Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
File: XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json)
Hash identifier: L6HjiO9BUOqRRaKJnb7rn42yGI1hDe0r/NQbeOyHEgk=
Subject key identifier: 4C:42:CE:47:F6:39:A8:34:6E:D3:AF:17:80:28:DA:FC:41:81:0C:4A
Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
Certificate issuer: /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Certificate serial: 019A51BED974A1593B8FB471FEC9943182CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
Manifest number: 168E
Signing time: Wed 05 Nov 2025 02:00:53 +0000
Manifest this update: Wed 05 Nov 2025 02:00:53 +0000
Manifest next update: Thu 06 Nov 2025 02:00:53 +0000
Files and hashes: 1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: 27Fj6Iyg8z02Pk+eoe5/5FBWil4Vq/fVyOWS+YV2ayU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:d9:74:a1:59:3b:8f:b4:71:fe:c9:94:31:82:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe
Validity
Not Before: Nov 5 02:00:53 2025 GMT
Not After : Nov 6 02:00:53 2025 GMT
Subject: CN=4c42ce47f639a8346ed3af178028dafc41810c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:95:d3:a6:8e:bb:6c:cb:69:24:0e:17:3e:
27:4f:ae:b4:78:f5:81:cb:9f:8d:47:ff:9e:89:94:
4c:e7:6f:2d:67:45:1f:24:c9:8c:f0:89:e8:47:1d:
a2:5c:25:02:81:fd:80:14:dd:93:f6:13:1d:40:31:
09:8e:d7:2a:d2:dd:dc:5b:20:84:11:3f:56:25:ec:
6e:35:50:fc:3f:14:b9:0e:95:ac:49:0f:ea:e5:51:
b0:a3:12:a4:21:2c:5d:50:26:f1:4c:d7:c2:dc:19:
29:b8:41:46:a4:d1:45:55:f9:b9:e5:ae:06:b0:b8:
7e:93:4b:7e:40:c9:b8:ac:96:04:89:a3:d7:b3:7b:
23:e0:fd:64:c0:0d:c8:82:76:af:aa:f9:7c:c1:5e:
c5:a1:82:e3:ce:8d:0d:7c:4a:a5:0c:a8:ee:77:2b:
5d:f9:22:cb:e6:bf:d4:0d:37:0e:57:d9:26:54:1b:
a9:c9:0b:d0:66:34:ee:eb:34:fb:85:0d:65:a5:c2:
83:87:58:42:50:b1:9c:88:27:3c:dd:2b:23:5e:78:
51:0a:93:d6:f2:62:c4:d2:4a:70:a1:af:86:21:0d:
90:d0:b4:c1:b1:ea:43:c7:2f:12:d6:e6:68:33:28:
ca:bf:8f:36:70:46:84:b3:c3:21:64:d8:29:14:c0:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:42:CE:47:F6:39:A8:34:6E:D3:AF:17:80:28:DA:FC:41:81:0C:4A
X509v3 Authority Key Identifier:
keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:a8:fe:86:7c:85:33:c8:a8:7b:c7:f2:5b:4c:1d:33:32:
2f:2c:ab:6e:ac:25:3d:d0:a4:6b:72:1e:d7:c7:4d:f4:aa:5c:
07:1c:f7:3c:5f:3c:27:88:6a:a3:e5:6a:91:50:0f:3e:95:05:
52:1f:9e:86:d4:eb:81:39:92:75:ea:25:3d:56:23:0a:18:89:
2f:ac:0e:48:2b:64:d2:76:86:3e:c0:fe:70:24:f0:d3:bf:f1:
18:5d:0b:0e:0e:e5:e6:63:87:0c:38:4d:70:67:04:be:ff:d2:
9f:0d:51:93:b2:cb:e1:fa:7b:59:74:64:37:eb:d5:d1:b1:fc:
28:3d:c5:3e:92:eb:0b:c6:e5:22:75:3f:07:f3:c5:c6:38:70:
06:5b:96:93:7a:1e:c9:ad:eb:e7:a9:de:2c:e9:c3:a2:3c:3f:
ac:66:ee:69:0a:96:12:c7:30:a4:b7:f6:bf:78:36:0a:0c:da:
b1:93:97:b7:f2:38:98:ec:43:c8:55:4e:03:a0:01:a7:9c:9b:
61:a6:41:39:6c:69:2b:40:b8:12:5c:54:c4:81:b4:7c:5e:d8:
5b:91:f6:8a:7f:24:87:2a:46:c9:1b:1f:47:4d:e4:5b:8f:bd:
ff:68:e3:66:c6:71:f6:af:98:b8:98:be:e4:6e:43:b9:6b:e2:
c8:f9:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:24 2025 by rpki-client