Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: e9iGBXC1QfA+4D63iu4hP0Z49LjnJEmpqgoeybBEXWE=
Subject key identifier: 49:70:E8:B4:6B:45:B3:59:4A:C5:6C:BD:D9:F0:50:2A:8D:76:C0:38
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019A71B7C3CD6D3F617E7F6D17FAE5397F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: b8UECFZRsVYM80bGf8ir6GHNBj+N3pfmUws0IOaK/U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c3:cd:6d:3f:61:7e:7f:6d:17:fa:e5:39:7f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=4970e8b46b45b3594ac56cbdd9f0502a8d76c038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e2:c9:90:e8:3c:6e:84:8d:2f:67:bf:89:bd:
3f:6a:e0:0e:68:61:6e:23:be:fa:e5:d6:c7:ac:ef:
2f:69:b4:00:39:72:47:20:d0:e7:4c:46:bf:c7:03:
84:72:5f:01:ea:4b:96:4e:97:89:c2:dc:0f:ac:0d:
5c:a5:1f:a5:52:61:91:cf:26:01:ae:5c:ee:31:e9:
00:7e:f1:3a:86:3e:27:27:f9:33:60:89:3f:2e:3b:
38:3f:12:38:b9:4c:b6:70:ed:ea:d2:46:f1:d7:48:
5d:58:cb:b4:8d:94:5a:a2:8e:54:cf:c7:4e:ec:73:
90:b0:2a:58:f0:66:25:1d:8d:b1:83:e9:42:7d:43:
6c:42:4b:64:01:c1:bc:61:63:f0:02:12:66:66:83:
f5:60:c5:3a:ff:57:e6:ec:f1:76:b3:a9:61:5a:8d:
1f:51:ed:28:19:cb:d9:74:44:c5:29:6f:4e:85:81:
3a:34:e0:35:8c:bd:ea:dc:ca:47:7a:64:01:3d:30:
ae:d9:fb:e5:53:b3:51:cd:38:d7:11:4f:09:16:68:
f9:6a:a7:35:c9:6b:7c:0b:f2:33:f0:3c:7c:1a:23:
eb:80:8b:91:d2:d0:71:bb:41:aa:29:0b:f3:49:db:
ca:ac:b9:ac:71:fb:bc:b9:34:5b:be:58:64:a5:44:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:70:E8:B4:6B:45:B3:59:4A:C5:6C:BD:D9:F0:50:2A:8D:76:C0:38
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b0:c6:d5:c3:88:ba:9c:2f:35:85:7a:30:34:84:1d:dc:b4:
d3:e8:cc:c0:55:ee:c7:35:15:20:df:7a:43:73:6f:b2:0a:d1:
f5:4c:4c:d0:df:4c:03:0e:73:8a:60:76:ee:f0:27:bb:aa:f4:
48:98:19:55:e6:44:d2:fe:e7:96:a7:74:37:ed:f5:2d:15:74:
e0:b3:be:aa:4e:1d:07:bd:db:d2:ae:07:26:33:c1:de:a4:25:
af:02:54:9f:d8:09:f4:03:00:38:c1:ab:8b:52:92:b0:6a:f5:
29:b7:4d:25:25:4a:e7:d5:b0:4a:8d:89:ee:b2:e5:e1:a8:84:
6c:40:5b:95:b5:c6:29:85:4b:2e:c4:b3:b5:a4:87:58:33:fa:
e4:66:c4:d0:19:9c:0e:1b:9b:83:92:1a:4d:85:a1:b0:b0:e4:
22:fa:5c:a6:c8:05:f1:be:e1:f6:f9:01:7e:22:7b:0e:d3:3b:
74:b2:d0:c2:12:29:4b:58:bd:4c:70:02:29:44:ba:1a:d4:75:
84:dc:48:0b:57:fd:0a:0b:87:74:e6:d1:37:cb:63:a9:74:eb:
a8:5a:10:e0:d4:b1:9a:4e:d3:f5:46:70:5f:9d:dc:ce:2d:d7:
1a:73:90:f5:28:0e:8a:58:d1:5c:06:03:08:d4:83:7e:ef:58:
04:1b:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:40 2025 by rpki-client