c8:86:84:00:a8:58:5e:96:73:
35:c4:a9:4a:76:82:1e:f8:05:50:39:72:f4:5d:c4:f1:15:c7:
c7:a0:2a:40:1e:eb:c2:56:20:fe:f9:59:82:b9:f0:82:5c:36:
ad:aa:a1:42:3f:68:60:b9:5b:99:f5:b9:6a:fc:73:ea:e8:04:
40:31:d3:a4:a2:db:6b:c7:e4:1e:0d:1e:e4:99:b7:61:80:0d:
3f:ee:f2:64:51:73:7d:fa:e0:66:86:8a:54:77:69:e1:78:5a:
ec:fc:4a:aa:2e:a5:46:80:2b:48:60:7a:43:02:fc:22:3e:ef:
a8:60:87:d6:8e:99:51:00:79:c8:52:d1:39:2c:33:d1:ac:3c:
c2:19:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:18 2025 by rpki-client