Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
File: xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft (raw, json)
Hash identifier: DqbGVCSy+v/cRH3JULCn/pcTNKl6gcLRg6RxRde08qw=
Subject key identifier: 18:89:F5:A6:F1:2E:6F:57:2A:77:C1:A3:90:23:06:E1:E1:BD:4C:61
Authority key identifier: C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
Certificate issuer: /CN=c53435f4be2c543bf3483e377f80314d28230184
Certificate serial: 019A4DE1B389DA3DBA59FABC50A4DCAF819F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:28 +0000
Manifest this update: Tue 04 Nov 2025 08:00:28 +0000
Manifest next update: Wed 05 Nov 2025 08:00:28 +0000
Files and hashes: 1: XYWpdPzGoBgF4NiJcBSnmKFlFlA.roa (hash: gRwlESvwtxXSn0EGN2mej0K6SBjpUL0fcU4oPomp9Tg=)
2: xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl (hash: 1j22Xrvba0WuupM5Ya8ozwHPq8gIRM9PMaWv9Y8t0w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b3:89:da:3d:ba:59:fa:bc:50:a4:dc:af:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53435f4be2c543bf3483e377f80314d28230184
Validity
Not Before: Nov 4 08:00:28 2025 GMT
Not After : Nov 5 08:00:28 2025 GMT
Subject: CN=1889f5a6f12e6f572a77c1a3902306e1e1bd4c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:c9:67:64:5d:1a:c8:6a:d3:24:ae:9a:95:
bd:b8:fe:df:05:8c:3a:6d:72:15:7f:5f:4c:84:a9:
79:aa:b6:7b:f9:b6:13:e3:77:22:d1:c3:5e:19:a3:
ee:0c:0a:e1:6d:56:43:05:84:03:ae:62:27:e9:82:
c6:f1:70:69:40:03:ee:5e:aa:2b:21:83:2a:88:71:
f1:05:e3:7f:75:99:0f:c0:41:60:47:d2:9d:5b:de:
76:2f:10:01:82:3a:de:c2:09:5e:c4:c8:4d:89:b4:
0a:8c:fa:8d:64:5e:66:12:95:09:7e:2e:db:ea:3c:
e8:38:55:af:dd:20:15:d7:c0:8e:11:c9:24:94:df:
da:03:7f:7f:c6:4e:26:2f:ab:6b:67:ee:3f:10:73:
8d:47:00:2e:cc:11:f9:20:93:9f:b2:ba:3b:25:ab:
56:2a:82:f6:2d:69:9d:02:66:42:b6:cd:89:02:7d:
79:30:a4:43:dc:57:4a:9a:f7:11:f9:6c:93:da:de:
79:bc:f4:14:24:08:7a:f4:69:a0:1f:e3:16:63:a2:
47:ff:e4:f9:02:3a:b5:09:52:f4:bb:f5:f5:53:57:
32:f2:c4:f5:78:2e:a7:1a:55:8e:02:75:d3:9f:aa:
e4:c6:62:ea:18:77:60:48:15:ec:19:a2:56:70:84:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:89:F5:A6:F1:2E:6F:57:2A:77:C1:A3:90:23:06:E1:E1:BD:4C:61
X509v3 Authority Key Identifier:
keyid:C5:34:35:F4:BE:2C:54:3B:F3:48:3E:37:7F:80:31:4D:28:23:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTQ19L4sVDvzSD43f4AxTSgjAYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/43f607-a7f4-4985-b6eb-9f4fe4cd0246/1/xTQ19L4sVDvzSD43f4AxTSgjAYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3c:d3:d9:25:41:b5:3a:54:5b:e0:d0:af:d4:a1:21:87:00:
22:8b:12:33:7a:ae:d9:15:d2:ee:47:e7:2e:33:80:84:bd:c1:
7f:86:13:d4:47:9b:e1:58:5c:d4:97:61:4e:64:4b:94:54:4d:
69:d1:48:41:07:9d:75:87:18:9d:5c:42:e0:7a:00:cb:40:67:
82:db:30:a8:c1:b8:f0:a5:4e:82:80:65:6a:8f:cb:eb:be:e5:
d7:ec:f0:dd:c0:f3:5f:c7:91:66:f1:30:41:64:a7:35:f9:eb:
49:41:d5:ff:a0:a6:36:a5:48:2e:15:0e:2b:f0:70:22:12:93:
9d:9a:43:25:47:d9:dd:d1:84:7f:a5:31:2c:c6:80:a7:d1:14:
24:7c:f5:90:66:6d:48:2e:78:4d:e0:09:af:e9:cb:d7:58:a2:
8f:45:fb:72:51:0f:52:19:db:90:e6:c4:0a:fc:2c:2e:0e:c9:
e0:74:0e:b1:4a:73:3f:a5:4e:b0:5c:93:3b:08:14:c9:ed:46:
86:bc:8a:45:c8:9b:70:d3:67:95:dd:af:98:ac:15:37:9e:7b:
b5:d5:1d:71:ed:d0:b4:dd:16:ab:77:3f:4c:33:11:41:ce:ed:
b5:8d:a7:ad:64:da:33:99:39:e5:4a:72:ce:ca:3e:47:41:a1:
b5:51:86:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:22 2025 by rpki-client