Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: E7txZom0G6BV7ION70keL5Mp5X1pU1/iQuGdgXmCR5M=
Subject key identifier: BD:F6:36:7A:97:39:39:46:C3:6E:4C:4A:F4:90:04:AF:7F:2F:06:C5
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 019A4D06CCA047A369F8808396303D3DA545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:01:22 +0000
Manifest this update: Tue 04 Nov 2025 04:01:22 +0000
Manifest next update: Wed 05 Nov 2025 04:01:22 +0000
Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=)
2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=)
3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=)
4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: /sicQLehq02cgivT1Dem7n0hx8PJmupAho/CHr35o5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:cc:a0:47:a3:69:f8:80:83:96:30:3d:3d:a5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Nov 4 04:01:22 2025 GMT
Not After : Nov 5 04:01:22 2025 GMT
Subject: CN=bdf6367a97393946c36e4c4af49004af7f2f06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:36:63:00:08:97:7f:0d:1b:21:78:6e:93:
00:7d:cb:c2:3d:74:b2:31:74:8e:de:bc:01:a7:5c:
af:9c:10:2f:da:c9:26:40:9a:b6:a7:9c:68:49:2b:
aa:ce:5a:d1:6f:8d:01:d6:cd:c8:8e:41:c6:76:6e:
d5:fa:30:66:72:3f:30:01:04:08:c4:b8:94:05:df:
b1:33:9d:4b:36:2b:06:e3:0e:db:11:c4:33:05:b9:
fa:5e:97:8d:67:55:f2:ac:80:95:df:e8:8c:93:08:
a3:b3:78:17:2d:9a:ef:77:43:9e:bc:f0:0c:7f:ae:
0a:7f:ba:03:7d:f7:09:09:25:de:78:da:7e:6d:f5:
34:e5:a9:41:17:b1:65:98:eb:25:2a:c9:a9:67:75:
da:9c:64:e3:ea:78:5a:fa:dc:f9:2a:9f:24:81:1e:
fb:35:f7:22:4d:88:ce:9a:18:4f:8b:f8:06:2e:28:
fb:d0:be:c0:cb:7c:48:1b:39:8e:34:fc:f5:c8:b5:
53:71:1f:ba:73:d3:70:c9:72:7f:eb:42:a2:63:48:
35:37:7a:de:d9:59:8f:a3:40:a4:e6:1c:e6:36:74:
9e:44:09:cb:f8:7b:b3:c7:bd:ca:fc:96:38:56:cc:
44:e6:9b:9e:da:58:66:78:d7:e1:68:8c:67:e5:53:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F6:36:7A:97:39:39:46:C3:6E:4C:4A:F4:90:04:AF:7F:2F:06:C5
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:be:39:e6:e4:29:5e:2f:35:41:22:9f:d6:73:71:36:d1:cf:
5c:fb:65:2b:3c:ee:b5:5a:4f:95:15:e5:88:1e:42:86:f4:7a:
34:93:a6:3e:74:79:dc:45:55:1e:de:f6:57:f5:14:59:92:01:
d0:0d:d0:22:11:44:9a:e5:8f:63:3a:0e:4f:1f:02:6b:63:bc:
db:55:68:7a:45:71:d6:fe:4a:c4:22:3a:8b:ce:01:22:7d:8a:
1e:86:de:7e:c5:7b:59:58:0a:bd:98:a5:fa:cc:bb:f4:d7:7e:
d2:59:47:ed:a6:3c:34:14:4e:3a:72:26:56:71:38:f8:52:43:
79:a0:58:8b:ae:2f:de:58:c6:da:d0:07:ec:78:c9:04:b4:37:
31:5c:8e:1b:2e:43:af:b4:3c:9d:02:24:57:66:b5:cc:d7:b9:
c1:39:90:e0:43:a2:43:7c:8d:88:fe:f9:02:7b:b4:1c:8f:8e:
2f:ef:ad:0a:3b:c5:ca:f4:ec:a7:4b:a9:91:58:3f:03:7e:a1:
47:81:61:21:6a:d5:7a:f1:32:da:b1:50:7f:c4:2d:69:4d:9f:
3e:94:65:8a:f2:dc:b2:f4:5f:4f:e9:91:f7:51:77:f9:3f:8a:
86:65:46:ef:80:0d:c9:52:df:ce:6c:5d:ad:e3:dd:9f:38:ec:
92:55:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:39 2025 by rpki-client