Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: 1IYCYZqSaY5p2wzJq03SvX4YFnXut8dS3ONcA9pUrPc=
Subject key identifier: 88:54:E9:69:8A:6C:B2:A4:D2:E4:5F:EA:03:CF:48:0E:55:69:28:6C
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019A706E64F710161205C28E1994AAB70C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 0537
Signing time: Tue 11 Nov 2025 01:01:14 +0000
Manifest this update: Tue 11 Nov 2025 01:01:14 +0000
Manifest next update: Wed 12 Nov 2025 01:01:14 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: ciTkS0WR7/AhyArnwBIsPkBCwYMH8diQNZuZ4h3m04A=)
2: ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (hash: LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:64:f7:10:16:12:05:c2:8e:19:94:aa:b7:0c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Nov 11 01:01:14 2025 GMT
Not After : Nov 12 01:01:14 2025 GMT
Subject: CN=8854e9698a6cb2a4d2e45fea03cf480e5569286c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:3f:18:ae:65:03:0f:b4:fe:6e:0e:9b:1e:
13:0e:e0:51:f0:60:f2:ef:f8:61:27:53:56:e1:5b:
b6:9d:1a:fb:02:f9:a5:35:1a:1c:10:c2:e6:e7:17:
c7:49:6d:94:c8:0a:e3:9e:d0:9c:27:5d:91:84:5d:
93:23:96:f1:10:82:ab:48:73:ec:e1:4c:b7:a9:30:
e3:f0:77:83:6d:0f:c2:42:85:71:60:a0:4f:68:16:
01:ee:e9:23:97:06:d8:1e:51:6b:7a:7c:ce:10:1c:
88:6f:d1:ae:1d:50:d3:d0:c4:77:cd:80:b4:31:d0:
f1:b2:fa:38:f3:8f:a5:f7:05:46:9f:45:a3:39:a3:
62:47:29:93:94:d9:ab:d9:67:2c:e9:47:26:dc:52:
c9:20:e4:b3:56:d9:07:1a:c1:ee:77:84:bc:82:42:
44:f0:75:40:b7:a3:00:2d:87:a7:51:a2:fc:ec:db:
f2:a1:da:35:82:a0:c6:bb:f2:e6:c3:4e:32:39:fd:
92:82:29:85:bc:6a:20:de:e9:c1:bd:04:f3:74:6f:
22:1c:c8:59:a0:c1:6e:51:a7:b0:73:08:9b:78:34:
8c:33:d5:d6:98:2e:9f:79:67:38:81:b5:3d:92:b1:
ce:b4:91:93:d2:86:d0:d5:f5:e2:31:a0:e6:81:ba:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:54:E9:69:8A:6C:B2:A4:D2:E4:5F:EA:03:CF:48:0E:55:69:28:6C
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ae:26:78:49:e0:70:6d:25:2e:ec:52:a7:aa:9f:ea:1d:08:
49:8e:e3:3c:60:2b:c0:95:52:e5:99:1a:96:5d:3e:3e:20:a7:
4f:59:a3:89:2c:d1:fe:56:6e:1c:9d:0b:b8:3a:1d:9f:ce:16:
b9:52:10:76:8e:3f:29:50:a4:ca:29:b1:d7:43:3b:de:2a:61:
2e:31:1a:2c:b4:c9:6f:64:74:de:2e:99:a1:d4:b9:7e:33:53:
0b:01:59:4c:1b:04:19:98:6f:ad:ba:5c:37:b3:38:65:8d:d4:
da:a3:cf:1e:cb:fd:fb:50:a5:b3:44:61:77:21:63:e4:14:86:
06:ea:03:dc:06:84:07:4c:93:f9:a8:1c:f6:30:da:97:7f:9e:
ba:9a:6a:ef:5b:a7:4e:e4:44:3d:bd:42:c2:dc:65:c6:6c:22:
e7:ff:70:0d:ae:03:bc:19:7f:f1:7f:1d:94:0b:16:1e:2b:07:
4c:84:76:6b:49:75:57:51:3e:bc:04:65:ba:19:2e:1f:63:9e:
1d:de:70:8a:8d:75:ae:56:6a:ff:57:f4:9a:7b:d5:9a:7a:08:
6a:92:35:ec:34:3e:d8:68:c7:b0:bd:eb:1f:a9:31:00:1e:a9:
b5:c5:e9:ee:39:ea:22:44:48:2a:4f:ac:6f:b7:59:32:da:f9:
4b:f8:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:53 2025 by rpki-client