Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
File: xmpfK0aNs161Yr034fNuzqgTzKw.mft (raw, json)
Hash identifier: 1UuNX6s3O78OrACCBaypJMklYefXJm0MHZZqftx1s6w=
Subject key identifier: AD:20:1E:95:2A:02:CD:CF:02:28:72:88:5C:E2:F3:5D:05:23:58:9A
Authority key identifier: C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
Certificate issuer: /CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Certificate serial: 019A4D3D0D85DDEC776AD2B32202DFFFBC96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:38 +0000
Manifest this update: Tue 04 Nov 2025 05:00:38 +0000
Manifest next update: Wed 05 Nov 2025 05:00:38 +0000
Files and hashes: 1: TWq28Ae0YWlnL9QMmIL7aFBiUGw.roa (hash: +h8RDHE7R4Fi6gqXkHnd/C2ymQ77DKFkbRcxLwhFxSk=)
2: xmpfK0aNs161Yr034fNuzqgTzKw.crl (hash: GusJsBNxYSfMvc7/BxMEscQOucIyQfQ1DWam6G4mH+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0d:85:dd:ec:77:6a:d2:b3:22:02:df:ff:bc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66a5f2b468db35eb562bd37e1f36ecea813ccac
Validity
Not Before: Nov 4 05:00:38 2025 GMT
Not After : Nov 5 05:00:38 2025 GMT
Subject: CN=ad201e952a02cdcf022872885ce2f35d0523589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:a6:4d:81:77:c3:bb:6c:24:f3:7e:20:40:
a9:c2:4d:27:26:03:ba:e3:ff:98:49:e2:6a:90:df:
4b:e9:13:ee:a5:9a:3b:e9:1f:c6:3f:bb:94:55:c9:
53:96:8e:e4:cf:54:13:c8:93:a5:54:ea:40:46:56:
df:d3:41:ee:1a:a7:78:25:a5:97:59:75:b8:61:f2:
ad:a3:7f:68:04:e2:3d:e5:e7:c9:c7:6f:b6:3b:21:
cf:db:92:4d:75:15:d1:2c:5a:0a:f1:3a:13:b6:d9:
35:19:dd:13:d4:ff:f2:52:f5:dd:50:08:af:45:9e:
62:5f:79:0f:96:54:e5:f0:f4:8a:85:64:8b:00:7f:
e7:51:08:c1:fb:00:0b:c5:01:f8:2b:f3:63:18:e5:
f2:1d:61:b3:15:1b:5c:00:85:0b:67:29:34:1e:fd:
26:02:de:2a:fd:e3:08:74:61:9d:a7:76:9c:13:4b:
58:ee:e6:eb:26:5e:98:b2:58:c3:0d:d9:f1:8f:cf:
51:85:7f:1f:28:2b:a6:fb:7c:59:0d:11:e5:a4:73:
17:dc:44:68:0f:d6:12:6c:fc:95:e0:be:bb:08:30:
1b:c9:7e:ac:f3:74:c9:21:33:a0:90:bb:fc:08:f5:
19:8c:e3:69:15:c6:e9:db:59:74:26:b2:94:93:34:
d6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:20:1E:95:2A:02:CD:CF:02:28:72:88:5C:E2:F3:5D:05:23:58:9A
X509v3 Authority Key Identifier:
keyid:C6:6A:5F:2B:46:8D:B3:5E:B5:62:BD:37:E1:F3:6E:CE:A8:13:CC:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmpfK0aNs161Yr034fNuzqgTzKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/531a4c-6521-4ef9-8878-31f4cc12d620/1/xmpfK0aNs161Yr034fNuzqgTzKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c4:4b:40:ea:a7:62:19:2c:e2:1b:49:e4:2f:73:f6:3d:16:
93:72:79:18:d0:5e:0c:e6:dd:0c:82:f1:34:19:25:b4:11:5e:
ff:74:43:75:ba:67:f0:91:55:cc:7b:6e:f3:2c:2d:3e:41:ac:
51:7f:0e:62:1e:68:b2:f9:fd:ec:f8:29:6a:d8:79:c7:6b:f5:
f4:b0:a8:49:2b:dd:b0:9c:e1:17:a9:e1:df:7c:8c:3c:5d:45:
ac:e5:5c:96:21:79:b3:ed:6f:9e:81:38:79:5e:47:10:13:33:
d4:1f:d6:0a:87:1f:7e:dd:a0:da:63:23:08:f3:c1:a3:61:a7:
98:2c:a8:c5:d1:e0:11:1f:d5:12:b7:26:c3:92:b6:c7:0b:8f:
19:da:ba:5c:3e:9e:6e:34:09:87:4a:07:d3:ae:b1:92:43:79:
08:cc:10:72:fa:e4:b3:f1:c0:db:6f:b0:45:ff:6e:46:cb:55:
9e:a0:8c:d3:5b:b4:a8:a4:b3:a6:dd:a7:17:01:ad:f8:96:3d:
17:19:08:0f:ee:2f:c7:1b:69:d3:1e:2a:71:a1:8e:15:86:4e:
d8:3b:6f:cd:1a:b7:86:0a:2b:74:ad:3b:6f:53:3e:20:05:dd:
f3:a8:39:3e:3c:cd:b6:a5:7d:5f:6d:0a:b4:78:98:12:cf:b2:
3d:fd:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:45 2025 by rpki-client