Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json)
Hash identifier: 9TV/+oqkCzvfdmsOByhT3wFRh9iQ4af3eLCy+rbG0gY=
Subject key identifier: E1:5C:42:74:0E:98:16:3D:9E:7F:AF:BF:D2:DE:0F:C2:15:BA:D1:1E
Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Certificate serial: 019A7226171C39C4D586B82AFE1836A4D5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: EdQlXkPhvsJeblFDBeY23kaJ9OKYJQAItFxcev1AdL0=)
2: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (hash: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:17:1c:39:c4:d5:86:b8:2a:fe:18:36:a4:d5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=e15c42740e98163d9e7fafbfd2de0fc215bad11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:21:dc:3f:64:b4:65:62:48:8b:c2:43:27:dc:
ab:9a:e8:ac:8b:e3:82:9e:13:c5:17:71:d5:48:20:
d0:1f:9a:89:0d:d2:12:58:e8:b9:29:5c:2c:3d:ab:
cf:7b:86:c4:a5:62:82:a4:99:fb:d5:74:0c:1f:4e:
24:d2:d7:db:f5:b4:d4:93:ef:4b:09:08:12:24:53:
a7:c1:86:6d:dc:43:b9:38:9a:8e:5b:f6:37:07:90:
7f:b2:bf:dc:24:40:9f:39:ba:47:99:ef:56:d7:81:
5d:10:4d:f3:89:ba:f6:81:15:7a:71:76:ce:bd:eb:
ac:f9:ed:a0:a6:f7:3f:ff:b5:66:54:43:18:ee:e1:
f8:19:0f:4b:d5:ed:e2:7c:9a:d7:97:d8:2e:3b:ae:
2a:c8:61:e2:ad:b7:31:93:30:17:f1:ef:f6:3d:3c:
22:5c:60:28:86:c8:f3:a3:7a:ad:12:33:c6:fe:32:
62:fc:07:38:08:0e:7c:2e:fa:ca:50:1a:21:17:f0:
31:78:00:05:48:00:73:24:d5:d8:22:2b:2f:87:56:
d1:c4:26:cf:65:46:e4:a8:93:c3:5d:0e:3a:3f:27:
4c:67:ab:e1:34:9e:ca:8b:28:6d:e8:0f:21:55:e7:
52:d8:c1:43:80:0a:f9:21:36:1f:29:0e:8a:72:45:
66:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:42:74:0E:98:16:3D:9E:7F:AF:BF:D2:DE:0F:C2:15:BA:D1:1E
X509v3 Authority Key Identifier:
keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7c:71:b5:62:6b:d4:34:ee:8b:10:31:f6:c8:ae:ad:b2:eb:
d7:32:6d:e8:ca:19:6f:10:28:bf:4e:c1:4d:c3:f7:70:0a:d6:
a1:a1:92:e0:2e:68:03:8e:94:d5:6d:8f:90:25:27:25:43:ca:
58:f5:e5:ce:ae:9e:c7:a2:1e:91:9d:b8:10:57:45:7b:0d:be:
99:58:c4:83:76:c2:38:4e:50:2f:07:a4:e3:70:9f:d1:ac:17:
00:c7:3c:7a:dc:ed:bd:5f:79:b6:30:94:fc:e2:58:45:89:d4:
05:19:74:6a:2c:f6:73:bd:6d:d3:15:58:a6:e7:ae:c5:f9:56:
98:db:24:af:4b:b8:a2:98:7c:d2:b4:77:47:8d:5a:39:72:8b:
33:a7:ff:b8:61:2f:bd:9f:b7:0b:0d:89:98:fd:6b:1a:ad:ca:
57:30:2c:0a:1a:b5:bb:cb:01:f5:a0:b9:b1:0a:04:3e:59:bf:
29:07:98:65:4f:2d:bc:39:b3:82:1e:17:da:14:d8:ae:d0:28:
d5:47:cf:2e:98:84:14:6c:61:18:fe:7d:b5:83:a3:9a:b8:1c:
58:4c:2c:06:fd:23:9d:b4:c4:3b:ee:d3:94:7a:ec:dd:2d:28:
93:d4:89:58:4c:36:b6:3b:d1:ed:fd:13:e1:cb:8b:eb:12:f1:
19:8f:eb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:39 2025 by rpki-client