Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: 26ZbecWdOT2vCZZZ8NWV868nkyoEzitcyfxt8z5+hhI=
Subject key identifier: AB:5F:96:36:52:97:D8:C1:B3:4A:8C:EC:D1:DD:72:DF:7B:8E:09:37
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019A7149CD58850A8F4184E50546842544C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 05D3
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: ZoFV4x2tyXT6J_JK-aC-19W61aE.roa (hash: yCSIbKlCnPHK7NkVGp5Sz1FBU5Gf4cXxoSVyvZfoNAM=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: JUCdEsFnWpBMaBwzhI0q6Ei5a46Nc81AhsfuiSmNMa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cd:58:85:0a:8f:41:84:e5:05:46:84:25:44:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=ab5f96365297d8c1b34a8cecd1dd72df7b8e0937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:20:71:51:fb:66:80:57:07:3c:66:4b:61:
13:f3:b2:14:35:6a:c7:50:d1:c4:4f:95:ca:f5:86:
7c:ce:6a:79:48:a6:a8:15:e4:64:19:ba:a4:bb:92:
66:44:e9:04:ef:39:ce:d8:3b:d1:3d:1d:2a:d3:b4:
34:99:9f:1c:3d:ea:12:05:6e:bf:f9:ff:83:fb:32:
00:17:4a:3d:12:d5:f2:f4:91:c7:8a:28:28:99:2c:
2b:20:83:f0:71:98:1d:d4:da:e5:1d:c5:c5:e5:81:
a6:f0:d1:df:70:de:27:00:71:05:e7:d6:4c:5d:04:
61:af:d6:46:23:d0:f3:f8:ef:61:ed:80:32:82:cf:
3c:cc:37:02:42:68:f4:94:bf:4b:12:b3:ce:50:d5:
e7:ff:d6:45:a5:9d:ce:bd:bd:b5:12:d9:a9:44:f1:
07:ce:67:9f:88:50:83:d6:c3:14:ed:cb:54:44:c8:
ff:76:dd:06:4f:f0:8e:40:24:b6:96:ae:d5:25:37:
cc:ff:60:4e:e5:14:57:60:ed:44:23:90:47:62:cd:
44:07:fc:43:e2:be:e9:64:f5:76:9c:15:05:d8:c0:
6c:60:66:62:1a:54:59:e3:c8:80:cf:2e:6d:69:a0:
c1:89:5e:51:35:ce:aa:0e:19:80:d8:59:53:04:0a:
02:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:96:36:52:97:D8:C1:B3:4A:8C:EC:D1:DD:72:DF:7B:8E:09:37
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:92:70:41:af:d9:e3:8f:6c:a6:d6:e4:05:ad:20:b4:0b:53:
dd:ee:dc:0c:2f:7a:02:43:7d:11:eb:ec:1d:0e:a2:d5:7e:2e:
19:12:20:25:3a:f3:21:81:c3:44:9c:ad:d0:12:d9:7a:24:00:
88:6d:b2:4d:ee:81:1d:30:79:df:95:78:07:e8:bb:d9:b1:41:
4f:ee:d7:75:4e:6e:fe:76:12:4a:4f:96:c8:3f:78:70:c4:ad:
25:59:de:93:44:c2:e1:20:f8:66:bb:46:ec:a8:2d:2b:40:df:
fd:1d:73:3e:a5:25:61:b4:2e:4e:c4:e6:db:f7:c1:16:24:84:
6e:79:c8:cd:b8:d7:9c:4b:19:3c:ca:81:8e:85:61:44:7a:ca:
04:7d:92:da:97:b3:05:68:eb:71:89:14:8b:63:0a:0e:16:20:
78:59:45:9f:88:74:67:af:08:8b:9f:be:fa:34:7b:f7:9f:98:
da:35:d4:c8:e3:f4:9e:28:e1:24:88:f3:57:d2:44:03:fd:81:
6f:99:8b:53:0c:03:ab:26:80:3a:8d:98:fd:b8:31:53:ae:aa:
73:22:e8:3b:08:e7:17:03:5a:19:71:76:03:fd:11:c9:3b:d4:
f0:ec:02:4e:86:34:cb:7e:07:a8:31:d7:8f:5b:26:cf:15:e2:
7e:73:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:06 2025 by rpki-client