Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: Y/gMPErhxf4nDuv5E27ujd81sdVnHvAlRuUJ5K8Xd34=
Subject key identifier: 1B:AF:19:4E:0B:CC:3D:F0:9E:61:A3:40:A8:9B:67:C3:72:0E:8A:BC
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 019A4F2B7E9DA6E7025B4EF14A17B009F111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: PmyLAIp/yGE3iVOt6u1uqVTLQepo+vIYiJvhl+HTcTM=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7e:9d:a6:e7:02:5b:4e:f1:4a:17:b0:09:f1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=1baf194e0bcc3df09e61a340a89b67c3720e8abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:33:14:14:da:7d:fe:22:c8:c7:a0:d9:11:
66:3d:f7:b6:6d:0a:ff:70:28:4f:8a:55:d0:42:4f:
3a:36:3c:ae:cf:9d:62:d7:29:f4:f1:2d:e2:e4:d5:
47:79:04:09:db:46:7e:aa:e7:6e:0e:d5:61:3b:54:
52:c8:d3:29:a7:90:66:7f:e4:2e:f1:2b:6c:fb:df:
b2:51:15:1f:31:2a:bd:64:93:72:14:7f:4f:e3:73:
64:77:e5:ee:f0:7e:1f:18:d8:a0:1b:43:23:be:57:
ee:f6:c2:78:af:35:84:25:70:8e:34:14:f9:08:59:
69:ac:ae:93:70:a7:03:9d:84:f5:3a:a7:e0:e9:8b:
33:04:e6:67:79:89:a5:df:0f:47:f4:0d:af:2a:fc:
cd:33:cd:58:13:37:cc:f5:e9:bf:ef:dc:28:89:9d:
c5:46:c0:1e:f1:9d:0d:f7:59:8c:7c:42:38:12:59:
0b:59:ed:64:41:6b:58:01:f1:a8:38:87:54:b3:aa:
ef:82:fe:47:b6:31:73:14:51:17:80:bb:ee:d3:dc:
4a:af:d3:05:e6:b5:b0:cb:e1:14:f0:4a:92:50:ed:
0c:ad:c1:1a:a7:5d:32:0c:95:95:bf:e7:0a:f4:3f:
99:2b:f7:5a:e8:3f:63:30:c7:f1:bd:65:2a:9a:a5:
ae:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:19:4E:0B:CC:3D:F0:9E:61:A3:40:A8:9B:67:C3:72:0E:8A:BC
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:29:80:fd:b8:51:35:2e:d8:1e:1a:6f:02:2d:80:96:a5:74:
53:83:a3:19:b3:e4:73:e2:19:50:23:6c:be:0e:6e:39:fe:c6:
c7:eb:03:a2:3d:bc:a7:db:84:be:a0:db:6a:6f:86:21:da:c8:
dd:97:31:35:3b:2d:d9:02:2f:b7:7a:d7:2e:de:36:75:b0:1e:
16:2b:f9:7e:66:94:6b:80:f6:5a:99:c5:30:24:80:b3:c7:6c:
af:57:b3:ae:2e:94:db:4c:19:f0:04:6a:c6:9f:93:60:f7:35:
02:a0:ab:ba:36:03:b9:4a:0d:3e:04:2b:62:8e:c0:96:0d:0c:
a5:a2:5a:db:60:03:3a:78:29:42:35:51:e3:9f:d8:8b:be:ce:
69:32:4c:75:a9:a6:5e:dc:ca:21:9a:ea:d7:60:f2:a9:e2:42:
13:91:cf:c5:56:f9:fe:68:07:c2:55:23:56:5e:eb:90:49:fd:
9a:99:f9:10:0a:1d:f2:2c:d8:7d:ed:1b:18:96:0c:a7:4b:4e:
e3:9d:7e:41:0e:39:1a:64:2e:7e:8a:56:ba:72:00:ce:15:62:
0b:4d:89:1d:2e:ac:31:5a:95:b5:bb:32:4e:36:3a:89:23:43:
d7:73:86:5e:3a:c9:bf:ac:84:d3:41:97:52:27:95:4a:f2:18:
ed:6b:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:57 2025 by rpki-client