Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: aXf32tk801mDF7bOPwG5TH51PR76x7R0FvSkZilGZS8=
Subject key identifier: EE:E6:64:C5:C4:17:8E:F1:79:A4:CB:51:73:EA:F9:FC:DC:66:23:CB
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019A4DE1AB6999853A0CE80280B416A96E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 168F
Signing time: Tue 04 Nov 2025 08:00:26 +0000
Manifest this update: Tue 04 Nov 2025 08:00:26 +0000
Manifest next update: Wed 05 Nov 2025 08:00:26 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: umYKJfAsJuQkFF2+wK26P6w4RCF/0EgOejDTLUOcwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ab:69:99:85:3a:0c:e8:02:80:b4:16:a9:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Nov 4 08:00:26 2025 GMT
Not After : Nov 5 08:00:26 2025 GMT
Subject: CN=eee664c5c4178ef179a4cb5173eaf9fcdc6623cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:70:c4:17:cf:77:e9:c8:83:b7:ce:fd:27:
37:b9:42:eb:eb:d7:78:2b:70:2e:84:58:f9:23:4d:
58:b0:22:ad:1b:1f:19:38:9e:73:7a:72:f8:99:b3:
09:61:c3:c7:53:13:b9:bc:03:63:cd:66:c5:2a:24:
4d:39:50:b2:59:20:07:74:ec:4f:47:1a:21:9c:e1:
4d:26:d2:cd:67:94:e8:8e:03:9e:c9:93:8b:4a:1a:
9b:6e:60:29:3c:ef:16:79:fb:e5:b3:0f:84:3d:a9:
54:b6:12:d8:5d:7c:2a:19:0b:5c:a7:37:e9:c6:8b:
39:06:3a:39:43:a2:66:78:5b:56:36:c6:ef:3d:c7:
01:cd:e1:76:38:d9:41:dc:a7:1e:e6:c1:8f:9d:f8:
ac:58:c7:00:ad:3f:4f:13:18:07:41:f0:b7:ec:92:
52:ad:ba:92:20:0a:9f:f9:2f:7c:8d:00:ee:b9:15:
50:0a:43:b1:b6:63:f5:2b:09:c3:43:77:0e:3a:12:
5f:f0:ef:c2:0a:8b:db:81:61:40:bd:55:9b:9a:39:
15:7b:6f:98:93:db:5c:a8:18:e4:5b:ab:fd:2a:2f:
b0:86:66:60:ac:93:d1:1d:ad:96:09:d8:0f:ef:0e:
3f:ef:79:cb:92:c3:64:24:6f:99:8b:6b:92:b6:fa:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E6:64:C5:C4:17:8E:F1:79:A4:CB:51:73:EA:F9:FC:DC:66:23:CB
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cc:11:69:2a:5f:a5:ce:ce:55:73:0e:72:81:37:74:f7:db:
da:81:93:1c:24:1f:cc:fb:bd:a4:46:49:20:df:77:6c:df:bb:
40:e0:87:3e:ba:fb:2c:d0:38:c7:c0:3c:c9:7a:0b:7c:ab:b2:
a3:84:4c:63:df:af:b0:d0:63:b5:82:e6:16:96:13:1a:d3:57:
9e:65:5a:bc:f6:f5:e3:22:4c:00:cc:36:a5:b1:68:f6:8f:48:
aa:94:75:53:1e:4c:4a:f8:1e:7f:de:1f:6d:4f:9f:41:2c:ed:
32:83:20:3c:7c:3e:14:f0:21:24:79:17:c9:2d:f2:58:67:ab:
50:bb:17:61:8d:90:cc:d8:cf:b6:6a:a9:22:85:31:9b:61:0d:
23:ed:81:0c:f3:46:67:a4:10:83:42:1e:03:6f:4e:88:e9:50:
04:a7:47:86:58:12:cd:2e:10:29:fb:48:e3:9d:68:17:b1:38:
c1:c3:38:b6:c0:bc:6d:fc:bd:0f:71:31:d0:87:a6:11:cc:7c:
0f:e9:ab:23:22:d2:3f:33:6a:b7:63:f0:37:85:2d:11:52:62:
a6:60:e1:69:8d:c2:a4:e4:46:d6:1a:04:b1:15:36:fd:2a:f1:
54:ae:23:34:21:ab:5e:c3:cb:52:68:b1:c7:07:7a:ed:ef:41:
84:53:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:01 2025 by rpki-client