Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: d9RAEjgMSqjBcHN5V/2FomEPYUoBxgrNFDhCezLmJL4=
Subject key identifier: 40:48:38:F7:22:B0:9F:CC:A5:28:A5:C6:A3:4A:D7:13:44:26:6D:82
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019A71EE886137E66792C8957FA0AF5D5021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 070F
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: AYZF24EgOrNz6WZhkXpTDIKj7Uw.roa (hash: XuYEiMGlP57vEAu/M5jaVByOWmDwAZB50X25JNOPTpo=)
2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: jPG8tnQWPprn13n70zMWutFag0bzBvTUK6Oop4CMw7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:88:61:37:e6:67:92:c8:95:7f:a0:af:5d:50:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=404838f722b09fcca528a5c6a34ad71344266d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b4:89:b8:6f:a6:95:8e:7e:4a:8f:17:b8:c3:
10:9f:2c:b0:4b:25:1c:46:c2:05:f8:1a:d8:78:d5:
9a:5b:f3:05:8d:27:6a:f6:b7:b7:df:af:47:b0:fa:
14:b9:46:dc:b6:4d:b8:ed:99:cc:e0:b4:a2:4d:7d:
31:5e:55:d1:c2:f2:08:9b:f2:0d:15:ff:f6:29:54:
da:34:9d:74:d3:7e:f3:1b:6a:85:50:2c:e7:f0:5c:
2f:7d:66:fc:54:49:97:90:d0:20:46:aa:b8:f9:07:
74:ae:09:48:c9:04:d5:ae:fb:9e:95:e6:eb:9e:7b:
01:a0:47:a9:23:a8:6e:52:af:3c:f1:d1:90:1f:23:
ea:cc:5f:4b:fe:c9:59:dc:c7:14:d7:42:2e:b4:a1:
f7:ed:95:ef:e5:a0:c8:91:93:7b:09:48:f6:83:d6:
bf:01:6a:13:83:fe:45:e9:25:3c:0f:22:1f:78:c4:
10:7f:24:44:e2:0a:6f:a5:04:23:56:dc:e8:0f:a8:
4b:f1:3b:4b:0a:7f:0c:e6:08:72:4b:e0:8f:b3:1e:
fc:6a:3b:b5:50:c0:17:cf:72:56:da:52:54:ba:82:
52:4c:62:b7:e7:1e:e7:05:64:27:ca:ef:f8:a6:8c:
c1:b9:8d:6a:df:39:e9:6a:e1:02:06:a1:29:32:7c:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:48:38:F7:22:B0:9F:CC:A5:28:A5:C6:A3:4A:D7:13:44:26:6D:82
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:90:07:cf:fe:71:2b:9f:e5:b3:c4:43:ba:94:37:59:4e:2c:
03:17:16:d8:b2:d3:b2:9d:b1:74:31:f5:10:a8:fb:1b:35:4a:
86:46:fd:18:03:d8:78:7a:86:b0:8b:31:a1:68:7f:54:6e:37:
fe:af:4e:64:85:7b:34:7a:eb:c7:12:96:44:5a:72:c5:f7:17:
ba:fc:90:d1:bb:c4:df:7f:7b:7d:f7:bf:23:86:7c:f4:77:49:
a7:2a:0a:a1:99:3d:52:0a:b1:ac:97:8d:86:a6:70:fb:ac:09:
5b:62:31:4b:4c:80:ca:3e:f4:e6:14:df:52:96:4d:5b:34:21:
fc:07:23:e5:12:34:69:fe:b3:e6:6e:5f:af:60:55:ff:5f:23:
6f:86:a2:89:32:21:8d:83:fb:b3:b4:3b:67:83:88:e1:9e:72:
95:75:ba:10:d4:cd:e8:47:76:c4:64:de:df:3b:d1:b7:b2:35:
5e:c6:f2:2b:56:f9:01:02:af:cd:77:08:7b:1a:f0:55:72:d8:
cb:e9:2b:68:bf:c5:20:35:3a:39:7c:00:45:e4:61:74:17:2e:
af:2a:12:f7:7b:10:5a:45:8b:50:c9:91:ab:c0:1f:68:a7:3c:
ff:1a:56:dd:a8:bd:15:7a:a8:0a:28:7c:36:59:c6:bd:8b:2a:
65:99:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:18 2025 by rpki-client