Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json)
Hash identifier: Rq9kE79CcsABYPs+jry9s4EI23EBh2Z6D4K75pWJ4sY=
Subject key identifier: 23:29:6C:13:EF:C8:A4:B4:E9:40:5E:FC:9A:29:1F:97:17:82:EC:6A
Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef
Certificate serial: 019A725CBC480996E6A147E88D8305943BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:11 +0000
Manifest this update: Tue 11 Nov 2025 10:01:11 +0000
Manifest next update: Wed 12 Nov 2025 10:01:11 +0000
Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: z6vjh5Q+eqT/shhqCc488n9Qpblvfd6Udq3HXPsfZI0=)
2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:bc:48:09:96:e6:a1:47:e8:8d:83:05:94:3b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef
Validity
Not Before: Nov 11 10:01:11 2025 GMT
Not After : Nov 12 10:01:11 2025 GMT
Subject: CN=23296c13efc8a4b4e9405efc9a291f971782ec6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:b6:be:2a:78:54:30:b9:c9:9e:91:46:29:
87:3e:44:53:7f:53:93:ba:ec:13:a4:bb:80:53:c9:
ad:49:87:54:1e:99:84:cf:9f:9f:a6:62:20:fe:2a:
fc:99:eb:ed:a9:3e:ca:6f:a8:5d:69:61:ee:ac:f9:
9a:79:5a:d1:bb:be:e5:7e:ef:bf:d3:91:96:e1:47:
a1:e1:a6:28:27:15:67:16:02:79:a8:c3:17:dc:fe:
a7:d7:c4:f9:5e:bd:eb:34:35:04:e4:05:67:f4:8f:
45:4e:06:f3:ec:0a:d9:60:ee:9a:63:b3:91:45:d7:
cb:10:3e:01:fc:c5:8b:18:dc:3e:e2:ee:0e:47:b9:
c0:c9:57:ca:b2:41:b1:06:57:53:24:2f:2f:f3:fd:
f0:d4:c9:c9:ee:2a:c6:29:95:f8:15:12:95:7b:92:
e5:6e:ad:6d:ed:9f:63:5c:5b:50:93:3f:28:49:39:
ca:1b:30:64:c2:ed:24:55:2f:0b:f4:02:51:0e:8a:
ba:bd:56:0c:e0:d9:9c:8d:d4:a0:57:a3:49:22:4f:
0e:08:df:5f:66:04:17:32:a9:6a:c1:70:11:f0:6f:
d5:5a:28:68:c2:e8:69:37:78:61:ce:4a:6b:cf:ec:
82:90:73:03:e0:66:8b:c5:7b:5d:24:54:cc:7c:b0:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:6C:13:EF:C8:A4:B4:E9:40:5E:FC:9A:29:1F:97:17:82:EC:6A
X509v3 Authority Key Identifier:
keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7a:35:72:85:1e:10:a9:c4:fe:26:db:81:ec:6b:72:31:05:
e8:f3:bc:80:55:ec:b0:19:27:5b:07:94:ef:c2:39:9e:e7:f0:
6d:72:11:f5:4d:01:f0:2a:1f:19:f4:86:0a:bb:32:7a:07:39:
ef:41:2c:1d:e3:b0:1b:d9:7d:dd:fa:38:41:d3:2c:f9:29:94:
62:d5:28:70:95:8a:8a:d1:2d:7a:d0:89:66:a4:77:71:90:7f:
e4:d6:a9:0d:f4:68:14:14:1e:bf:21:59:73:86:b4:85:d2:cf:
2b:67:b0:14:31:e8:6c:9e:e1:1d:e6:af:7b:38:0a:8f:ae:fb:
d8:08:c6:43:fc:27:71:23:21:ad:b7:69:8a:61:8a:6b:e5:82:
be:a2:e8:28:d1:a5:ae:7e:82:78:09:30:9e:49:5b:2e:d7:b7:
36:f5:d9:a1:69:43:1d:52:8d:81:8f:33:2b:2f:30:c6:45:c3:
1c:0e:1d:74:2b:0b:49:2d:25:f0:d4:38:12:fd:7d:21:3c:ef:
8b:ae:b4:78:68:dc:14:a9:39:ca:70:3d:a0:8c:86:aa:4a:49:
48:87:8d:72:f0:3a:9b:d3:25:15:22:9a:82:7f:79:d3:9b:e9:
8c:c6:e9:34:c9:e6:d5:a0:0e:71:22:f1:4c:1e:16:f2:fd:35:
24:ce:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:34 2025 by rpki-client