Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: iUNWeGkG2PeYsh1Fu2Ih9SiTIox7JTokcn+aEXL6d8k=
Subject key identifier: FB:1D:99:E7:FE:37:A3:4A:91:75:5F:87:21:3A:C6:AC:F9:17:F3:66
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019A4E865CF982377946449FC176737459AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:19 +0000
Manifest this update: Tue 04 Nov 2025 11:00:19 +0000
Manifest next update: Wed 05 Nov 2025 11:00:19 +0000
Files and hashes: 1: S4M1yLaoUkBNpr3z25JQH_BGArI.roa (hash: u9aDojpNlhB36wlUGghNH/x88dKTjNyPYfwfTMBmtv4=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: TOGS37+t5EOux9tbuwVW00a2JIvQcjuSkAkTqBVZgsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5c:f9:82:37:79:46:44:9f:c1:76:73:74:59:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Nov 4 11:00:19 2025 GMT
Not After : Nov 5 11:00:19 2025 GMT
Subject: CN=fb1d99e7fe37a34a91755f87213ac6acf917f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:94:f3:bf:42:62:39:a6:91:e2:25:0b:a6:
3a:0b:ac:6a:f1:60:c4:c3:5a:04:9b:5c:f3:6e:24:
25:87:a4:b8:7c:20:69:69:e3:69:eb:4b:ad:c7:e5:
0c:c0:8e:40:98:0d:74:38:88:52:74:16:41:cc:d6:
65:d9:78:dd:b6:39:93:f5:01:a9:66:89:c8:ee:c0:
b9:00:31:c8:71:e3:34:48:1e:7b:5f:02:03:2e:9d:
95:7c:8b:fa:72:49:26:6e:40:91:ae:94:e8:a9:75:
8f:ba:29:eb:3a:37:09:0e:c2:75:28:55:4a:e5:ff:
24:5d:3a:59:55:01:bc:fc:58:1d:6a:aa:f3:0c:d0:
8f:4b:4c:6d:68:c4:af:b8:28:b7:c0:99:98:9c:25:
d3:d1:ca:56:29:d1:dd:09:8b:9a:85:42:c8:3f:94:
74:4d:84:50:80:8a:69:8a:88:f3:9e:1a:9f:a5:42:
d8:ec:93:1b:0d:45:7c:a4:86:8f:4f:23:ba:fe:9a:
9f:ca:9e:0a:89:01:7c:40:9b:b2:1b:76:9a:8f:0d:
fa:d6:65:ed:42:52:84:0e:a5:99:fd:c3:9b:65:b0:
87:4b:89:4e:df:af:d2:94:1a:dd:a9:ab:17:aa:3e:
26:60:49:d0:8e:c6:63:0c:0a:8f:09:9f:21:03:d2:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1D:99:E7:FE:37:A3:4A:91:75:5F:87:21:3A:C6:AC:F9:17:F3:66
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1a:af:05:8b:ce:95:25:45:86:0c:a0:45:b8:f6:1c:92:88:
19:9d:4c:a9:86:a2:cb:40:99:8b:14:8b:b6:1c:af:c9:ca:43:
f7:58:c5:58:c8:b8:a7:1b:d0:1c:1d:aa:e3:91:a6:71:d2:92:
8a:45:33:79:67:c0:70:e1:4a:19:ee:73:f1:b2:26:47:6d:d0:
af:01:d2:1f:c0:93:e9:d2:10:99:1c:72:0c:13:09:d2:1b:6a:
2c:bd:87:62:b2:f2:40:7c:10:67:9e:13:10:ad:cc:8e:8a:fc:
6a:cf:83:a6:cd:f6:42:ab:3b:6a:ae:b5:b4:78:4a:ed:6c:89:
63:e1:45:a8:5e:9c:68:b4:06:10:79:9b:30:28:9a:73:41:bd:
92:cc:27:82:16:1f:af:3d:ae:cf:1f:90:3a:77:30:e0:2a:7c:
f3:b9:d5:0b:5e:6d:f2:f9:12:c8:06:f5:94:9c:f4:e1:b4:34:
c2:35:7d:71:a9:bd:09:69:44:73:9d:34:e1:a3:35:54:c0:3b:
24:20:09:d3:19:c2:a9:c6:4a:75:5a:fd:54:b7:c1:f1:8d:34:
24:df:45:22:e2:be:4c:71:42:35:6c:31:0f:74:55:98:dc:6e:
1a:61:17:4e:ac:aa:74:01:c4:c0:42:6c:dc:1c:98:8e:ca:fd:
a4:b4:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:08 2025 by rpki-client