Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json)
Hash identifier: 61RVU7C/5BvHzJymh7KhN2eV+QEnvw0UvKNdSfcqYFg=
Subject key identifier: CB:3D:FF:F3:F7:39:A0:6D:B2:BC:31:62:3F:9E:09:6F:11:9D:31:51
Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Certificate serial: 019A50E3D039258F4CDCB97F279B328FC669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:01:38 +0000
Manifest this update: Tue 04 Nov 2025 22:01:38 +0000
Manifest next update: Wed 05 Nov 2025 22:01:38 +0000
Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: wVWtKZ/PcD2DwjApxsnW/voa0AE6N913Z0Nh/zkCLEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:d0:39:25:8f:4c:dc:b9:7f:27:9b:32:8f:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c
Validity
Not Before: Nov 4 22:01:38 2025 GMT
Not After : Nov 5 22:01:38 2025 GMT
Subject: CN=cb3dfff3f739a06db2bc31623f9e096f119d3151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:26:fe:10:b4:2e:b9:91:82:2d:22:c5:73:89:
e2:9d:79:f2:a0:0d:93:db:cd:44:96:e2:c0:e6:e5:
e3:31:5d:1a:70:fe:c5:55:a2:f3:91:18:48:f7:75:
34:c7:ad:44:ba:b4:27:26:d4:45:00:e9:c1:b2:19:
07:50:fb:a0:da:cd:43:52:c4:cf:50:3e:41:32:86:
ce:2b:3b:e8:81:b4:79:69:9c:73:9f:f7:87:b9:6f:
ef:c7:d5:54:bd:e3:17:56:33:e4:f2:62:fc:f8:b5:
93:41:36:a9:b4:4a:3b:97:31:61:a8:50:48:9e:03:
a8:42:f6:97:89:2e:4a:bd:96:f1:bd:5c:20:a2:1a:
00:c3:6a:0e:30:fc:ba:e4:17:73:ca:34:fa:5d:e3:
3f:0c:d2:4a:dd:55:55:20:32:7c:c2:9f:74:05:2f:
3f:ec:b3:a5:e8:43:fd:60:b0:ca:47:1b:81:04:30:
d6:b4:16:a3:7a:25:c3:86:65:bf:b3:f5:5b:fd:4c:
b6:d9:37:b4:0e:e4:87:c3:ad:e7:2f:2e:ff:5b:a6:
a1:ef:6e:91:6e:96:1e:ad:ac:9b:41:30:2e:42:6d:
37:2a:58:31:5d:82:29:85:19:96:be:3f:c4:bb:40:
6e:76:2e:f2:75:c3:29:37:da:e5:b3:9d:3a:ab:56:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:FF:F3:F7:39:A0:6D:B2:BC:31:62:3F:9E:09:6F:11:9D:31:51
X509v3 Authority Key Identifier:
keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b4:09:2a:e0:01:ef:3f:44:dc:e1:78:b2:f2:0f:23:f0:0e:
7d:cc:1c:4c:fe:c2:0a:d1:27:34:eb:47:e2:d7:f2:9f:84:a5:
11:af:ab:6d:8c:81:4e:2e:a3:d2:8e:f7:d5:7b:29:a0:44:66:
4b:35:26:68:f7:b2:be:50:82:0c:ec:e1:b0:4e:59:fe:61:9c:
17:43:e6:d8:57:59:57:46:4e:5f:13:47:d9:b7:47:fa:fd:82:
bc:d2:5d:86:20:e0:d4:a8:55:e4:af:ed:95:5a:0c:b5:25:a0:
2b:99:d9:25:5d:0d:77:c3:a6:21:2e:d5:d8:b7:5e:71:10:42:
36:e3:4b:c1:77:d9:38:aa:31:7c:81:b5:49:6d:06:c9:93:70:
21:fa:a6:1c:bd:cd:4e:b2:71:5b:13:4a:b0:16:4f:15:63:66:
35:eb:08:67:7c:83:24:73:c0:c5:74:bd:a4:dd:4b:4a:26:b3:
e9:f1:8c:c1:96:38:d5:b1:61:bc:f1:55:3c:f1:7e:3b:7c:d4:
88:bd:95:6d:a3:81:7e:d8:bd:74:50:07:b8:de:98:6f:d6:55:
3e:cd:8c:18:d2:ae:23:80:fa:2d:29:1d:39:e2:e7:c4:1d:43:
55:b3:5d:6f:b7:28:ef:72:43:d3:99:dd:47:82:5a:18:a0:45:
58:aa:72:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:48 2025 by rpki-client