Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json)
Hash identifier: 2UXmjmGSfP5jmcoZoMwmslYcHqx3cJGIDBQWmyHpZsM=
Subject key identifier: 0D:31:3D:F5:C8:C5:F4:E4:43:40:20:9F:67:25:00:2A:8A:DF:BC:E0
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 019A72937AEE0C6BE377DC1E27C8A5244FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
Manifest number: 059E
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: OhSvg7QisneZ6uRogSrKe/3sQhFFMQPaRqoetbcUBQs=)
2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7a:ee:0c:6b:e3:77:dc:1e:27:c8:a5:24:4f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=0d313df5c8c5f4e44340209f6725002a8adfbce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:39:28:f9:45:12:6d:fb:21:06:ff:30:9e:0c:
2b:24:35:11:2a:02:2b:c5:29:a4:3c:b0:c8:29:3b:
80:a4:cb:83:58:c0:ed:2f:dc:d3:cb:fc:86:f9:65:
49:b0:25:34:84:73:09:00:63:80:f7:6c:ce:bb:c6:
53:0b:b1:66:d7:bf:50:65:bc:36:4d:35:dc:db:40:
4b:3e:a8:59:90:10:c4:01:db:ea:20:07:b1:f4:0c:
6a:18:05:14:67:2b:2d:cb:cd:fa:6f:dc:71:93:cf:
0a:3a:0c:e3:a8:7b:ae:85:b4:16:13:19:60:74:96:
8a:18:76:02:39:c7:15:d9:48:34:09:73:00:3d:76:
12:2e:60:e3:9c:48:89:76:b8:32:57:29:b4:3f:44:
fa:70:dd:fc:42:4d:20:a3:72:51:7e:10:26:f4:a8:
90:19:ae:b3:4d:da:d9:62:c3:18:93:50:d3:f9:36:
c2:00:ca:92:d1:93:ca:24:d7:71:34:df:53:da:cd:
e0:09:01:0e:39:34:5e:e1:10:57:76:e7:11:0c:1a:
78:d5:ea:13:1a:af:e2:c8:d5:92:c9:f8:3d:21:8e:
a8:8c:0e:b7:98:5e:d0:39:2f:ae:4e:a3:4c:02:f0:
67:91:ca:26:2f:7f:d1:1a:5c:ac:11:ef:d4:0a:1e:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:3D:F5:C8:C5:F4:E4:43:40:20:9F:67:25:00:2A:8A:DF:BC:E0
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:a8:85:77:ed:d3:d4:06:14:52:f0:3b:1f:d4:75:cb:78:
a4:dd:61:51:80:b4:6b:fe:68:30:15:de:4c:5d:81:65:0e:0a:
06:4b:37:0e:54:ad:bb:25:db:ca:1a:b5:c5:6b:dc:50:5c:c9:
eb:b8:5d:ad:1b:56:ec:b0:42:ac:3e:2c:cd:92:85:0d:f8:35:
46:63:96:71:e8:13:1c:89:e4:4e:2d:28:07:a0:a9:b3:a7:1b:
2f:b9:9a:82:5e:98:71:9f:f1:95:17:35:c7:e3:bb:ee:3a:03:
39:46:52:e5:92:3e:66:64:df:51:8c:2b:1a:af:5f:98:67:dd:
2f:74:2a:d9:81:a4:a5:b8:90:db:f7:85:d1:c7:82:6a:04:c0:
3f:8d:c3:27:06:70:47:72:b2:e1:5a:f7:83:a6:dd:ee:8a:48:
6f:92:c8:e3:5e:b7:6a:98:4f:c5:4c:39:19:4c:0f:c6:b9:aa:
65:d0:eb:ee:37:6b:1b:d3:ea:1b:9a:44:0c:41:52:49:91:05:
c4:c8:1a:0d:19:b1:df:4a:3a:bb:2e:00:88:c1:f0:d0:02:7a:
1b:17:eb:3d:0f:10:ef:06:cd:45:5d:15:f6:95:84:15:b3:51:
0e:1d:be:55:43:83:5d:a7:1e:ab:f7:8a:94:10:89:a8:50:16:
cb:ea:32:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:45 2025 by rpki-client