Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File: xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier: Rmg7cODaq/Aab6/VE69R3zxpZSY+kfx4gDsdaazW88M=
Subject key identifier: 59:CB:F8:E2:53:BB:39:41:E5:A6:97:B2:B5:5C:D0:3C:C1:B5:B1:E3
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer: /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial: 019A72267FC17578B5CEC0C8DA477228DAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: 8lcvOAYawA8m44njSriAA46ohqM.roa (hash: dgK9JD6WHGLDC+yE4xMsU1SgCBsr9GlbtGy0j7WmX9Y=)
2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: X8QiRwUCUsyzs5j2mL4Y2RuB1sPYOHtzRSEgIiHZIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7f:c1:75:78:b5:ce:c0:c8:da:47:72:28:da:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=59cbf8e253bb3941e5a697b2b55cd03cc1b5b1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:b5:ec:8a:cf:5c:27:a0:4c:a8:94:ff:a7:
fe:11:58:76:4e:13:21:b0:f0:02:fc:7e:4d:78:ca:
f2:ca:84:ee:d1:95:60:37:48:a6:78:8e:84:1f:07:
95:b5:e4:9f:ed:f0:a6:2c:3b:c3:f3:e4:a3:9d:86:
ee:6f:39:38:67:74:44:95:07:f6:f5:32:b5:fc:6d:
5d:12:c3:ac:2c:2c:da:19:20:2e:f1:8b:f2:2b:b9:
c6:e7:26:25:36:c5:89:d9:c3:67:69:43:1c:a5:28:
e8:e4:49:cc:2e:1f:93:f8:16:4e:93:68:6f:93:7d:
41:1d:f9:34:b2:8e:43:9b:40:28:86:91:95:71:fa:
7a:e3:a4:a5:be:de:14:2c:c6:46:f7:02:7a:f9:5e:
4f:e8:ef:17:3e:a8:50:f3:74:29:c6:75:16:6f:76:
05:2f:a9:6f:a8:dc:e9:f4:05:c1:b1:eb:71:a8:0a:
d5:1f:b8:ca:42:64:03:bd:48:bb:a7:4a:f7:29:4b:
0c:95:89:59:89:33:a0:35:ef:eb:24:04:59:46:ac:
c5:d7:5e:50:fd:03:67:b3:53:62:71:a7:ab:85:10:
81:28:fb:c1:c6:39:24:f6:38:1c:d7:f0:c0:b7:38:
ab:18:52:5e:14:45:9c:a0:56:2c:c1:88:45:bf:32:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:F8:E2:53:BB:39:41:E5:A6:97:B2:B5:5C:D0:3C:C1:B5:B1:E3
X509v3 Authority Key Identifier:
keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:57:93:3f:01:83:f5:28:26:26:a1:7a:19:df:eb:d8:6a:1d:
21:d6:c0:82:b0:e2:48:79:e8:73:17:11:da:08:cb:5b:bd:9a:
18:ba:94:ef:cf:1e:a5:0b:7f:4f:61:95:0f:4e:da:bd:a7:4b:
fc:17:f2:ef:c2:c2:85:29:b7:fc:69:30:3a:cf:9d:c5:1f:49:
2b:fb:27:e0:fa:ed:59:9c:be:6a:1f:1b:8d:e4:46:6c:16:ae:
50:2a:d5:36:d5:8b:27:24:c3:68:1d:0f:36:67:55:24:ef:42:
ab:8c:52:40:3f:7f:25:e4:b2:10:8c:76:07:64:72:16:26:d8:
7c:cf:89:cf:2e:1e:f2:64:a0:7e:14:c7:ce:90:53:81:58:dd:
0e:c4:00:6f:2c:e4:f4:3b:66:d8:0e:1b:09:13:38:af:85:3a:
48:bd:e2:49:7a:1e:7c:11:8a:6b:b3:c7:3d:72:f1:df:f4:52:
6e:52:76:85:0a:b7:f9:c1:23:44:6c:b9:61:8a:39:9a:da:e5:
45:2e:d8:dc:ce:b7:ab:f8:bc:f3:fe:ce:5b:2f:31:91:eb:d8:
bd:39:aa:70:41:97:2c:f0:f9:96:c6:0d:3f:d6:7e:c5:6d:3f:
8d:d8:6e:ff:f2:7e:64:42:a7:91:04:47:af:e6:84:fd:20:e3:
7f:11:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:10 2025 by rpki-client