Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: BeslbgPI1DenZqW6n/wiXEK70/m0pB+j74m65d+Mt+I=
Subject key identifier: 9D:96:97:8F:D7:EA:44:7E:A1:62:42:4E:2D:2E:A0:CC:E9:39:D0:70
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019A4F99732DC41544FD89057E60ED68B8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 16:00:47 +0000
Manifest this update: Tue 04 Nov 2025 16:00:47 +0000
Manifest next update: Wed 05 Nov 2025 16:00:47 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: V/KRJweEdQU/lr4lv1REPPAvbeM5PoddkyPcjrgWIVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:73:2d:c4:15:44:fd:89:05:7e:60:ed:68:b8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Nov 4 16:00:47 2025 GMT
Not After : Nov 5 16:00:47 2025 GMT
Subject: CN=9d96978fd7ea447ea162424e2d2ea0cce939d070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:fb:53:ee:a2:3b:fe:e7:aa:50:09:1d:75:
49:a0:57:0b:4e:b4:5f:ab:6a:a2:c4:a7:36:6f:67:
03:20:24:9f:57:da:49:df:81:42:e5:7b:9c:cd:7e:
79:7d:f7:39:04:82:97:e0:6c:f5:3a:af:2e:d6:51:
71:65:e5:12:ac:04:bb:59:39:24:9e:37:27:d9:0e:
2f:98:99:a3:5c:dd:ed:1f:30:c9:c7:68:aa:2a:b1:
e2:63:8a:f9:84:01:be:d2:02:3d:9a:4f:74:7e:7d:
d1:e1:42:bc:31:9c:32:ce:a7:98:52:6f:15:d7:0e:
d8:58:d5:75:ea:b6:27:a4:87:88:0b:c9:ca:41:4f:
19:51:ca:90:b4:5e:db:1f:f0:04:02:3e:74:52:1b:
05:02:ea:ab:3b:05:5e:6f:0e:32:ee:2d:80:55:9b:
a6:88:16:e7:74:6f:95:82:9a:d9:84:f1:96:e4:4a:
89:f9:02:09:d2:5b:84:a2:c6:e3:93:c3:18:75:b9:
bb:4b:a5:28:54:14:7c:00:02:b5:84:51:75:48:8f:
d5:4a:e1:04:86:36:09:10:59:63:c8:ff:d2:c2:47:
70:8d:14:a4:a4:19:ae:0d:88:a4:aa:c8:4f:e3:aa:
5d:71:04:e1:57:84:64:2a:d1:60:72:9c:d0:22:7d:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:97:8F:D7:EA:44:7E:A1:62:42:4E:2D:2E:A0:CC:E9:39:D0:70
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0d:af:56:1b:a7:73:a2:b8:f7:d2:b0:08:78:6e:9b:5f:be:
50:7d:87:98:91:06:87:5e:63:eb:d2:f0:f0:29:0c:b4:10:8e:
27:4f:54:0a:7d:e1:c8:dd:bb:49:67:d9:5a:ce:c4:ff:c4:73:
54:dc:d2:91:40:42:3d:72:0a:c8:86:41:5b:aa:6f:a0:1f:f5:
11:14:de:ec:c2:90:b9:f3:bb:20:47:3b:d6:d8:96:df:35:f2:
ae:e7:3f:51:8d:0d:0c:15:35:80:d8:64:e5:e3:dd:58:28:74:
10:ec:24:6b:63:23:29:d2:0e:b4:28:e7:54:9b:5f:3a:e2:13:
e0:8b:fc:2a:ab:62:38:56:b6:13:86:f9:20:93:fe:9f:12:8a:
38:8a:22:88:b0:0c:38:e2:4a:54:a4:7f:3c:a5:c0:2e:ae:2f:
be:bd:4d:35:e0:02:3c:8e:81:72:31:e6:27:87:6d:40:b5:0c:
54:5b:1f:20:ed:f9:c3:e3:76:88:04:2c:e4:b0:88:b9:e2:73:
4b:60:42:6d:39:29:22:bc:15:1c:7a:45:f1:05:c0:d1:93:af:
5b:9b:5e:12:7c:ec:87:47:09:2b:1f:e0:40:a4:6e:4c:6e:ed:
4b:c2:f5:60:1f:58:a4:dd:d6:95:17:65:a7:bb:b1:fe:df:ff:
31:57:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:07:39 2025 by rpki-client