Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: 2+AfXTlD2296o92P2v03VJeN9cmzul+QpB8PflOj+Xk=
Subject key identifier: 66:CC:B5:15:C6:35:D8:90:A3:32:C1:B6:A4:AF:90:70:78:C0:04:BF
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019A72261DF70174E0C086A5764B559FD8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0817
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: CpH7imd3gLqaW5BNt6awTQwc4auYghbne1WX/QQo5tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1d:f7:01:74:e0:c0:86:a5:76:4b:55:9f:d8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=66ccb515c635d890a332c1b6a4af907078c004bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:46:11:5c:1a:61:27:ee:56:0e:20:37:ff:
ad:c9:f3:1f:63:3d:03:6b:52:bd:ac:5f:cf:d2:a6:
75:02:94:f5:c4:82:d8:5d:f3:bd:ad:e0:5b:13:10:
41:54:c5:27:6c:3d:55:17:03:00:bd:c8:9f:2d:17:
56:40:9b:a4:e3:94:6b:d1:7f:6d:a6:d2:e1:59:42:
a1:1a:5b:85:57:9a:0f:ed:1f:a5:c7:1d:41:c5:c6:
be:ac:43:ce:36:fc:bb:78:0f:e9:e1:0c:91:0c:c0:
87:0f:a5:47:dd:ba:18:02:1f:94:89:75:ae:23:92:
dd:3f:01:48:77:f3:0b:78:2b:95:c5:48:34:8c:93:
16:94:b1:6f:13:7d:2f:e2:ac:8c:4c:bd:1d:ba:d0:
ce:6d:54:60:ae:b4:72:ed:e2:33:e0:07:21:8e:e5:
e4:53:a3:1e:6f:58:b6:fd:ee:4f:86:ec:fa:f2:31:
c6:a2:40:35:be:2d:69:f6:7f:25:77:5e:1c:ef:0f:
b1:4c:ec:48:94:22:8d:55:5d:34:3e:3e:02:10:55:
66:d4:5a:f3:0f:3a:ec:fe:45:0b:b8:63:97:84:9b:
05:c9:fe:db:84:2a:79:bb:4b:db:0a:9b:1f:6c:a3:
8c:58:3e:11:3d:99:b5:0d:a9:fe:af:2d:5c:05:44:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:B5:15:C6:35:D8:90:A3:32:C1:B6:A4:AF:90:70:78:C0:04:BF
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c5:6a:40:91:11:3f:d7:e1:50:1e:e9:9c:95:4e:90:d5:e6:
07:83:fa:d5:3a:1e:b3:87:9a:5d:f2:62:70:81:b4:05:0e:83:
d3:0a:7f:3e:24:98:19:29:77:1b:37:20:4c:6a:51:bd:a8:34:
e4:9e:4b:4d:bd:71:52:f9:e8:40:de:45:c4:0b:9e:f9:c4:04:
2f:24:c2:ce:76:14:df:72:78:e6:95:13:9f:e4:f3:2a:49:50:
ac:19:fb:f2:bf:38:20:d0:96:ea:a0:84:88:01:22:d4:6b:9d:
56:77:d7:c4:b0:91:18:8d:0c:ce:8b:07:5b:fc:94:0b:f6:06:
48:7b:a3:fd:c9:49:b1:01:7f:e7:ec:ec:57:21:77:08:f9:13:
9c:29:70:98:a2:d7:2d:ba:78:fb:fc:3e:90:3a:10:c7:a1:5c:
9e:11:17:31:81:a3:82:0f:60:37:8a:ab:d4:6b:56:ff:2b:bb:
49:00:da:0e:81:5e:56:5b:a9:bb:67:4d:f5:80:b6:4d:36:26:
67:b8:0b:35:6b:c1:7c:93:5d:b8:1b:73:c0:e7:1e:c5:c8:64:
90:c8:23:8d:9d:bb:df:e9:b0:a9:1e:72:25:75:32:59:3f:fa:
5e:71:ad:6f:10:d7:e8:73:f9:4f:53:b3:9b:ac:0a:dc:b7:3c:
f3:0b:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client