Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: 0lUoUv7xyioZZAqn1Tm0ZgwNkBG+Y+el6USQwUJSxDk=
Subject key identifier: E9:AF:12:B3:D5:2A:D5:1B:9B:04:27:50:31:3C:CF:84:83:77:68:B8
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019A4D74613623E1B5E4CE02153D968F5585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:01:03 +0000
Manifest this update: Tue 04 Nov 2025 06:01:03 +0000
Manifest next update: Wed 05 Nov 2025 06:01:03 +0000
Files and hashes: 1: Ebbi4EbWyyrPidgJRRp68vOL4Bs.roa (hash: 9WQWjNic/0FRDbfcOWjEWw5V6hoDVQ6qvX3p7F6e6MI=)
2: VPM_H7o9qmHlZtW2Loh4LTUo-hc.roa (hash: vD0q++SStKTA4LMIpc6XJyVKbTisVo5txPsQMD5ggGA=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: yERg7Q3VXgXSdYCzr/fRljr3i0DtTKxab4cLEz8nDCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:61:36:23:e1:b5:e4:ce:02:15:3d:96:8f:55:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Nov 4 06:01:03 2025 GMT
Not After : Nov 5 06:01:03 2025 GMT
Subject: CN=e9af12b3d52ad51b9b042750313ccf84837768b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:88:18:fb:ce:7c:bd:78:f5:b0:1f:61:0d:
5c:d8:9d:8a:69:f7:8d:2c:49:10:ab:8c:75:d5:e9:
0a:08:8d:44:96:88:ad:5b:6e:df:70:85:94:a9:c9:
46:f5:ad:59:79:c7:42:f7:c6:e1:00:0c:83:1f:07:
6c:59:5e:32:cc:4e:56:c8:55:f0:08:e1:c0:fc:db:
d1:bc:58:e0:9f:16:31:99:60:b0:f6:dd:0a:d9:99:
ba:8e:0e:d2:88:0b:ab:e6:b6:47:f8:0e:25:dd:9b:
d4:e8:35:a3:91:3b:cf:a7:92:6d:13:78:4a:c0:f8:
9b:a9:d0:0a:b6:f2:ed:97:c2:2a:50:9d:fa:dc:49:
b6:e8:52:71:bf:c7:92:f5:3a:af:79:b5:9e:92:d4:
4a:d7:b5:70:de:3d:a9:44:a4:48:42:46:24:2d:b0:
38:87:3e:29:da:66:1b:10:3c:7d:25:36:40:66:b2:
62:4e:ed:4d:df:cb:6c:dd:76:67:0c:1e:f9:fc:f8:
39:b6:0f:01:8f:90:12:cf:81:05:36:fc:ce:d8:bf:
04:13:cb:f5:88:b7:98:b6:3b:fd:0c:f8:bd:f3:3f:
25:26:4a:6e:84:a1:a0:10:ad:dc:7b:14:db:32:3a:
14:3c:d9:64:01:4d:05:38:fb:6e:41:b2:b4:9d:5a:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:12:B3:D5:2A:D5:1B:9B:04:27:50:31:3C:CF:84:83:77:68:B8
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:56:10:04:13:e4:3e:00:84:06:c4:9c:87:e9:f1:0e:54:91:
d1:d4:67:95:3c:bd:8b:5c:0f:62:64:6a:32:5c:b9:06:9c:9c:
99:89:6b:8c:b1:0d:c2:09:1f:e8:12:3e:66:eb:61:a4:00:f8:
aa:36:19:59:0e:ac:39:cb:b7:b4:70:75:12:e0:0a:24:93:71:
fa:5d:c3:56:ac:2f:7f:c8:54:57:c1:8b:5b:13:9d:72:6e:c7:
a4:a2:2c:7c:8f:63:98:41:eb:8e:fe:b3:66:3f:bf:2e:fb:28:
8d:36:df:88:3b:ea:20:75:de:a5:70:e8:64:b7:aa:86:b6:2a:
bf:16:b2:47:db:f1:0b:ad:29:e6:f9:96:ea:75:be:a6:a2:0e:
86:7a:0f:19:85:1f:89:8a:18:b9:b7:f0:ef:8b:9d:ea:87:ae:
fb:74:9a:85:bd:53:d8:8d:a6:f4:eb:e9:0c:aa:13:ad:80:63:
8e:cc:67:b3:f8:22:69:b5:ba:72:cf:97:43:8f:32:ae:c6:0f:
a7:88:a8:f9:e3:0f:26:f3:fd:5c:3e:b6:31:48:27:5c:57:43:
be:60:77:b5:c3:35:5b:4e:a9:24:7b:54:84:bb:12:bd:54:b4:
ef:10:90:f1:51:87:ad:06:b8:f5:d7:27:ce:1f:e8:d2:a0:59:
99:e3:9a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:10 2025 by rpki-client