Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
File: XLeTntcMiuoxvkk-eOiPSGH1MSE.mft (raw, json)
Hash identifier: GDDVwWD9MTMy3LxLxuSaT3oAvUL6XBLNGGWPGTcLz94=
Subject key identifier: 57:80:7D:86:00:46:4D:39:DD:9A:2C:15:98:5E:F7:72:40:79:09:59
Authority key identifier: 5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
Certificate issuer: /CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Certificate serial: 019A706E4026A7D48770778B934D2A32E73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
Manifest number: 0E03
Signing time: Tue 11 Nov 2025 01:01:04 +0000
Manifest this update: Tue 11 Nov 2025 01:01:04 +0000
Manifest next update: Wed 12 Nov 2025 01:01:04 +0000
Files and hashes: 1: MNNUG7s-7ylAPjfRFELlWbvHxbM.roa (hash: kXXZW/oTF8aLgFWhuw6Ll3MRGWDGpMBRJDUoq94IuRQ=)
2: XLeTntcMiuoxvkk-eOiPSGH1MSE.crl (hash: V3lLif8t/8sFgZPsyAfGuYIxEGyByWRPsQ0FRvZhdRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:40:26:a7:d4:87:70:77:8b:93:4d:2a:32:e7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb7939ed70c8aea31be493e78e88f4861f53121
Validity
Not Before: Nov 11 01:01:04 2025 GMT
Not After : Nov 12 01:01:04 2025 GMT
Subject: CN=57807d8600464d39dd9a2c15985ef77240790959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:dd:a9:a7:40:70:ed:72:c8:80:c2:89:53:
8b:a8:0c:d6:53:49:14:cf:3d:89:35:cf:3e:6f:d5:
61:0c:c4:69:01:47:89:fa:41:22:93:0e:d2:89:f2:
eb:2e:84:95:6e:7b:b2:55:7a:4d:bc:3c:0f:32:af:
1d:c4:aa:c6:8c:b9:0b:c0:c5:23:74:59:1b:17:9a:
bb:8b:6d:e6:7b:0c:e3:4b:ca:b8:a4:ce:b5:b2:f4:
17:4e:94:f4:af:1a:9d:eb:bf:75:a9:a5:d9:bd:85:
af:c0:45:5c:3b:56:3d:67:0b:a0:5a:24:cf:72:3d:
ff:ff:63:ee:8b:85:4d:3a:17:5b:a1:b5:e7:d8:19:
81:ba:cf:33:ff:cc:14:a4:cc:2c:42:bf:a2:bf:ea:
5c:82:0d:35:31:34:bc:90:e2:14:69:ae:ba:71:84:
90:8e:4e:1e:7e:10:7b:c8:ea:df:16:a3:49:08:a9:
0d:39:0c:10:95:b0:d9:88:67:1d:17:81:a8:fb:5f:
2f:b3:e3:b6:64:f7:21:3c:45:02:ad:f0:d8:89:60:
6b:8d:e7:00:d6:cf:88:d1:55:54:23:0f:7a:65:46:
ba:61:3e:57:6d:b2:ec:75:54:79:30:8b:1f:91:c0:
be:f9:e5:03:a9:43:a1:69:41:78:a1:ba:a3:fb:8c:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:80:7D:86:00:46:4D:39:DD:9A:2C:15:98:5E:F7:72:40:79:09:59
X509v3 Authority Key Identifier:
keyid:5C:B7:93:9E:D7:0C:8A:EA:31:BE:49:3E:78:E8:8F:48:61:F5:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLeTntcMiuoxvkk-eOiPSGH1MSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c4386f-d1be-43c8-992f-2edafc60f2df/1/XLeTntcMiuoxvkk-eOiPSGH1MSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:33:c2:52:66:5a:9f:8e:09:6f:8e:b6:70:78:36:cc:7e:
ea:ca:67:49:c1:12:7c:c0:fe:9b:17:f5:16:11:ab:67:ad:94:
8b:6b:08:e3:6c:3b:6e:8e:01:25:ab:72:94:2d:2f:5f:72:77:
ae:87:72:81:60:6d:e1:30:33:3b:f8:5c:b2:6c:48:15:53:74:
82:cf:c8:9d:6a:94:79:21:34:c5:31:92:23:55:b9:eb:7c:40:
52:65:cb:65:49:d2:48:e5:4a:62:00:ae:5a:b0:7c:52:63:3b:
4c:d7:61:e4:78:68:c2:1c:f3:82:28:02:6b:d6:ed:ab:fd:89:
f9:d2:b8:47:1f:04:65:b8:e1:cb:cd:71:94:1b:c6:b6:53:3b:
ba:3f:5f:97:b1:b7:10:01:88:c7:18:17:75:ad:6f:00:90:ec:
57:0a:10:4a:89:ae:c7:a1:b2:4d:95:03:90:fe:ba:34:c4:89:
77:f4:d3:02:79:c0:56:67:96:0c:65:86:59:eb:e1:92:53:9d:
72:59:c9:76:84:90:de:79:7d:ac:74:45:22:cc:fa:07:b5:a3:
d9:b9:66:33:7b:d2:35:80:26:2a:5c:1e:01:98:66:73:9f:62:
69:7b:ac:51:cb:8e:90:76:61:cf:87:92:05:c3:80:a0:81:aa:
f9:8d:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:14 2025 by rpki-client