Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
File: XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json)
Hash identifier: d5dHpkeCWYSIej1k6ckbUPGYC/b58naQkfaU0S5MP78=
Subject key identifier: E3:99:31:29:B2:12:11:BD:86:19:13:43:5C:21:6F:5F:B2:8F:C6:14
Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Certificate serial: 019A714A1171956474F62432C6214B8ECCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
Manifest number: 168B
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: 2ywpCRCtpz6hrb_B5Z2UyYL2m-g.roa (hash: Z+2VK2G2lzN86LoPcE9VgbDrrppkQUiQOHGoi5RCAY8=)
2: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: sxkwFcHPA7JrV62sJhJwMdJuG2dNC9jQ/UaG2RHcO/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:11:71:95:64:74:f6:24:32:c6:21:4b:8e:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=e3993129b21211bd861913435c216f5fb28fc614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:4b:cb:32:ae:57:aa:7e:cd:8c:0e:77:e1:
39:c1:dc:c3:ae:d0:70:2e:26:7e:cc:f7:84:71:08:
da:fc:bd:cc:93:0f:e6:0f:8a:3d:bd:ec:6a:a0:3f:
2c:27:00:1e:3f:1c:03:aa:e8:65:db:83:df:a7:98:
13:2d:df:d5:c8:6e:ef:d1:de:c6:2a:b1:7c:89:55:
fb:cd:fb:cd:c7:1b:09:b2:cf:42:e9:7c:c8:f2:c8:
13:6e:fc:a8:c9:c3:b7:4b:d5:75:7e:ef:41:f7:6e:
8d:4f:ff:b6:71:bd:37:1b:47:80:5d:55:8f:02:77:
7b:af:61:9f:e5:7b:bb:9a:06:9c:9a:54:9d:0b:9d:
39:fc:5b:d1:9b:61:8c:87:59:76:49:6b:86:ba:d3:
94:67:22:a1:e3:f5:ed:a6:bf:f1:7f:bc:f0:ed:89:
d4:cf:ee:c6:4b:03:97:b8:b8:2d:7c:15:df:1c:51:
f6:0c:a6:ee:f6:79:ef:f1:58:ed:d1:05:c9:ba:c2:
d6:93:12:6c:d8:2c:1f:b8:10:fd:2c:4e:8a:0c:77:
b1:9b:cf:c7:be:1d:c6:02:ad:6d:fa:77:34:6c:81:
f0:1b:19:95:aa:d4:02:06:fe:92:0b:6c:69:ba:c1:
a1:7a:f0:cf:88:07:5e:f0:b2:33:8a:e0:12:57:a2:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:99:31:29:B2:12:11:BD:86:19:13:43:5C:21:6F:5F:B2:8F:C6:14
X509v3 Authority Key Identifier:
keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:78:48:ee:2f:b8:00:ce:eb:7d:a5:18:7e:39:06:98:24:4e:
fc:93:93:95:53:e3:95:59:3e:5a:c9:be:47:f3:df:09:22:5a:
ff:8c:29:51:e9:58:6a:d4:70:57:ca:e4:93:c5:6a:ad:28:02:
26:14:90:ff:c0:3b:cd:f3:4e:af:93:42:f0:0b:17:7e:a0:79:
83:f2:d8:f6:e5:ea:e4:da:24:36:7b:b4:03:a5:f9:22:15:b9:
ff:29:13:40:25:b9:77:0f:b2:84:40:5e:e2:1e:a5:bb:ab:f8:
82:90:27:ce:e3:76:f6:17:b9:a1:9d:46:df:17:af:99:bf:6f:
2e:40:e4:20:d2:69:19:18:52:e1:81:51:9b:ad:0c:5e:8e:66:
25:a0:36:f0:44:b4:3c:e4:f7:49:88:f5:6d:07:ce:6a:9c:c9:
b8:31:66:76:47:94:bd:54:4c:c0:1a:6d:00:d9:52:c8:b1:9e:
f1:c4:4f:d7:1f:4c:d4:4d:b6:f0:72:b7:41:50:62:65:85:6e:
7f:5e:f4:4c:d5:17:95:ee:3a:b5:58:7d:28:c6:66:c9:22:ee:
c9:32:ce:19:2b:30:bb:10:3c:a3:fe:fc:7c:27:8c:2d:13:26:
c3:17:fb:61:08:d9:1e:da:6a:12:14:3a:fc:ad:6f:a9:e3:c5:
f0:4f:a1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:08 2025 by rpki-client