Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json)
Hash identifier: fkcqSlvT4E8BimZqiCQoSt3HGwc2/5QHRhueP70W8jg=
Subject key identifier: BA:71:C3:14:B1:38:F3:F5:20:61:6F:CD:62:10:5C:50:DC:3F:D0:94
Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Certificate serial: 019A70A4D0D759DF0980FAC3FE7122DED9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
Manifest number: 0DA0
Signing time: Tue 11 Nov 2025 02:00:40 +0000
Manifest this update: Tue 11 Nov 2025 02:00:40 +0000
Manifest next update: Wed 12 Nov 2025 02:00:40 +0000
Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=)
2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: X09ObV0BuEqN/FEQ4H/xsDG7HIpHZA/9ujnMQo4jRAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d0:d7:59:df:09:80:fa:c3:fe:71:22:de:d9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9
Validity
Not Before: Nov 11 02:00:40 2025 GMT
Not After : Nov 12 02:00:40 2025 GMT
Subject: CN=ba71c314b138f3f520616fcd62105c50dc3fd094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:0d:ce:ad:59:d4:ad:7c:04:c2:90:29:23:
21:6f:96:c8:23:7a:e3:b9:71:75:19:17:b1:a5:40:
15:7f:e0:7c:ce:f2:34:43:50:b3:37:fc:a6:20:e2:
ed:17:47:ae:f1:90:3c:df:fc:1a:b2:4d:2a:fa:7e:
16:76:b6:91:11:3c:90:a7:94:9d:54:35:85:af:a8:
dc:7a:27:18:8c:7e:66:bd:9a:b1:5d:1e:b4:7f:19:
ff:d7:52:7d:a1:f8:65:4e:5e:11:76:78:ad:cb:cb:
c7:e3:40:91:1c:b2:59:5a:01:d4:a0:d9:d4:c7:61:
96:e0:02:19:8d:3a:c4:ee:ae:90:c2:d5:15:39:3f:
66:5d:a6:b0:aa:db:55:52:d3:79:95:b0:e6:50:1a:
50:67:c8:71:8b:78:2e:4f:3d:1a:13:25:20:2d:9c:
be:ab:bc:89:90:bd:0e:80:97:b0:4e:5b:30:e5:03:
da:d1:77:02:92:e1:54:b8:2b:05:04:42:e1:bc:12:
55:1f:13:c8:f4:9b:c5:6b:ad:29:5a:c1:26:ae:48:
57:dc:88:7c:70:ec:a5:99:6f:71:ae:17:0f:e7:24:
98:0b:ba:83:a9:7c:bd:3c:e8:e7:b1:d3:db:ed:ab:
b4:13:09:06:ae:32:81:57:53:fa:41:ca:83:ef:6d:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:71:C3:14:B1:38:F3:F5:20:61:6F:CD:62:10:5C:50:DC:3F:D0:94
X509v3 Authority Key Identifier:
keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fc:c0:04:17:69:d7:e0:c5:f3:be:be:55:76:3e:c4:aa:41:
d4:1d:72:60:45:5f:cd:87:07:49:c5:12:a0:5c:59:3b:8b:0b:
ef:69:fb:75:02:66:b2:93:7e:83:49:59:7b:8f:ec:4a:dd:fc:
35:00:26:7c:11:6f:05:a4:16:e1:d0:0e:62:1d:66:29:1d:d7:
df:78:c0:4c:c0:4c:90:0a:77:64:33:98:eb:37:8d:d6:ac:1a:
d6:b3:2f:43:9f:af:84:2e:77:c7:37:00:3b:03:1a:c9:d5:1a:
81:1e:d7:a7:75:bf:03:15:8d:2c:83:82:0d:83:04:64:59:ed:
2b:11:7a:82:b2:69:ae:43:a3:fe:40:d9:f7:73:3f:c7:7d:d4:
30:af:ad:da:ae:9b:94:41:0a:a0:85:b0:92:e3:5d:0c:cb:93:
5a:ee:da:c4:98:b1:83:af:46:a5:71:c7:e9:97:e6:27:af:63:
8d:ac:19:e4:d0:be:9e:f0:05:d4:c9:90:86:bc:27:54:b5:d1:
29:6a:28:0a:75:fa:32:29:5b:a0:d6:0a:0d:4b:0f:94:34:2a:
99:f3:b0:33:0d:11:21:78:69:64:8b:73:a8:87:9d:6b:11:db:
38:e1:52:0e:8b:63:d1:c1:68:c3:12:ec:e0:79:c4:5b:81:48:
66:ef:af:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:16 2025 by rpki-client