Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: zjWdY6Rnw8euUARM9B/nIK6tcR4w9k62Nj3GcPih4dE=
Subject key identifier: 29:E3:10:CD:95:6A:C4:7D:5A:76:F6:E3:F4:AF:9C:87:32:46:C7:12
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019A4C980D9828BE603963082742E938C55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 02:00:24 +0000
Manifest this update: Tue 04 Nov 2025 02:00:24 +0000
Manifest next update: Wed 05 Nov 2025 02:00:24 +0000
Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=)
2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=)
3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: Y5Qx9c7pm4yzFqETpBz4jyOiHLTCoAOezOYLu5JmOVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:0d:98:28:be:60:39:63:08:27:42:e9:38:c5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Nov 4 02:00:24 2025 GMT
Not After : Nov 5 02:00:24 2025 GMT
Subject: CN=29e310cd956ac47d5a76f6e3f4af9c873246c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:92:5f:35:66:de:6b:45:c0:c9:d8:0b:82:
78:09:d4:dd:2c:97:ea:ea:6b:fb:d3:53:9f:1e:cd:
13:9d:18:ab:c9:62:43:fa:65:08:96:f1:52:8b:b9:
cc:4d:a9:59:75:9a:d5:80:48:f8:55:7d:a6:18:87:
2a:16:51:d0:94:24:09:2d:5f:36:46:46:78:50:79:
5b:a0:a0:44:1b:6c:c7:86:94:ea:d3:96:cc:8b:dc:
41:7a:7f:fd:69:0c:a0:18:06:f2:44:7a:33:f5:f8:
12:c7:47:c9:68:75:d1:b8:78:56:0e:89:d9:f7:ae:
23:2e:e0:8e:d0:d1:8e:b6:6f:d6:a2:68:1f:ac:11:
df:62:cf:d2:ea:1c:11:5e:a8:8b:ce:8f:ef:b8:81:
21:d6:b3:db:f5:12:d2:cf:33:b7:df:5f:7c:29:2f:
65:bd:08:e7:01:27:e4:70:dc:ac:0b:7c:c4:30:ae:
c0:6f:bd:13:29:6f:b6:b9:ad:d4:6f:96:41:6c:78:
c3:89:2c:5a:c0:13:3f:9b:41:cf:f0:61:81:70:75:
ba:43:d4:db:78:e7:62:d1:b1:b4:72:6f:9c:a9:78:
0c:5f:6c:b3:39:b3:da:e2:ce:9e:09:bd:0b:5f:ea:
3f:3f:a8:9e:20:04:41:9e:31:eb:83:d8:4e:7b:6e:
6a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:10:CD:95:6A:C4:7D:5A:76:F6:E3:F4:AF:9C:87:32:46:C7:12
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f4:dd:15:92:63:27:a4:6d:3e:15:c7:4d:70:ec:ba:6e:4d:
25:34:20:2a:09:01:53:bf:55:67:a6:fe:55:16:69:d1:21:d1:
f1:33:60:b3:63:a2:5d:be:d0:10:41:d0:6a:a6:21:5d:9f:46:
a5:06:7f:07:00:d6:dd:19:51:78:73:1b:21:cb:31:7c:75:90:
1b:7a:4e:cd:dd:44:79:8a:33:e2:e2:7f:0b:73:c0:e3:50:1f:
17:ee:ca:07:6a:c0:d2:c6:d8:8c:41:54:2c:9a:b5:ce:b0:74:
24:1f:5d:4a:38:d3:dd:82:4d:27:3d:cd:07:c5:57:c2:bc:8d:
5f:b6:ec:fd:d0:a7:70:47:09:a6:e4:de:b4:4d:07:60:7e:f4:
d6:5a:d9:66:8e:2d:f4:68:ce:dd:db:95:46:bc:15:db:2b:a6:
46:94:64:3b:f6:82:e6:f1:19:2e:a7:52:55:73:41:4c:8d:2f:
44:03:d0:e6:38:29:f9:b6:89:28:8e:71:8b:c6:12:fc:ed:a9:
01:a4:42:67:ee:ac:48:90:07:d0:c5:c0:33:1f:f2:9a:78:47:
07:25:88:e9:58:6f:38:ea:3b:17:97:fc:ad:08:01:55:c7:39:
1f:89:7a:5d:20:19:b4:e7:18:ad:11:64:75:75:7d:f3:5f:97:
04:08:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:22:40 2025 by rpki-client