Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json)
Hash identifier: 2gMATpfvR1psbdCs2SI2ZY5w4+H73mKahWf5FtYNLl0=
Subject key identifier: FD:AF:8A:FB:70:48:AC:F1:26:6D:36:82:AC:44:86:16:F4:10:FE:D7
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 019A7225B0080610777C09EB0870F43079AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: DPVVAefqEJLKXS9RwpST2ssxAnYcnzLIH79z/QXRdi4=)
2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b0:08:06:10:77:7c:09:eb:08:70:f4:30:79:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=fdaf8afb7048acf1266d3682ac448616f410fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:51:6d:49:ac:87:48:f1:e8:08:42:9a:0b:
e0:fc:3f:73:72:12:1a:b0:e5:2b:fa:b7:b4:d2:7f:
1e:68:14:8b:a9:ed:c3:fc:c9:32:39:bc:2e:98:59:
35:ff:f7:4d:8f:c2:05:58:ab:c8:9b:a8:45:10:11:
2a:ad:ed:4d:ec:f9:78:27:7a:e2:1a:db:de:5d:a7:
d1:36:88:d8:a9:2e:8c:6d:d5:6a:00:19:83:73:82:
27:9a:b1:16:28:7c:a9:cc:4c:d8:e5:c6:29:19:d9:
69:04:25:01:4d:24:9f:15:ab:f6:3b:93:b3:5b:c1:
e3:ab:6b:36:dc:bd:06:18:ab:b4:5f:42:11:65:9d:
f5:57:32:5f:4a:ae:cd:2f:5f:12:46:58:e6:9d:f8:
62:7f:b7:c4:0a:ec:45:1f:20:07:32:9b:42:db:43:
8f:9d:1b:72:03:6a:1e:01:53:5b:c4:6c:91:24:c3:
76:e7:42:16:03:8a:58:61:77:2d:64:e0:f4:d9:0e:
8f:e7:64:80:15:26:78:fb:71:6c:6d:73:f2:1e:f1:
43:cb:5d:4e:f1:bc:62:71:cd:c7:46:cc:74:87:59:
12:fb:ef:74:e4:67:d3:d7:f8:bc:1e:81:1a:ea:34:
cd:0b:08:74:46:8b:15:4e:61:9b:93:85:b6:18:07:
5c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AF:8A:FB:70:48:AC:F1:26:6D:36:82:AC:44:86:16:F4:10:FE:D7
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3d:32:00:c0:fe:2b:69:77:87:89:b7:57:d3:b1:bc:f1:e6:
fd:47:12:47:b4:ed:f2:08:2e:d9:8e:da:60:ad:a8:b3:ef:a0:
66:75:1a:c8:77:4b:92:c5:37:59:e1:ce:2f:fc:54:67:70:4e:
86:cb:2b:d6:47:e9:27:79:68:ae:18:76:a8:75:3f:95:09:68:
b5:58:f8:ff:fa:09:00:1f:a0:b9:4a:ed:e1:2c:7b:55:3d:fc:
a4:91:5d:73:58:f4:2c:54:d6:a7:b2:a2:c7:8d:30:05:26:c6:
a0:1d:f8:03:76:90:c9:ec:cc:02:75:3d:6a:41:a5:cf:9a:ec:
51:c0:61:0a:bc:96:d8:9f:04:78:3a:d0:81:28:0c:df:a1:b2:
f5:76:48:86:f7:e1:24:db:0f:2b:d4:71:d2:86:d4:b4:b7:c6:
73:0a:fb:74:2a:ee:8b:9f:07:2b:e5:fd:9d:2b:1f:9e:f2:bc:
bc:e1:7c:02:f2:dd:94:cb:38:88:75:fd:70:6a:6a:d1:64:3a:
2d:10:1c:61:2d:e3:7e:7c:f8:24:20:3e:f7:48:3d:b3:95:17:
e9:81:18:5a:a7:3f:5a:67:72:4d:12:82:f1:70:fe:77:99:14:
17:86:f7:2c:57:19:2a:a5:ee:8d:42:19:b3:8c:bb:80:ed:bf:
e3:88:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client