Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: RXnpPgkm4IitDhBXV2qwqZExjSCIzlzh9O1u7R6GusY=
Subject key identifier: A9:DD:EA:02:EF:95:71:79:54:8F:7E:1F:E6:7E:CA:3C:90:35:33:FA
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019A7225DE2424B6CA42F6B189B66FC9172B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: Vv5iTe0QNIR2SsBJqeqtaxw0ImJQtBPuhbknOVTmsHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:de:24:24:b6:ca:42:f6:b1:89:b6:6f:c9:17:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=a9ddea02ef957179548f7e1fe67eca3c903533fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:62:37:5f:b9:6c:f3:88:2a:4a:c8:0a:e0:
89:90:9b:a5:62:95:e8:95:c6:68:38:ad:12:21:09:
5e:e1:1d:dc:ec:c7:37:54:2d:68:4b:27:82:3d:47:
fa:62:32:5d:52:4f:b6:84:e5:d3:74:fb:ba:9b:a0:
9f:0b:79:d1:e8:e6:ee:db:73:b0:29:f0:dc:3d:fa:
39:23:62:47:1e:55:a4:8f:1e:de:f3:ee:e2:f6:9e:
89:8f:14:00:fb:e8:3a:82:a2:b5:e2:93:1f:46:6c:
84:3d:d5:7d:a0:f7:e5:73:b0:61:f7:12:8f:a8:ce:
72:2d:53:ad:00:cd:d9:6d:39:b4:2a:b4:62:ae:8d:
ad:38:04:dc:7f:ac:15:f1:4c:e9:ff:fb:02:91:36:
a8:31:d6:ee:9b:b0:4d:8d:04:b9:fa:b9:18:87:2f:
d9:67:d9:ae:67:f7:70:90:1b:d3:88:23:df:7b:17:
bc:7c:ca:6f:f8:e5:32:47:ab:4f:9a:29:3c:6a:3c:
a9:0a:56:01:e8:b9:c4:1f:b4:3e:52:a7:a8:75:fd:
1f:a4:66:54:0f:9a:da:01:63:ea:a1:b9:9a:63:75:
32:ad:04:51:47:0d:b2:07:ad:dc:f6:06:ee:03:d4:
cc:1e:8d:3b:c2:e2:24:d0:a0:4b:0d:8f:d5:4d:f5:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DD:EA:02:EF:95:71:79:54:8F:7E:1F:E6:7E:CA:3C:90:35:33:FA
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8e:86:21:ee:a2:86:08:1b:e8:18:bb:44:8a:51:d4:e2:57:
80:9c:98:f8:98:dd:ba:e2:85:72:a3:54:92:86:73:d3:91:b1:
ef:4b:fc:20:7f:98:3a:15:36:27:df:e4:d2:98:46:0e:50:11:
16:76:e8:b2:fa:9c:d7:66:8a:88:65:2f:1c:cc:7b:58:7b:8d:
5b:0c:f6:13:e4:86:11:55:48:74:3a:67:35:e6:40:6e:a9:3c:
ca:26:df:9c:8c:b9:c5:02:39:bc:cd:02:0a:b2:a2:c1:fc:d1:
18:a5:d6:ea:b4:fd:a0:88:a7:3d:f4:93:b8:f3:8e:ef:cb:41:
d6:44:3c:a0:40:6e:8c:d1:1d:9c:1a:f4:c8:43:a0:1d:6c:73:
5e:a5:c0:1d:5d:3a:18:84:b2:54:35:09:3e:fe:77:9d:66:55:
5e:1c:aa:14:d8:05:70:99:e0:31:ae:60:08:ee:e4:2c:19:7d:
6a:46:8f:1c:3b:34:a6:1f:ad:b7:93:b3:a5:55:10:61:1b:ad:
d6:91:99:87:92:6f:b8:86:a6:2a:9d:5b:7a:6d:d8:61:99:96:
bb:bb:a8:03:bd:4b:e9:dc:0a:74:33:5e:f9:5a:42:cf:f2:02:
4a:1a:11:72:9a:74:a4:88:48:a9:cd:91:54:57:f6:55:02:23:
a5:fa:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:49 2025 by rpki-client