Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: RkYQbVBui7KcYz9rvd5CjxREUVFE9WsnQbuv0RdMRjs=
Subject key identifier: AC:B4:08:CB:D2:3E:66:6E:92:12:F7:7B:DC:2C:E4:F6:BB:C0:50:FD
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 019A72CA98091C909B81E70F61B3DFD726E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 12:01:10 +0000
Manifest this update: Tue 11 Nov 2025 12:01:10 +0000
Manifest next update: Wed 12 Nov 2025 12:01:10 +0000
Files and hashes: 1: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: x5luEDh2zEt3DE+zkb6wAi55G3A+OHTQD8IYf+rDUpc=)
2: pKpK0fpxNLfPfRjxRzWWa3fKR3w.roa (hash: 8dKtN3Slnvd8pwQgjMVGY+0Hoa2j4W49VOwrSD+22e4=)
3: pzab-y4S6g4DZwEwFQWsy3DRkOI.roa (hash: hKiOLND56jGXA2Q2u9O0L+DdBo1zxKBcuwX1QXw1GUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:98:09:1c:90:9b:81:e7:0f:61:b3:df:d7:26:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Nov 11 12:01:10 2025 GMT
Not After : Nov 12 12:01:10 2025 GMT
Subject: CN=acb408cbd23e666e9212f77bdc2ce4f6bbc050fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:40:20:9c:ac:cc:9c:71:a5:f2:72:93:0c:
47:e6:95:f0:2d:9f:16:81:fe:14:5a:ff:3c:02:c2:
90:5b:46:65:e1:fc:e7:f0:32:13:f4:b1:98:34:4c:
25:4d:8d:74:db:f8:0a:b9:c3:91:09:ff:ab:3d:9a:
2f:cf:b2:49:e5:ea:36:2b:54:97:d7:cb:f6:f3:a0:
d5:f4:fa:1b:6d:b8:0c:6b:e4:83:d4:d0:76:72:7f:
bb:c7:69:e0:11:32:8f:55:15:6c:f7:42:ab:9f:66:
cf:00:89:0b:2f:db:1a:e8:58:f0:a2:27:a6:1e:42:
51:22:65:7f:1a:49:8b:56:c1:4a:29:8b:90:74:b4:
a3:a7:f5:3c:ba:ae:33:3f:08:fc:a5:a2:8e:7d:51:
85:b5:60:b0:e4:86:27:da:d6:fb:c0:33:cd:13:e9:
54:46:1b:5c:5e:b6:f0:47:5e:6f:1b:ca:a8:ec:96:
44:a6:13:39:f9:29:4a:c4:ef:a8:db:b9:e2:fd:5f:
a4:37:cf:e3:b9:13:8e:8f:e0:e1:0e:e5:f9:09:3c:
ab:81:b8:91:41:aa:57:45:a6:b6:0b:09:c3:f1:73:
e4:4b:17:03:9a:08:19:9d:68:61:58:01:ac:ea:2f:
99:04:3a:a5:4e:59:8a:59:ec:11:10:22:99:56:60:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B4:08:CB:D2:3E:66:6E:92:12:F7:7B:DC:2C:E4:F6:BB:C0:50:FD
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fe:a4:bc:04:e4:98:cc:c2:1d:75:14:c4:29:2d:f2:8e:06:
a6:df:e8:d7:31:50:b6:ed:02:65:c0:57:45:67:3f:46:68:1d:
50:51:c4:9c:f5:56:af:9c:90:04:c7:8e:62:e1:31:a5:58:64:
54:06:88:4c:37:b4:69:17:93:ac:99:f5:44:61:cc:5c:0b:17:
d5:f4:b0:72:a8:7f:a6:9f:15:f4:60:1b:f4:cb:ae:8c:00:ec:
a3:0d:3e:f1:2d:ce:0f:06:d2:1f:ee:f9:f0:9c:8f:01:4e:af:
f7:ee:56:39:46:f8:f8:61:fe:f4:36:fd:7a:04:5d:ac:3c:02:
f7:a8:fa:81:8d:48:1f:4e:34:65:f0:ea:ab:aa:c0:08:a7:d0:
29:15:6f:7f:3e:b0:77:68:a9:77:1c:a2:14:ca:29:23:bb:22:
37:19:38:a8:53:2f:5b:96:ca:76:72:5c:7d:d7:f2:e8:ca:54:
f8:36:7d:f7:a1:bf:df:a2:37:42:9f:8b:49:b6:fd:ef:c3:4a:
03:79:fb:89:08:a0:3f:ae:1a:94:06:22:88:c8:0e:54:df:40:
8d:63:b2:b6:c9:2f:0e:93:53:20:53:9d:e4:fe:69:1c:4a:d1:
a5:ea:ec:96:94:25:a5:63:de:f4:47:ca:fd:10:50:38:5c:fa:
e4:67:3a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:12 2025 by rpki-client