Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
File: xBK7PaZcqrUkhR74bOm6piB04e0.mft (raw, json)
Hash identifier: sNcTViwRdnxaVXtM7e0PQcXNXHXJQcDJzyG3krGWh90=
Subject key identifier: A1:0C:D7:B4:A0:60:9C:5D:32:94:D0:F7:70:A6:85:02:CF:A7:7D:BC
Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Certificate serial: 019A70DC4015CDCEAF42726A36BDD8AB2A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 03:01:13 +0000
Manifest this update: Tue 11 Nov 2025 03:01:13 +0000
Manifest next update: Wed 12 Nov 2025 03:01:13 +0000
Files and hashes: 1: kMIoPYj99g2K5sWXNcD0fsxHkHM.roa (hash: FopABAV6PSptIp6OTBNiTRgtYU723NWq9ChEZhzR3FM=)
2: xBK7PaZcqrUkhR74bOm6piB04e0.crl (hash: V9/hKaG9BdmHCblUVZD9fDwLbcBLbQxBY1i9uPOPkkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:40:15:cd:ce:af:42:72:6a:36:bd:d8:ab:2a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed
Validity
Not Before: Nov 11 03:01:13 2025 GMT
Not After : Nov 12 03:01:13 2025 GMT
Subject: CN=a10cd7b4a0609c5d3294d0f770a68502cfa77dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:87:7c:14:f0:09:3f:42:5f:65:71:b5:5a:
de:37:c4:d7:11:d2:42:b5:53:59:cb:75:c7:37:08:
ae:d2:ea:7f:1a:4d:42:51:48:41:e3:0f:62:c4:28:
0b:b4:e9:85:5f:15:89:d6:d8:9a:90:10:4a:95:56:
b4:13:1c:b5:b9:92:92:c8:f4:e9:80:79:7b:63:7a:
07:62:71:01:5a:1a:ae:cf:f5:16:7e:71:ae:ae:c1:
84:95:bf:91:b5:a4:f0:37:06:b6:f1:8c:ad:5f:cb:
e2:f2:9a:ad:1c:77:d8:a7:4b:53:fb:80:f0:7b:70:
a8:10:2c:cd:52:95:af:30:c1:e6:8a:4c:74:a7:2a:
51:5e:39:24:7e:da:df:80:08:03:f8:95:c2:02:13:
39:29:9e:93:95:ab:a2:3e:9c:be:10:89:93:e3:35:
97:95:ee:78:45:14:ba:1d:34:06:b2:94:1e:b0:2a:
b3:35:0e:79:ff:76:9e:81:0b:2b:d5:69:37:63:32:
7d:46:89:12:3a:f1:ac:0a:e2:a3:c3:a5:aa:cd:f2:
7e:5a:a7:32:0a:b9:c0:2d:65:cd:d3:b6:f1:81:41:
08:0a:ac:22:bf:38:a9:bf:a4:f4:8b:fe:85:42:09:
9a:ab:cd:9d:49:41:0c:6d:f0:5a:b0:19:43:c1:aa:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:D7:B4:A0:60:9C:5D:32:94:D0:F7:70:A6:85:02:CF:A7:7D:BC
X509v3 Authority Key Identifier:
keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7a:c4:8b:a5:e5:db:47:12:57:43:28:70:e1:55:03:9a:7a:
a7:d9:e6:14:f4:3a:0c:78:d7:fc:3b:b8:d5:b9:9d:d5:81:c9:
34:be:07:31:0b:a8:b5:7a:6f:2f:29:63:d2:58:a8:34:6a:0b:
91:12:06:57:ce:04:06:ff:eb:23:ef:f7:86:f7:d3:21:0d:13:
0b:52:2a:76:61:7a:16:07:72:06:93:a2:37:a1:b5:36:d1:d6:
e8:48:ed:c3:6f:39:33:0e:80:32:b8:2a:86:3b:f3:43:20:a1:
91:6a:34:c1:26:e0:99:a6:25:62:51:4b:ba:93:37:26:ff:5a:
07:1b:f7:ac:d4:ba:ed:ed:6a:c3:1d:71:b7:bc:17:30:96:c1:
93:04:78:4d:58:46:5a:84:dd:96:b7:c1:50:14:06:69:76:b3:
37:22:50:4b:59:ca:a1:3e:c9:a6:8c:ec:5a:20:10:81:f2:8b:
0b:4e:fe:b0:3b:2a:0c:4e:e2:7d:19:2d:ef:5c:c1:72:bf:0e:
cb:14:53:f0:e3:5a:17:6d:05:f5:58:6a:a0:4e:88:46:b4:bb:
69:34:b7:96:5b:5f:0d:80:2c:a8:2b:b7:97:f8:7e:7d:17:35:
11:97:e1:8f:04:69:04:0e:97:c6:12:b5:c7:f2:57:ba:8e:e0:
1f:8f:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:07 2025 by rpki-client