Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: ttrsnhKJk+IUXW1K12Vt7ROjLzIxvtxvaAiKNwY4BIk=
Subject key identifier: A0:17:A1:6B:1D:26:95:CA:E2:EE:E3:6F:A5:62:30:81:D2:69:85:96
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019A4DE179F34C854772973C35850B060F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 1170
Signing time: Tue 04 Nov 2025 08:00:13 +0000
Manifest this update: Tue 04 Nov 2025 08:00:13 +0000
Manifest next update: Wed 05 Nov 2025 08:00:13 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: WWm6YbEmMtt88xdlJXu5v9TXWVraeB/MH5ZvxnqLGmc=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:79:f3:4c:85:47:72:97:3c:35:85:0b:06:0f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Nov 4 08:00:13 2025 GMT
Not After : Nov 5 08:00:13 2025 GMT
Subject: CN=a017a16b1d2695cae2eee36fa5623081d2698596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:22:c2:b9:88:9f:0d:55:e8:93:4e:3b:2d:
1a:64:97:f4:04:ce:ea:2d:a4:0b:f4:70:4d:29:34:
85:cb:9c:5c:fd:18:b8:98:d0:10:27:57:6c:75:68:
bb:37:29:e1:b5:06:b4:9b:54:a1:75:62:ae:c7:9e:
78:2b:17:04:75:99:dd:88:b9:26:15:60:9d:4f:b7:
b6:f3:d4:fc:4d:8b:b5:aa:7b:88:4d:87:69:c0:f4:
ff:75:4f:a0:03:ab:71:61:f8:da:9d:02:8d:63:fc:
fc:0a:4e:7b:5d:40:1f:12:32:5e:fe:b0:7e:fd:4a:
54:26:4d:00:66:6e:8e:06:38:28:c3:12:43:28:bf:
ad:86:95:d9:2b:ad:4f:66:dd:05:38:82:1a:bf:ff:
1b:7e:b2:dc:d0:97:8b:ab:45:45:96:a3:be:7a:2e:
15:dc:62:63:33:3a:5e:6c:6d:be:ea:cb:69:10:a9:
44:85:b7:72:40:9e:c0:4b:ed:4f:ea:4e:d2:58:1d:
d2:50:93:c2:79:ca:48:70:4b:4d:11:79:1e:6f:a3:
85:33:7a:0c:37:57:28:ba:eb:e6:45:52:15:fd:e4:
a9:11:58:f1:07:64:e4:0b:5d:9f:bc:0d:1b:ac:82:
6e:00:fe:14:89:ba:5b:d9:e5:27:da:40:be:13:f5:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:17:A1:6B:1D:26:95:CA:E2:EE:E3:6F:A5:62:30:81:D2:69:85:96
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:38:9b:f6:28:ab:9f:4a:13:d9:ea:f0:a6:ee:f7:36:6b:e6:
80:4c:5f:82:55:5b:50:2d:08:7a:6d:7a:66:57:c5:21:76:19:
bd:f3:ea:d8:be:89:40:7e:86:78:2f:92:bc:e8:96:bb:cd:c8:
7d:6a:fd:70:4e:55:68:35:b8:04:91:d8:ab:82:a5:2f:67:5b:
95:81:45:3f:e3:54:2c:f9:55:c6:ee:04:96:98:a0:74:b3:b9:
76:81:85:f6:0f:48:c2:73:23:f5:53:d6:fe:2a:4e:8d:c1:ea:
e0:31:77:ab:95:27:d4:ea:d9:0f:d3:c0:9b:cd:9f:a9:d6:3e:
89:fa:d2:b8:7f:ca:17:ae:2c:fa:ec:fb:5e:ef:5a:a8:8b:4c:
15:af:9c:4e:46:3f:1f:35:14:07:ac:6d:96:65:7a:9c:7c:f3:
55:7a:c6:bc:00:20:63:0f:26:27:fb:e5:5b:cd:bc:6f:5d:d8:
01:37:c9:d7:93:fa:55:5b:56:e5:5e:c0:87:5d:c5:b9:fc:a8:
25:9c:fb:0a:fc:15:1e:a7:a6:51:ea:d1:9a:5b:8d:c7:48:f3:
63:28:33:a6:8c:f8:1c:d1:8a:2c:7d:9f:a2:99:80:06:51:f6:
d2:a7:2c:48:9c:db:01:22:3a:5f:2e:f2:08:a7:c4:a1:0a:4e:
6d:43:f9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:37 2025 by rpki-client