Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: RHmCDkiZVJQflqmgUC4SLrAO03KChEP1e0f5RefWyuE=
Subject key identifier: 59:D6:5D:68:DD:56:02:9C:ED:7E:71:8E:81:83:02:72:9B:BF:46:CA
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019A72933426E454E42F6563D98DC0DAC1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 11CE
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: eooaWl0welESAxTDvHcrxc6oe43znnPrvNkjaeGVg9Q=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:34:26:e4:54:e4:2f:65:63:d9:8d:c0:da:c1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=59d65d68dd56029ced7e718e818302729bbf46ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:d3:fc:21:88:f6:dc:db:d1:d1:29:fe:74:
42:9e:68:fc:3d:ea:90:29:40:44:cd:70:51:7f:f2:
6c:c4:7d:38:e5:dc:13:c7:96:8d:03:32:7e:2c:16:
46:d9:5e:14:37:2a:3f:b1:49:42:2a:7f:35:d0:bc:
aa:e9:4e:e7:80:6b:62:fb:4b:a4:ad:fd:4b:9b:9f:
8a:2a:7a:62:60:48:e5:bf:63:74:1a:e7:45:90:d8:
ce:b9:e4:fe:9f:cf:8e:de:01:04:ec:82:3c:06:0f:
f9:f3:ae:02:8b:2f:0f:fa:36:e9:a7:f8:2e:3a:04:
f1:f1:d7:9a:27:f8:72:18:96:50:03:32:68:8c:cd:
21:95:96:0f:20:1b:6b:ac:34:a2:ff:21:68:dd:fa:
ab:43:6e:d2:c8:98:4a:bf:3d:0e:94:9b:91:72:11:
37:6d:a9:a1:a3:87:09:6f:59:5d:7c:42:c9:97:aa:
48:5f:d9:d4:bf:36:86:55:b7:28:7a:99:2f:e5:e7:
68:98:1d:47:61:af:fe:93:69:df:c1:4c:2c:02:38:
78:bf:ae:75:b7:15:a2:da:94:f5:04:82:23:ab:b4:
4e:d9:72:17:9e:fd:3a:34:1d:93:0c:20:d3:9d:b2:
a0:b9:ab:f8:43:57:fa:6d:b2:98:41:ef:26:14:dc:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:5D:68:DD:56:02:9C:ED:7E:71:8E:81:83:02:72:9B:BF:46:CA
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:27:19:0a:03:d2:e6:7d:fb:9b:86:83:7e:15:d7:95:83:4e:
73:01:bc:18:bd:c2:a2:25:89:7f:82:8d:b8:0a:2b:a5:2b:fb:
5a:23:82:15:75:1a:8a:0c:d8:7f:d8:e4:5c:03:e0:cf:5a:3e:
9b:29:d1:4d:88:d1:59:c1:8b:e8:9a:63:5f:03:59:aa:85:c9:
79:0b:c9:69:18:e3:bb:0c:a0:60:cd:11:98:20:16:b4:57:a0:
3b:1c:84:20:be:69:eb:80:74:c6:eb:0c:b3:e7:2d:7f:b2:25:
32:eb:ec:45:e9:80:13:be:8e:e4:b4:99:ae:61:c7:19:99:c8:
66:27:83:94:3b:bc:77:f6:e2:c0:10:08:e9:69:08:cb:d3:cf:
48:58:15:59:25:78:f7:d1:5a:67:01:22:8a:d2:84:7f:5d:2d:
80:1b:8a:4a:27:eb:0a:fe:31:c8:d7:5e:d8:0b:05:62:d4:09:
ba:7e:5e:b9:4e:e2:cb:7e:9b:da:f8:87:99:ed:ba:cb:60:fa:
19:cb:8a:70:37:ee:88:37:5c:ee:7d:c7:e2:f4:3d:24:18:67:
b0:3a:04:cd:69:61:95:dd:ae:36:04:32:10:94:c0:c7:44:05:
94:2a:10:2c:54:98:cb:07:16:02:ce:16:80:49:28:32:80:ba:
26:d3:7d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:27 2025 by rpki-client