Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json)
Hash identifier: 5oZeRF1zDofEKu0iZ7OqN0SZXwIHpls5q57rrXqSc30=
Subject key identifier: C2:62:C5:05:51:5F:75:AD:AF:0C:D8:3A:5C:E9:F8:9E:00:FB:28:A5
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 019A70DC3FDDC3DAC9B952926806E003E3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:01:13 +0000
Manifest this update: Tue 11 Nov 2025 03:01:13 +0000
Manifest next update: Wed 12 Nov 2025 03:01:13 +0000
Files and hashes: 1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=)
2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: rrZMYYEPkRWgscjwtu9GLFH2G2fGBPuphN00P15z/4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3f:dd:c3:da:c9:b9:52:92:68:06:e0:03:e3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Nov 11 03:01:13 2025 GMT
Not After : Nov 12 03:01:13 2025 GMT
Subject: CN=c262c505515f75adaf0cd83a5ce9f89e00fb28a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:4d:5a:79:48:a1:43:ce:a6:65:ce:c6:cd:
04:bf:43:5c:02:0a:20:11:5e:ef:63:a6:03:9c:2d:
0a:dd:a8:8f:01:61:56:8c:fd:7a:52:bf:9b:fb:f6:
71:77:a8:7b:ca:2e:79:5c:a2:9e:3c:0d:81:0a:c0:
2f:4b:df:ad:fc:6b:11:c7:e3:d3:33:4a:38:16:10:
df:e3:69:d5:05:3e:da:48:eb:1f:56:1a:d5:ed:8e:
0e:c3:b2:80:57:fa:c3:4b:5e:ea:c8:2b:99:1d:a1:
92:4e:7d:86:ee:99:2f:d1:d8:f0:7e:94:71:ee:0c:
be:27:7a:f6:63:ed:da:6b:9a:f6:2f:90:91:70:b8:
a9:74:f6:1c:f4:0c:c0:86:fe:9e:ae:32:f0:23:d6:
6c:54:4c:60:3c:bb:8f:36:8e:79:7c:ef:f1:e1:9d:
4c:3e:07:29:6e:78:75:3a:88:bb:c4:50:4e:d0:6f:
56:49:ed:48:04:58:53:e8:5f:75:3c:3c:2c:2f:29:
13:5b:de:cb:c1:de:73:a4:cf:31:62:bc:d0:30:93:
e6:41:f5:4e:0b:7c:69:70:5b:be:3d:08:15:26:4c:
7a:66:2e:fd:02:e2:76:62:0e:27:48:85:d8:82:4d:
29:90:9d:34:b8:6c:24:32:44:98:c4:e0:46:e0:85:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:C5:05:51:5F:75:AD:AF:0C:D8:3A:5C:E9:F8:9E:00:FB:28:A5
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:10:8a:3c:3c:96:43:b8:25:db:d3:24:8c:b5:fa:26:7d:
ba:70:ca:81:6c:e3:28:a9:d7:69:8d:7f:bd:51:29:78:ff:56:
c4:42:33:34:a5:bc:9e:62:75:8e:b8:bc:17:c9:a0:c8:93:2b:
db:9e:93:2a:7d:a2:35:87:89:ff:63:68:e7:88:b0:ab:93:1b:
32:0a:8e:a6:9a:1a:db:22:01:b9:f3:3f:f8:3c:8e:cf:08:b5:
22:f7:5d:a1:14:04:28:55:a8:01:40:2c:50:06:e3:e8:bc:d5:
99:3d:fc:23:e7:0e:d7:93:4b:06:ea:19:b0:d6:84:6f:1c:27:
c1:de:36:49:fe:97:a8:d1:19:ce:5d:81:7f:b6:ab:04:bc:e6:
ca:84:ec:3d:2b:db:6d:9c:1c:ed:a2:0f:1c:72:6a:36:fa:f6:
c0:74:01:81:a5:dc:b2:c0:a8:af:85:96:16:5c:5d:35:37:90:
6d:76:cf:52:be:b5:01:0f:29:8e:8f:49:d7:82:69:f3:1c:00:
f5:39:a7:52:7d:52:b6:b2:d6:2c:d6:9c:7c:be:90:b2:5d:52:
d5:d1:69:93:75:6c:e2:35:3a:9e:42:a8:65:d6:85:7c:b8:8d:
d0:d0:47:56:98:07:d2:0a:fc:ac:43:76:a2:e4:3e:40:95:1a:
09:21:22:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:50 2025 by rpki-client