Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
File: XM814TYW15djDR4lQAwTxiEfUAw.mft (raw, json)
Hash identifier: NwW3ACPYAV7AX4057tgV37YnocDhURHykKU2CZStGOg=
Subject key identifier: 4C:B6:B4:1E:1D:AE:BA:37:00:E6:2C:DB:8B:41:86:58:0B:BA:47:DC
Authority key identifier: 5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C
Certificate issuer: /CN=5ccf35e13616d797630d1e25400c13c6211f500c
Certificate serial: 019A72CA66ABA0A1CA17268ECCBFCA173E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
Manifest number: DA
Signing time: Tue 11 Nov 2025 12:00:58 +0000
Manifest this update: Tue 11 Nov 2025 12:00:58 +0000
Manifest next update: Wed 12 Nov 2025 12:00:58 +0000
Files and hashes: 1: XM814TYW15djDR4lQAwTxiEfUAw.crl (hash: 7JWOhzPUJWML+ZVsXkZYOWHSWqKnjbDosqndIUvfdsU=)
2: xDdJemGsGlnwmpl5xZcYblz1F1E.roa (hash: XMJejRWNcdPi5zWMZF0Nrh6edEuHq3xZbSAPEeCgs1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:66:ab:a0:a1:ca:17:26:8e:cc:bf:ca:17:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf35e13616d797630d1e25400c13c6211f500c
Validity
Not Before: Nov 11 12:00:58 2025 GMT
Not After : Nov 12 12:00:58 2025 GMT
Subject: CN=4cb6b41e1daeba3700e62cdb8b4186580bba47dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:fd:e6:d3:53:b9:79:39:16:3e:12:b9:c9:
6a:8c:81:0e:7b:b4:40:a7:be:ba:c2:84:21:97:32:
71:4e:7f:d3:30:bb:0d:9e:84:b0:b8:45:28:77:7b:
76:b3:b5:cc:8e:da:d2:05:34:a8:6d:e0:b4:7d:92:
83:e8:08:71:af:a1:72:54:a6:96:ab:83:9a:68:85:
77:65:5c:c9:a9:4d:04:c4:97:3b:f4:02:47:e3:ec:
0e:e1:24:07:c5:37:1b:1e:75:6d:ff:74:e8:69:c1:
bb:74:4c:60:0c:31:80:7b:c7:a6:12:93:36:6e:3f:
82:3b:b7:4f:5c:c0:49:ed:2e:18:d4:22:02:21:8e:
5a:00:11:6b:95:48:26:91:75:b8:9b:51:50:f1:10:
85:de:3f:ab:3b:30:45:e5:4e:d9:2a:13:ee:fa:c0:
2a:e2:51:7e:b9:75:5c:48:35:f2:75:e2:29:49:fe:
54:95:24:6f:6c:94:6e:88:b6:e6:81:c9:49:82:30:
5a:4c:b6:21:5c:04:18:00:c6:97:fa:d0:00:c3:c6:
6d:61:ba:be:c8:69:35:ac:55:6c:0f:b5:dc:3b:f0:
1a:de:45:11:08:99:8e:74:81:d5:5e:db:48:6b:79:
41:cc:44:64:f1:99:34:58:88:e8:f5:d4:51:19:df:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B6:B4:1E:1D:AE:BA:37:00:E6:2C:DB:8B:41:86:58:0B:BA:47:DC
X509v3 Authority Key Identifier:
keyid:5C:CF:35:E1:36:16:D7:97:63:0D:1E:25:40:0C:13:C6:21:1F:50:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM814TYW15djDR4lQAwTxiEfUAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb6bf5-3ac5-413d-b898-4fef15e7dead/1/XM814TYW15djDR4lQAwTxiEfUAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:20:b0:d2:e6:f3:61:1a:aa:aa:ab:e5:d9:6c:f0:8c:b3:fd:
9e:2f:a6:fb:3d:35:bb:6a:59:3b:71:97:8b:a5:e2:2c:84:3d:
91:83:fd:64:2a:0b:1e:4b:3a:45:ec:3f:81:3b:3d:b7:78:ec:
5f:a4:72:10:0e:82:1e:4b:6e:bc:18:0e:46:5c:43:18:74:3d:
86:c0:66:d3:19:38:f8:bd:e7:f7:53:45:f1:07:65:65:f4:3a:
35:53:43:68:0c:d4:d9:f0:e6:93:85:50:b3:23:5e:84:dd:58:
83:db:05:86:3d:da:e0:0d:b4:ec:0b:58:a6:15:4f:f6:7f:66:
20:19:03:7d:bf:23:19:7d:d1:73:e7:62:e4:da:ca:78:b8:b0:
f6:f2:df:6e:24:2f:12:d1:de:89:7a:63:39:74:34:75:ae:4b:
dc:0c:87:cf:fd:67:79:09:60:75:a9:a4:76:4c:06:e1:6a:4d:
b3:eb:51:74:6d:5b:d3:71:1a:e9:6b:ca:0a:1c:ea:9d:2b:62:
f4:f4:df:fe:b4:2f:4b:58:a8:b3:98:13:4f:66:d5:e6:00:ba:
75:c8:63:02:dc:7c:f5:ee:14:4c:e6:c8:1b:e9:37:b9:81:e4:
3f:bf:d7:b1:26:0d:de:db:8b:00:e7:55:cb:36:e1:a5:2e:b5:
8d:0f:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:41 2025 by rpki-client