Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: 6TFvfpsyJVbvIJAKiGlHSw7nHXG3crqxwhrtzCmrGcQ=
Subject key identifier: C0:83:05:AE:76:1D:54:3E:36:52:48:C7:3A:61:3E:6F:68:9C:9D:97
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 019A571C54561AD75C7D886FBE6C4BE3D4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 1711
Signing time: Thu 06 Nov 2025 03:01:05 +0000
Manifest this update: Thu 06 Nov 2025 03:01:05 +0000
Manifest next update: Fri 07 Nov 2025 03:01:05 +0000
Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: rdJtn6FpOar/NaQs0nW0LtFVm7OLuZsMRPZWXsIIQjI=)
2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:54:56:1a:d7:5c:7d:88:6f:be:6c:4b:e3:d4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Nov 6 03:01:05 2025 GMT
Not After : Nov 7 03:01:05 2025 GMT
Subject: CN=c08305ae761d543e365248c73a613e6f689c9d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:1f:b7:69:f7:c5:49:7d:d1:de:27:c8:99:
83:61:74:40:98:7e:48:72:9b:bb:2f:b9:87:75:e4:
49:63:d5:5b:86:32:a7:56:99:45:63:21:56:de:d1:
a2:56:c5:b2:d6:50:c3:0a:c6:4f:ee:74:7d:b6:35:
0c:cb:42:03:92:e1:da:2c:58:8e:a5:ce:49:23:ae:
9f:ed:3b:22:f2:8e:30:8b:fb:ff:fa:f7:a3:db:b6:
58:1e:92:28:ce:ef:af:c4:65:91:0b:ab:b4:e3:b6:
8e:21:25:8a:01:e8:6e:ef:47:96:63:0a:1e:75:68:
57:4e:87:38:e6:e9:a3:f2:af:82:ae:9a:fb:36:24:
c1:8a:b7:2a:48:4f:54:dc:fc:87:3c:50:09:5d:3d:
16:eb:d2:87:02:10:0d:d6:f3:e9:1f:38:bd:0e:0b:
4a:fe:ec:17:fe:ea:8e:77:ee:74:20:7c:1d:1d:43:
7b:d6:95:85:20:7d:5a:e6:9c:7d:44:17:7c:04:dd:
5a:e8:d2:ab:af:7c:25:21:8a:ca:07:19:51:9b:a5:
d0:4c:ed:d7:90:81:1f:66:56:d8:34:e4:96:7f:1d:
13:f4:0c:82:2b:e8:9e:92:64:61:76:48:a0:42:cf:
1f:e7:06:80:7c:e7:ca:03:cb:ab:95:34:75:56:4a:
c0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:83:05:AE:76:1D:54:3E:36:52:48:C7:3A:61:3E:6F:68:9C:9D:97
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:81:f6:bd:01:6c:c9:32:70:52:04:2b:8e:9e:79:9c:15:8e:
4a:b6:7e:00:b4:ed:05:e4:2f:2f:73:e3:d9:3f:46:18:4e:3a:
18:92:a9:30:4d:ef:ea:50:69:60:92:83:5f:40:75:6c:10:8d:
08:04:29:49:ec:03:68:64:2f:35:f7:a2:d7:ed:79:d4:21:7e:
eb:b4:04:e0:cc:b3:62:bf:bc:be:78:53:0e:80:7a:72:c6:ba:
e8:13:8e:24:17:e3:fb:ca:1c:02:ad:aa:e0:c2:a5:0c:08:6d:
a6:40:5d:d2:91:87:6a:ed:9f:93:20:af:30:7e:ec:22:61:4c:
cc:ac:c2:e1:8d:95:cd:62:6e:bb:35:d6:b4:c6:9a:e6:fc:40:
dc:f8:b5:5f:c4:ed:7f:a5:c8:50:f8:dd:33:8b:32:81:9b:90:
e3:a2:41:c6:d7:91:54:ea:3c:90:0f:f3:7e:43:ef:30:f4:55:
89:d6:07:84:5b:4b:b5:4b:cd:db:17:58:b2:87:14:98:66:c4:
5e:3c:04:ee:d1:c9:07:18:4f:ba:fe:20:73:b9:20:63:15:2c:
08:11:58:91:34:93:be:38:e9:3e:1e:04:b0:2a:f9:74:33:64:
76:b1:3d:c5:14:26:87:1c:c2:22:fa:2c:d2:db:2e:1c:29:9e:
45:f3:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:22:51 2025 by rpki-client