Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json)
Hash identifier: 0eo874YnYi+2LBl++DwWz6tCt9ehLXGI5Oh7/0bfZK8=
Subject key identifier: AE:63:26:E0:3D:71:E0:51:6C:CB:4D:23:0C:3F:D9:D2:95:F7:E9:AC
Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Certificate serial: 019A71135D27D97EA6DC9DF0BCAF72F33E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=)
2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: Pk8BslPuPnCiFROegX5j+zASgMo4S+qtHdUSv1BCN/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5d:27:d9:7e:a6:dc:9d:f0:bc:af:72:f3:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=ae6326e03d71e0516ccb4d230c3fd9d295f7e9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:9b:db:5c:c6:39:0c:a3:3a:73:dd:97:fb:
cf:42:42:fe:67:35:f5:64:27:62:81:76:01:76:ab:
a6:e5:a7:2a:c5:05:4c:f8:1b:b3:c3:fc:97:13:96:
ba:58:fa:8e:49:a5:e3:f0:d4:c1:30:de:91:5e:79:
2f:6b:05:b0:d6:79:45:52:97:35:a5:51:45:d9:13:
55:3c:c4:67:32:bc:b3:e4:ac:0b:ac:14:2b:14:6b:
58:4e:5d:a6:2e:9e:09:a4:6a:b5:f3:8b:f4:65:42:
ef:c4:a2:71:06:0a:d9:47:f3:7e:5d:22:dd:74:f3:
2a:d8:cd:95:06:42:fe:c8:cc:03:73:1a:f7:d5:ab:
37:d3:5d:6e:3d:51:f3:87:ee:e4:28:69:5a:34:74:
a5:0b:ec:28:85:73:5f:dc:d3:54:07:c5:27:1f:a9:
7a:c6:ec:77:e2:8f:0b:ba:56:16:ca:d2:b9:b6:bb:
ac:38:ff:44:fc:ee:a8:2b:25:73:1f:9c:a0:6f:14:
8c:20:d2:6a:4f:d5:80:eb:cd:0d:d8:27:f5:bb:bd:
dd:f0:7e:cc:15:c5:14:d4:59:5d:30:a2:a0:37:f7:
2c:db:6b:52:fa:44:97:4d:45:0e:86:ea:59:c7:02:
bd:a5:0c:45:c0:dc:48:70:99:d2:b3:cb:48:f9:0e:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:63:26:E0:3D:71:E0:51:6C:CB:4D:23:0C:3F:D9:D2:95:F7:E9:AC
X509v3 Authority Key Identifier:
keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:31:12:5e:04:d5:15:13:5f:4c:cc:af:f3:62:8f:c4:71:e5:
57:cd:f3:95:82:68:4f:ba:45:9d:ee:1f:7a:62:45:9e:b5:04:
dd:89:48:68:62:f7:4f:92:99:5f:ec:57:dd:91:14:cb:ac:86:
44:9a:25:7f:29:60:92:0c:e3:ad:30:62:bf:fb:24:e6:d3:cb:
6b:12:1b:c7:77:09:ae:ed:b8:52:ec:29:16:c6:83:47:f1:ae:
98:19:da:2c:b9:6a:cb:f0:61:60:e8:34:4c:bf:48:80:65:b9:
30:f1:ee:19:07:dd:e0:1e:24:b3:0a:9e:27:de:bf:5c:e1:74:
6a:f7:ac:42:c9:bc:a9:14:a0:4f:2d:ad:ee:3a:34:14:1d:8b:
fc:68:66:5d:46:d6:87:2f:62:76:71:ac:ba:50:b5:f6:25:f0:
3d:1d:1f:60:0e:39:30:bf:c6:c9:43:79:9b:35:de:a6:30:43:
93:98:aa:fb:f0:3e:e8:cd:3b:3e:70:49:08:d5:d4:c9:89:c6:
33:79:98:f2:a0:d3:35:59:fd:6c:33:3b:29:47:fb:90:74:f3:
10:9e:08:53:87:23:cd:86:06:0f:2d:0f:1d:f1:f1:88:27:89:
c8:f5:b2:14:c9:21:0c:8c:4c:ab:85:49:95:16:65:c4:46:97:
83:6f:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:36 2025 by rpki-client