Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier: tHOIh6tVq6qwPe1Iyay4od6UUDpw+eOzrE2+qCixP4s=
Subject key identifier: 4C:E0:C1:D4:27:3C:27:1B:9C:CC:0B:34:C0:B7:79:0B:E7:42:90:11
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 019A725C487B55CF13ADA98A8BD3115C0190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: 1MLDdyH+1BiUFeCBkrBlMyNJUyEK37VK08o/BZhxzKs=)
2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:48:7b:55:cf:13:ad:a9:8a:8b:d3:11:5c:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=4ce0c1d4273c271b9ccc0b34c0b7790be7429011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:a0:c2:88:b6:71:2b:39:84:d1:91:c6:e4:
94:c4:a8:10:71:95:43:71:52:2b:c6:73:bc:00:46:
4a:24:6b:90:0c:38:1e:eb:50:81:b0:51:19:44:75:
80:61:0c:28:8c:cb:23:97:5f:13:a4:61:7a:6b:c7:
53:78:c8:53:16:48:d6:35:c3:21:be:ec:2c:9f:c5:
dc:b9:96:3f:25:a3:1b:32:eb:e0:a7:40:df:fc:4e:
8f:18:da:52:62:7b:91:f7:ae:19:3e:42:d3:c3:a5:
fc:d1:01:56:01:58:c0:10:78:7f:ba:f3:20:e3:7d:
a5:ed:3d:dd:ea:71:80:53:27:3c:21:e8:81:2c:0e:
44:df:e5:ac:b5:69:61:23:4b:75:41:3c:52:90:a5:
52:f1:83:9b:2f:be:f8:d8:07:da:3f:02:c3:f6:a7:
72:45:cb:3a:3d:b4:8a:ee:06:88:01:7a:00:f2:32:
fd:85:8d:24:29:72:e7:29:f7:04:8c:51:b7:a2:4a:
67:8c:6a:e0:f0:29:49:89:d3:d3:a0:3d:d0:e7:35:
b8:bd:c5:5d:25:fc:04:3d:e9:60:26:80:7e:67:6a:
9c:05:21:16:74:17:02:df:fb:b4:81:e3:34:43:58:
17:bd:f8:c7:eb:1f:af:be:a9:38:cb:35:82:da:27:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:C1:D4:27:3C:27:1B:9C:CC:0B:34:C0:B7:79:0B:E7:42:90:11
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:30:b9:b1:98:b1:72:73:79:d4:8f:5f:7f:f8:a2:8c:1e:
85:52:c1:69:f3:a9:fa:82:68:70:00:77:79:ef:01:18:9f:59:
e5:db:1f:5c:ca:fd:97:7b:49:96:18:de:c0:6a:93:6f:ce:56:
e8:eb:89:84:e5:c7:9d:c4:e9:7c:ce:d5:5e:b8:48:6c:87:60:
d8:01:b8:83:c2:a7:91:11:98:fc:03:de:09:49:95:f5:4e:e3:
eb:89:6e:f6:7e:a3:22:19:02:3a:0a:9b:6b:bc:ea:02:09:fe:
cc:ef:1d:ff:c9:0d:37:db:4e:2d:1d:31:ad:6e:ec:2d:12:ef:
ac:1f:97:9f:a6:25:d9:de:8f:96:1f:40:0f:c7:d7:13:7e:ce:
c8:6e:3f:2c:c0:5f:72:b1:6e:5d:52:d4:34:75:3f:57:7a:12:
ca:28:e2:ba:4d:86:84:e2:c3:61:77:c2:70:18:28:7c:09:34:
06:f3:b1:0e:f1:b5:cc:fe:11:35:4d:2e:1c:ec:27:19:50:83:
3d:aa:a7:ff:a5:dc:42:69:90:7a:aa:5d:b2:f4:a0:62:47:fe:
72:e0:df:cd:40:28:36:56:30:ad:00:80:3b:43:92:79:e7:4e:
4c:f1:df:53:7c:8f:ac:7e:d8:25:5f:57:d3:2f:74:11:07:8a:
f4:db:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:06 2025 by rpki-client