Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: qKLDxRSmuVmYaNWKap6IdZGnk1jwqTcOpmjt+sD5ngw=
Subject key identifier: 68:FE:10:98:A6:08:8E:82:62:00:24:D4:36:DA:99:18:D5:EE:91:90
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019A4F2B3404B2E8E4CCE817FA300A19C201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0AF8
Signing time: Tue 04 Nov 2025 14:00:22 +0000
Manifest this update: Tue 04 Nov 2025 14:00:22 +0000
Manifest next update: Wed 05 Nov 2025 14:00:22 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: +re6SRaQEP7MhhZylKdB7F9nlUVF1HpgJH8dboo9hXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:34:04:b2:e8:e4:cc:e8:17:fa:30:0a:19:c2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Nov 4 14:00:22 2025 GMT
Not After : Nov 5 14:00:22 2025 GMT
Subject: CN=68fe1098a6088e82620024d436da9918d5ee9190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:03:67:7c:14:a1:1f:59:c2:d1:b1:43:7d:
ef:98:6d:8c:56:af:eb:e4:96:ba:f8:c6:80:80:7c:
0a:78:c8:44:92:e3:15:5d:cd:b5:63:a0:3b:ff:db:
53:91:c7:4b:b6:d6:57:d3:5f:97:54:c8:4e:fd:1c:
ef:f6:61:03:9b:61:fc:92:0f:cf:e4:6b:b6:97:4d:
70:13:70:71:95:7f:dc:82:44:a6:54:3a:a3:ad:c9:
0e:b7:60:d9:83:c3:df:be:2a:28:81:76:0a:5b:b5:
9e:c3:bb:e6:bf:7d:89:db:76:66:12:4c:c5:0c:d1:
65:7d:73:4f:5c:e1:9b:08:53:1f:e4:36:ed:5b:2a:
f7:be:1f:a7:40:4d:04:0e:b0:fe:b5:ee:ae:79:5c:
e4:ac:b9:10:5d:f6:21:16:a1:b0:7e:a3:d5:10:80:
67:3d:2a:b2:3a:ae:06:fd:15:ba:8b:f1:56:63:24:
38:e5:21:31:63:96:b1:f6:7e:0e:4e:6a:19:27:84:
fe:28:ed:67:b0:74:ed:92:a4:3a:70:5b:34:a9:ac:
a1:6d:37:1c:2a:dd:5b:04:2b:18:0b:27:e6:da:a2:
84:8a:9d:25:0b:d8:6a:02:7d:a0:72:19:e6:b5:17:
90:2a:f9:fa:07:7a:ff:77:7f:96:b4:20:39:03:9d:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FE:10:98:A6:08:8E:82:62:00:24:D4:36:DA:99:18:D5:EE:91:90
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f9:af:8f:a3:7d:35:79:18:5d:ce:46:4c:cc:20:50:46:ee:
06:40:d2:c2:ab:60:40:c3:78:df:30:cd:78:56:c7:67:8f:c7:
7a:3c:cd:e3:2c:ef:71:35:26:0a:05:95:e1:1f:8f:26:2a:b5:
8f:55:b2:6a:1b:14:08:b8:2b:aa:35:46:a2:2f:d4:06:63:07:
ef:e5:26:3e:a2:a1:de:f9:64:22:82:81:e2:20:2a:24:1e:57:
92:dd:94:ed:c9:89:52:a1:db:72:64:b9:ab:4e:6d:64:52:d8:
b9:9f:85:86:04:af:56:a2:23:72:0b:df:83:97:3d:e2:7c:47:
04:30:0c:34:dc:ef:ba:8b:83:23:6d:5e:68:bc:d6:6a:54:59:
f8:3c:36:44:a1:7b:8f:e5:e7:fd:cf:26:af:68:6d:f1:77:44:
42:16:44:a6:7f:67:d5:0b:51:b6:c2:2c:ef:34:60:c3:7e:4c:
5c:8a:95:9a:d6:a5:0b:fa:79:2e:bc:50:d7:c1:02:75:a4:22:
38:33:d5:1c:75:86:db:37:c9:2d:a2:35:02:7d:86:63:d7:73:
73:d7:6b:d1:f9:4b:3a:17:db:d5:5a:32:fe:66:70:f6:fe:04:
4f:28:7f:0f:b1:96:85:09:f0:c8:39:57:a3:ff:30:4b:b6:82:
f0:11:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:15 2025 by rpki-client