Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: 5+wy1XU8U6rSHM3y0i1YjAkkOFvYEZ9OLmJljddd/T8=
Subject key identifier: 71:12:F4:C6:8F:F0:2B:42:FD:9A:D3:17:25:FF:BF:98:F6:0F:92:1B
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019A4E18D16EB3F03D01E94DC3E69C3A1F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: uNjeK1J1D+Qxil+xbDpWWbvU5uETBJmoOrmXkCaFEK8=)
2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d1:6e:b3:f0:3d:01:e9:4d:c3:e6:9c:3a:1f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=7112f4c68ff02b42fd9ad31725ffbf98f60f921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:0c:31:30:de:38:5f:b5:a9:c9:b4:e4:fb:
15:be:33:bf:66:78:dc:02:b5:1e:93:0a:f0:0f:d5:
b3:0b:54:d7:3f:be:96:8b:05:fd:a0:4e:5d:d3:f4:
f8:13:f6:e3:92:06:c2:e4:52:d1:ef:27:e2:09:78:
c7:17:da:a5:c8:a1:7f:97:c6:4d:1d:34:aa:b3:2e:
5f:b7:58:a8:4f:a7:cd:72:a3:d2:5d:6b:04:d9:4c:
7f:82:6c:54:7d:66:e7:4a:1c:58:90:76:dd:ee:62:
fe:ce:49:42:5c:6f:f5:ae:01:c7:a9:52:05:b1:7d:
fa:e1:cb:82:24:61:aa:b0:83:4a:a8:67:00:87:79:
6a:80:fd:d1:2a:8c:55:ff:ba:8c:17:b1:fc:6a:a6:
62:a2:9d:ae:ef:d5:c0:c0:b4:64:99:c7:aa:ee:8a:
fd:fa:13:91:5a:88:00:b2:18:63:5f:f2:46:48:ba:
5b:50:5e:68:f3:c9:67:4e:64:3c:55:d1:c7:e8:af:
9c:ae:da:92:58:56:21:43:3c:20:af:cc:ce:f5:5b:
dc:8c:2f:b2:11:3b:85:0b:6e:c7:24:57:a9:f5:90:
0c:9e:8f:22:06:58:48:90:d4:02:41:c5:1c:8d:76:
7a:6a:15:7c:f5:bc:4c:07:5f:41:dc:ee:ee:78:f2:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:F4:C6:8F:F0:2B:42:FD:9A:D3:17:25:FF:BF:98:F6:0F:92:1B
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:63:3c:d1:e2:9c:7a:8f:d2:e7:96:e3:51:31:5f:9a:87:3c:
fc:70:e4:e1:f8:6f:15:26:cb:67:ba:9a:16:27:14:bf:fc:26:
2c:ca:a9:16:8c:d2:5d:15:d6:ca:f0:ba:94:a5:b4:e9:b4:97:
8f:3a:ac:37:ed:fa:19:04:29:30:6a:d0:78:fd:ae:81:48:db:
76:f4:36:c5:5e:85:87:8b:cd:24:76:0a:cd:e3:f7:f8:27:c4:
ce:77:25:05:5d:a4:e1:67:bd:42:77:e3:65:c7:28:f6:9b:95:
60:ac:f0:b1:95:f2:e7:08:22:02:8a:cf:f1:75:77:b7:5e:23:
5f:3d:81:ea:68:be:81:91:b5:e3:90:a4:74:6a:14:4d:8d:91:
94:22:3b:73:e5:50:c6:07:53:94:ae:96:b9:ea:48:c2:81:f2:
13:ea:f8:ce:aa:fb:36:95:f1:cb:78:36:b5:b4:47:02:7e:bd:
5c:a9:04:2e:71:78:47:78:ab:ff:15:2b:7b:64:16:cc:97:4d:
b8:bd:14:ad:2a:c7:eb:c4:58:e8:c1:42:8a:3d:7c:d6:89:e4:
a3:b8:3e:51:f2:e8:4f:bf:33:e5:a6:24:1e:8e:93:12:33:67:
be:4f:83:51:e9:c5:cf:a1:72:9f:48:e2:c0:64:33:e6:c4:83:
d3:52:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:01 2025 by rpki-client