Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json)
Hash identifier: DoXFYSqSJ+Fy+ONars3SECBJjE71dBYbQKrrCq1adKc=
Subject key identifier: DF:3E:0F:05:46:C9:26:BE:1A:83:D6:7C:8E:E0:A0:0D:8E:E2:92:37
Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6
Certificate serial: 019A7301BAE5DE0DF2F2C51553DA955029E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 13:01:24 +0000
Manifest this update: Tue 11 Nov 2025 13:01:24 +0000
Manifest next update: Wed 12 Nov 2025 13:01:24 +0000
Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=)
2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: 1nvnuzRoS8ANqlccPVLHzGeQU5CeUt9XwjUPlTE3pAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ba:e5:de:0d:f2:f2:c5:15:53:da:95:50:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6
Validity
Not Before: Nov 11 13:01:24 2025 GMT
Not After : Nov 12 13:01:24 2025 GMT
Subject: CN=df3e0f0546c926be1a83d67c8ee0a00d8ee29237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:02:8c:1c:9a:e1:81:77:1e:30:c0:96:c0:
90:00:7e:3e:40:dd:93:76:fd:b8:05:e8:c2:0c:6a:
9f:6d:39:06:60:3f:a0:2a:f3:9d:14:1c:0b:9c:83:
d3:8c:25:21:be:56:39:6d:23:11:59:1e:5c:f8:eb:
bb:1a:9d:a6:c3:f0:3d:37:26:84:ee:42:57:a5:38:
39:b5:6d:3f:2e:c2:c3:ba:68:d2:03:b3:c4:e6:25:
cb:47:3a:74:28:9e:0d:56:34:eb:72:3d:09:5a:26:
74:aa:5b:45:80:4b:2e:7c:36:16:e2:e2:e5:84:37:
11:97:49:f6:12:ae:85:39:a8:4a:37:d7:38:64:f9:
0c:60:38:67:b9:e6:a4:4b:37:2e:97:44:36:f4:d4:
cd:22:8b:01:e6:7c:b9:ec:69:e9:cc:91:df:dc:64:
e5:2f:67:d5:13:70:16:56:41:df:0c:20:c8:2c:f9:
0e:1b:04:d9:5c:eb:a8:4b:2a:76:77:ef:23:70:28:
5f:e9:db:4d:6e:f5:32:c0:14:a7:b1:e3:50:e9:83:
47:52:e5:ca:e8:1d:7a:2a:ad:3c:32:a1:96:79:0e:
f7:1c:08:a4:49:f2:36:06:8f:9a:ea:1e:72:19:09:
52:d3:62:23:0b:35:a3:40:17:9b:5c:ed:bb:bc:9a:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3E:0F:05:46:C9:26:BE:1A:83:D6:7C:8E:E0:A0:0D:8E:E2:92:37
X509v3 Authority Key Identifier:
keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2e:b5:6d:b1:08:27:d6:cb:ea:a6:d5:04:8f:13:b2:1c:75:
f2:07:4b:27:a4:53:a6:6c:be:62:49:c2:34:d7:6e:1b:20:ef:
74:bc:51:98:9b:32:22:8b:d5:1a:66:fd:5d:9d:52:31:47:c3:
be:1b:f1:fb:70:54:4f:ca:c7:87:f5:78:a8:8d:a2:e3:47:b5:
e0:0c:a1:df:35:8d:de:95:60:9c:7c:a6:3a:8d:16:93:46:42:
dc:ec:d0:d3:05:66:2e:3f:86:80:f4:44:aa:bc:28:ed:c9:4d:
f2:4e:5d:1a:ca:2d:69:28:a2:6f:08:83:48:dc:7d:f9:cf:a6:
85:a2:5d:67:e2:6a:05:1e:17:d0:c1:7e:60:80:4f:cb:a0:d6:
4c:66:c4:b3:af:39:cb:be:5b:93:0e:92:5e:27:97:b5:1f:52:
e3:10:6b:6d:96:57:7e:fb:2e:ee:7c:8a:bb:2e:a1:fd:68:6a:
41:81:91:b9:d3:bd:ff:55:cf:6e:8b:c0:21:6f:e1:27:fe:31:
19:c0:bc:e5:cd:42:51:5e:c9:62:ae:82:a8:81:86:dd:0f:a5:
ce:ee:4e:3d:7e:34:06:89:4f:af:48:a6:25:2a:c3:ae:00:23:
c4:a6:b4:a4:b4:c3:52:e1:de:59:6e:66:ab:c8:2b:64:9d:4d:
6c:1f:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:38 2025 by rpki-client