Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: H0JkxFolcjFDx+y83Ji++AGu6kFAaSJNjjQWcQAoXR0=
Subject key identifier: FD:86:F6:C6:45:7D:BC:70:77:2F:F2:20:44:12:22:CB:68:19:46:C0
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 019A4D3CE1C099C5165AA3A8240A459C34D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 12B1
Signing time: Tue 04 Nov 2025 05:00:26 +0000
Manifest this update: Tue 04 Nov 2025 05:00:26 +0000
Manifest next update: Wed 05 Nov 2025 05:00:26 +0000
Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=)
2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: xgF7VlTJxtJIWpi6EwQcj5slOdCeqxcC9SgyXfH5BSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e1:c0:99:c5:16:5a:a3:a8:24:0a:45:9c:34:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Nov 4 05:00:26 2025 GMT
Not After : Nov 5 05:00:26 2025 GMT
Subject: CN=fd86f6c6457dbc70772ff220441222cb681946c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:40:02:e0:e5:db:0b:e1:44:d1:2d:e3:33:
c5:cd:68:68:96:7e:23:fb:01:45:a4:c2:8b:40:e0:
cd:42:8a:98:88:f1:31:15:65:ad:43:1f:4f:03:87:
88:3a:c9:10:e0:74:f2:1c:13:e7:21:a4:1c:02:1e:
ad:84:d1:8c:5a:7c:c4:11:2b:25:6e:f8:76:63:80:
5b:90:72:c9:45:9c:75:64:f4:c3:ef:b2:a0:3c:11:
c7:d6:ee:88:5a:44:27:7d:09:be:2f:bb:9f:ee:2c:
7a:c2:5a:e5:19:cf:5f:35:de:ff:90:ff:21:dd:1d:
46:40:4f:56:d6:07:f2:da:7e:88:ae:93:39:8b:3d:
54:d7:b3:57:2b:15:d8:ad:d5:f9:22:e0:82:c6:fc:
a5:6f:61:89:50:62:46:b0:b6:2c:4c:76:1b:c8:5b:
0d:d0:fc:c1:9a:ab:89:13:35:2f:fd:a4:fc:5f:10:
f1:c2:be:e2:27:bc:68:2c:35:23:c1:d6:c0:2a:0c:
13:07:e7:2c:43:3c:a0:49:26:6e:a1:07:4d:aa:bb:
90:bf:5e:f1:a9:e1:ed:71:75:07:55:a0:c2:f6:1f:
02:09:6b:3a:71:50:38:b4:d2:96:1c:b1:9c:4a:5e:
9a:e3:ca:3e:49:1b:f5:12:6e:f0:4d:6c:ce:8d:88:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:86:F6:C6:45:7D:BC:70:77:2F:F2:20:44:12:22:CB:68:19:46:C0
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:3a:08:4e:9c:e6:33:80:77:1a:e6:10:cd:82:e2:40:d8:fc:
a8:11:bf:71:43:46:e6:af:60:69:31:09:14:e0:88:6c:cf:91:
22:70:e3:af:c5:27:df:fb:28:aa:0e:14:72:d4:d9:8d:d9:ba:
87:2d:c9:cc:f0:61:9e:87:c9:db:5f:3b:df:d6:1e:2c:cf:2c:
a2:58:09:9e:3d:cd:fe:12:85:53:77:e9:d6:54:b2:20:1b:15:
8c:94:b1:d4:7a:3d:d4:05:60:76:3f:c1:1b:d8:d1:0d:46:f5:
7e:f9:ef:52:e8:c8:2a:6f:1f:a9:67:75:aa:a8:2d:68:d5:0b:
67:ea:80:36:71:87:a9:b8:8f:4a:32:8d:9d:a8:15:6e:db:78:
c3:db:df:c9:a8:f6:56:ec:b6:bc:d5:00:d3:e8:bb:e6:9c:f1:
75:1d:d2:df:75:54:13:24:af:8d:1b:99:47:a1:fb:01:c7:87:
c9:65:26:4a:17:cc:b5:79:78:74:68:ba:91:94:5c:f7:74:cf:
8c:00:af:2c:a7:23:b7:d6:6d:93:df:c4:31:03:77:32:2e:99:
fc:f6:1e:46:75:5b:90:0b:2d:99:ec:36:00:e7:32:e6:ff:73:
50:ce:d1:47:7c:c3:e6:01:3f:37:10:eb:08:e9:eb:58:bb:9c:
06:06:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:27 2025 by rpki-client