Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json)
Hash identifier: T5tqS7z7CItAfbk27hJlBHGAVGmTxeZlSax9jQ1cszs=
Subject key identifier: AA:55:E0:C3:8E:10:38:F6:E1:D5:30:32:2F:5D:F3:9D:C6:FF:CC:67
Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Certificate serial: 019A71B8A809A3B299CD8A37A87F7CCB8790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
Manifest number: 133E
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: 5Wl349jn/zrwFBLvsP8XQy7tnjq3jBF+cmOjCtpx+WA=)
2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a8:09:a3:b2:99:cd:8a:37:a8:7f:7c:cb:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=aa55e0c38e1038f6e1d530322f5df39dc6ffcc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:f5:d7:23:ae:c7:0f:88:e6:43:aa:7c:74:
7c:66:2f:0a:bb:fe:bb:7d:25:0a:07:35:8e:2e:00:
fd:79:ac:b0:0b:47:bc:e8:8c:8c:0d:91:12:25:f6:
ee:a6:5e:e1:fe:d2:f3:02:08:a0:bb:ea:a8:70:f1:
07:5a:05:89:d4:ec:64:e6:f0:1c:6d:29:8e:ae:99:
ff:d3:f3:75:d7:2a:82:34:35:e1:ce:61:bc:cd:14:
e7:75:9c:08:18:53:4e:10:32:cc:b7:62:0b:74:78:
eb:8d:63:20:dc:d7:4d:76:07:2b:c7:a7:d5:e2:e2:
c5:d0:20:4d:c6:b7:fb:63:37:96:5e:8b:25:c3:68:
65:7a:c9:c6:db:93:df:a8:57:37:96:c5:6c:ef:64:
53:09:64:0b:e9:5b:85:f8:df:6e:07:79:96:fe:78:
10:53:c2:6c:03:7a:63:a3:d1:94:5b:1b:82:f4:fc:
c2:ff:92:57:46:53:5a:fc:d1:f5:f7:56:74:71:9c:
7b:cd:dc:6c:6f:ed:1f:6a:3e:a4:01:45:12:83:80:
7a:1f:eb:a5:cc:5e:33:19:c7:9d:81:f9:2d:8f:30:
46:6b:8d:25:5c:f0:74:d8:c9:2d:3e:08:e2:43:16:
f2:49:9e:4f:7b:5f:d9:d6:56:94:3f:39:2a:74:a3:
6f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:E0:C3:8E:10:38:F6:E1:D5:30:32:2F:5D:F3:9D:C6:FF:CC:67
X509v3 Authority Key Identifier:
keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bd:83:60:e2:27:85:a5:33:4f:79:75:b0:74:4d:eb:8c:a9:
b9:da:71:a8:87:30:cc:7f:16:4b:fa:38:40:b0:56:ae:9c:07:
4b:8c:85:e2:e3:b1:8a:5d:56:56:2b:c8:c5:97:d6:9d:92:30:
a5:cd:72:96:13:75:4a:3d:94:fe:e2:84:47:f4:84:bc:87:87:
3d:d3:ec:98:49:ed:30:29:f6:27:9d:53:35:de:fb:40:cf:bf:
86:75:d0:67:64:a2:6a:d9:74:26:84:4b:a7:ee:0d:5d:99:53:
47:4f:e7:2f:71:3c:35:f4:73:5b:5d:44:9f:f0:56:61:a0:cf:
e9:42:dd:b9:c1:55:1b:0a:6a:04:45:c4:9e:7d:66:2d:02:44:
4d:0e:1b:6d:89:cd:dc:ab:2c:dd:7e:3f:b9:c2:8f:c4:34:f8:
5d:ac:d3:ac:ed:49:d8:af:68:92:05:20:f0:37:8f:11:08:ae:
05:a0:a1:dd:df:83:f0:d1:1e:54:34:68:ac:f4:5e:96:cf:5b:
4e:28:bf:31:ba:6b:8f:1e:95:67:1f:59:b8:eb:1e:c4:4f:19:
5e:96:23:a7:08:8c:99:7d:b2:c1:3a:71:7e:0b:07:60:21:9c:
4a:8f:59:0a:e4:4a:12:99:48:0c:21:0c:f5:61:32:c2:29:d5:
9b:5f:74:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:01 2025 by rpki-client