Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
File: 1XfOFDQjLYCBldDKcKs5HfsHry0.mft (raw, json)
Hash identifier: 6I9sN8qs0zrYGMHSqwDvazH6s8V1Ztp5EWZL2KiH804=
Subject key identifier: D4:44:B7:D8:21:63:78:DE:07:AF:DA:3C:9C:9A:38:44:41:E9:9D:75
Authority key identifier: D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
Certificate issuer: /CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Certificate serial: 019A4F99036F35141914C461F7F8D4FE7F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:19 +0000
Manifest this update: Tue 04 Nov 2025 16:00:19 +0000
Manifest next update: Wed 05 Nov 2025 16:00:19 +0000
Files and hashes: 1: 1XfOFDQjLYCBldDKcKs5HfsHry0.crl (hash: V7uj/Rimr3hHcAJ/pJhAwrssB752G0qtRnngWJiL7HE=)
2: HcDxgF3nqk8cgEWN2FjSYTqgWIU.roa (hash: zRQPtKl4Mi8+zyT9yY1R1Qmmn1wM9W5eQbvQLliU+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:03:6f:35:14:19:14:c4:61:f7:f8:d4:fe:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d577ce1434232d808195d0ca70ab391dfb07af2d
Validity
Not Before: Nov 4 16:00:19 2025 GMT
Not After : Nov 5 16:00:19 2025 GMT
Subject: CN=d444b7d8216378de07afda3c9c9a384441e99d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:cf:53:b1:d2:5e:f8:ef:ee:ac:fa:30:51:
3a:49:0a:78:c4:1f:aa:ce:f3:57:73:14:06:66:8a:
ea:36:26:f6:bd:29:56:69:ee:b1:ff:96:f8:d1:2e:
1c:75:aa:41:35:8f:2f:ab:df:e8:39:4d:6e:69:56:
c4:f3:38:cc:a0:f5:76:ee:6b:b9:3f:15:a4:5b:cf:
dc:10:70:31:b5:18:65:38:1c:58:c0:9b:09:e2:19:
81:8a:d5:73:71:02:23:d7:70:e2:d7:96:7b:c9:74:
ff:c9:14:80:22:b7:d5:d6:5a:01:ed:c3:c8:1f:a1:
fd:20:3b:0d:f7:a8:50:b3:2b:ac:22:a2:9f:78:34:
3c:22:0f:2e:ef:39:5e:87:68:9d:af:16:d5:5e:f9:
fc:60:f0:d8:c5:29:83:45:ec:71:f3:84:c8:1c:4a:
15:95:28:ac:f9:47:74:55:a6:6d:96:7d:0a:f9:ae:
f8:31:c1:2e:af:d9:bc:3f:c0:ee:5e:41:91:a1:a2:
b7:9f:d7:a5:53:d1:db:0e:c5:6d:55:77:62:18:54:
cd:33:17:0a:fb:36:d7:c2:2d:9e:42:74:2b:dd:e9:
2e:a4:8f:db:07:6c:48:d5:72:dd:a5:ab:bb:7b:2f:
9c:a4:b7:f6:cc:25:dd:e7:dd:e9:aa:c7:c8:3d:9a:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:44:B7:D8:21:63:78:DE:07:AF:DA:3C:9C:9A:38:44:41:E9:9D:75
X509v3 Authority Key Identifier:
keyid:D5:77:CE:14:34:23:2D:80:81:95:D0:CA:70:AB:39:1D:FB:07:AF:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XfOFDQjLYCBldDKcKs5HfsHry0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0d615e-24db-47ef-9aa3-60e6b148d28b/1/1XfOFDQjLYCBldDKcKs5HfsHry0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:24:71:93:eb:2f:9e:c8:38:3b:9a:2d:a0:fa:53:96:e0:6a:
8a:4b:15:3c:06:be:d0:0d:8f:2a:b5:35:06:7e:ea:1c:8a:00:
ed:aa:5d:ce:f7:2a:23:f6:cb:8b:48:de:ca:1c:53:20:0e:6e:
17:26:f2:4e:bd:41:7b:df:10:83:57:84:af:53:67:e7:30:e5:
19:2c:55:21:24:0c:49:dd:8b:72:9d:61:ef:17:a9:3a:32:9c:
b0:22:e5:c4:3d:77:b5:f0:94:7e:a6:cd:72:54:84:4f:aa:53:
a7:5d:ab:aa:80:5c:fc:51:23:2e:fd:b9:e6:12:db:8c:6f:b8:
34:83:08:06:d0:9a:33:53:2d:73:34:84:95:3c:af:0a:be:24:
b1:41:62:3f:b4:36:26:09:9a:7b:4a:3d:4f:63:89:e5:69:94:
a1:ef:b2:23:2c:c4:ad:8a:93:72:09:bc:1b:8f:49:1d:19:e6:
d9:1c:44:f7:99:0e:91:b7:c5:cc:64:30:6b:c3:99:5f:e4:46:
89:d0:7f:4a:1f:d7:17:c2:b7:5e:77:85:92:38:b5:90:54:58:
64:5a:b4:a8:2c:56:6c:d7:2b:ab:33:06:57:4b:ec:fe:1f:c4:
2f:81:c9:ca:d8:5b:19:24:00:86:4e:f4:b4:43:9e:52:cf:0b:
a1:3a:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:20 2025 by rpki-client