Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: doCbGSRPt8C5pj1OoyXWqSra+Gm+LOgtwMgqzXQpJYw=
Subject key identifier: 2A:78:9F:E9:73:33:06:B9:18:D9:50:95:4D:46:66:ED:A8:CF:9D:A9
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 019A500742B47EAD4DCAD6F4DCB3F92EC21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 18:00:44 +0000
Manifest this update: Tue 04 Nov 2025 18:00:44 +0000
Manifest next update: Wed 05 Nov 2025 18:00:44 +0000
Files and hashes: 1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=)
2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: CiHqBBMo81mC2Lpm58y7g0wtXLcmUV/DMBZux2/SzUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:42:b4:7e:ad:4d:ca:d6:f4:dc:b3:f9:2e:c2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Nov 4 18:00:44 2025 GMT
Not After : Nov 5 18:00:44 2025 GMT
Subject: CN=2a789fe9733306b918d950954d4666eda8cf9da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:7c:50:21:c3:78:26:bf:a6:a0:9f:0c:9f:
c9:16:13:3a:53:72:c2:dd:0d:fa:7c:f9:1a:c3:42:
2c:4a:00:90:4a:3b:78:da:e1:b0:3a:3a:73:92:7a:
5a:ca:6e:14:9b:0b:35:c6:08:1a:f6:5f:98:cb:45:
3c:43:d1:93:d7:26:dd:0e:87:01:fe:c1:72:2c:a9:
3a:d8:ba:10:f2:54:b4:7d:f2:1a:dc:ff:0e:6b:35:
55:4f:86:67:d0:5b:cb:d5:c3:c8:02:84:ac:b3:f2:
75:7b:0d:6f:59:1a:04:71:79:1b:c7:f9:7f:f1:fe:
23:27:8f:4d:d8:2f:3d:fd:4b:38:13:66:92:83:23:
4b:c1:35:d5:18:16:d7:28:7d:1a:9c:b5:94:b4:64:
92:b2:f8:dc:1a:a1:dd:25:d7:dc:0d:6c:b4:cb:a8:
8c:2a:63:ee:4a:6a:c9:d7:52:bd:4c:f0:2c:37:72:
b4:a4:68:8b:29:83:af:bb:e6:74:d7:42:6f:eb:b3:
b6:60:e7:4f:0a:b1:18:10:fb:8f:7f:8b:17:dc:29:
9e:68:d1:d4:9e:1a:d8:70:b4:84:e4:4d:8f:d1:b6:
f3:f8:94:f8:cd:39:d8:9f:51:fe:68:dc:a1:aa:46:
70:9b:70:b5:e8:b4:1a:24:73:74:41:92:20:fb:7f:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:78:9F:E9:73:33:06:B9:18:D9:50:95:4D:46:66:ED:A8:CF:9D:A9
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:39:da:fa:02:d1:30:4b:62:6d:00:46:4a:21:c4:7d:26:46:
5f:bd:50:ef:88:24:12:23:a9:10:bc:4d:0d:89:af:e8:2c:b7:
73:57:ea:e4:60:36:7a:5b:60:49:54:73:85:51:d2:2d:02:17:
85:e5:bc:75:87:45:a8:1c:f7:ed:cd:f2:c2:27:dd:6f:f4:af:
f3:ee:eb:6a:94:c7:8a:c9:28:2e:f2:cb:56:d7:d0:1f:bb:fc:
89:f4:97:b7:f4:ca:4c:29:8c:76:9b:36:e8:e3:c1:1a:f7:75:
1a:11:0c:ec:6f:d1:bf:de:a4:3a:a1:fd:41:55:47:c2:7b:d7:
97:ce:a6:91:ea:4d:e9:bd:6b:a7:09:b8:cb:5f:9e:af:e8:f0:
b3:1a:f4:74:fa:94:65:5e:22:6c:ea:3a:04:b6:49:22:c8:ee:
7d:b2:15:e7:52:72:96:e2:ae:5b:0e:96:42:46:8e:a3:0d:ad:
f1:a3:c2:9d:49:b8:12:09:d2:fc:7b:63:8c:94:b0:db:0a:8b:
d2:f8:fe:59:f4:70:21:98:39:bc:77:09:70:76:76:dc:06:91:
0e:76:08:c6:1b:ed:10:c1:80:9d:13:74:31:e7:50:6f:0a:0b:
53:e5:51:ea:57:61:85:e8:df:b9:d1:4e:89:18:26:1d:d1:9e:
6d:0b:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:52 2025 by rpki-client