Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: /39/0K3rUphGLzARJAbOgcXhTJx1sJkH4z++BYxw3iY=
Subject key identifier: EA:11:0F:33:A2:34:FD:E6:9E:94:A1:D1:ED:91:BB:0C:41:44:54:81
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019A4F2B2F7BC0F774DC16FE82B9661903F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 065A
Signing time: Tue 04 Nov 2025 14:00:21 +0000
Manifest this update: Tue 04 Nov 2025 14:00:21 +0000
Manifest next update: Wed 05 Nov 2025 14:00:21 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: RHQ7+AyhVVXwbWAkLBkBXd4791HUkWlZ5Orhp2R1SAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:2f:7b:c0:f7:74:dc:16:fe:82:b9:66:19:03:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Nov 4 14:00:21 2025 GMT
Not After : Nov 5 14:00:21 2025 GMT
Subject: CN=ea110f33a234fde69e94a1d1ed91bb0c41445481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:41:72:3b:7e:40:de:29:9b:1d:d4:d1:3c:
8a:2b:ce:a4:c9:94:00:51:9a:e7:09:ac:6f:ef:c0:
5b:a6:36:ff:2b:a2:db:81:03:40:36:22:e6:3d:1c:
e4:52:ce:be:e9:e6:d7:15:b3:67:8c:86:f2:6d:79:
d1:d8:db:34:e7:c2:63:0b:6e:91:e1:ef:8c:89:28:
89:a6:04:39:1f:fb:8a:11:88:df:81:ae:d6:93:87:
2d:74:65:88:85:7f:f8:e6:12:8e:d2:15:52:05:d5:
f8:14:ed:ef:94:cd:07:16:c3:74:3d:19:9f:43:8d:
65:65:d9:83:54:71:2f:d5:58:6c:00:df:b0:2a:48:
e7:c2:a7:5c:34:24:9d:af:f6:52:6c:f4:66:48:be:
17:da:73:53:67:f7:92:62:d0:84:b1:b0:f0:15:b8:
f5:dd:6b:a6:16:cf:03:83:b1:56:74:86:7d:c2:2e:
f3:53:fb:01:94:f0:c3:58:a9:bb:12:08:68:75:3f:
fe:4b:ae:85:d6:f6:71:1c:61:b4:3f:2c:52:f1:4e:
47:5b:06:f8:4c:cf:99:da:8b:47:ae:40:b1:96:3d:
4f:9d:4c:49:52:fd:c9:cc:ac:27:24:4c:a8:67:ec:
b0:73:78:32:33:4f:5f:51:f5:f9:1e:14:26:6e:32:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:11:0F:33:A2:34:FD:E6:9E:94:A1:D1:ED:91:BB:0C:41:44:54:81
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:aa:31:f5:2b:78:52:7e:89:f2:fc:4b:f1:f9:f6:d5:89:f3:
c6:76:89:9d:75:31:17:7f:38:b2:fa:87:ed:37:08:90:86:79:
c1:f6:23:51:4f:7c:59:8f:e3:1f:6b:96:7a:ea:7f:21:fb:4a:
84:fc:36:30:47:3a:32:f3:c4:33:11:98:26:d8:0d:d8:e0:82:
aa:03:50:09:e4:21:87:ff:0a:ef:b9:47:3c:f7:95:58:13:c5:
2a:45:ad:64:d5:04:7c:27:7c:d6:77:41:e5:9d:2b:96:a3:4d:
af:19:cf:8e:c0:a9:bb:c3:29:a3:bd:a3:90:c3:19:5e:85:b7:
9b:f3:32:fe:df:99:f8:ed:a8:b9:f8:8e:20:e1:31:d2:95:b9:
7a:de:00:be:18:b4:92:c4:d0:0f:eb:bc:e8:9e:85:76:51:d1:
dd:61:62:f7:21:db:69:aa:32:95:bd:10:da:06:2b:a4:db:33:
af:4e:42:a4:00:d4:f5:ca:36:04:be:36:c4:22:c5:95:40:73:
b7:64:6b:89:a8:7d:97:da:23:f8:10:ea:93:d5:49:e3:1d:63:
8e:5f:dc:2c:d9:2d:24:5d:96:4c:8f:a8:d3:0d:42:ca:62:69:
f1:ed:d1:76:f7:7a:fc:7b:b3:09:92:b0:93:e6:18:b6:15:47:
10:e0:e4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:26 2025 by rpki-client