Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: 0iHVUlMHd4ovv4906juXtaJNQa9HO5x1ACHVAnJLCwc=
Subject key identifier: 5D:C8:31:63:F0:48:F8:C4:23:FB:04:76:3D:84:22:9D:35:6F:1D:2B
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 0199FC21C3E2B7F5487A8806F00A6AF90012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0ACD
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: Rzw-FEYLvNzmn8z8pXMnNIdiuzY.roa (hash: 73aotFl5RqbhDVi5JA90kJT8GvN6s6DMcTXSbB1f0hU=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: +TSbjXCFpi5ngdDfNqAemCXoubM1X1TEbg3+ZZIVCog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c3:e2:b7:f5:48:7a:88:06:f0:0a:6a:f9:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=5dc83163f048f8c423fb04763d84229d356f1d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:36:20:36:89:e5:30:b1:f2:79:e5:05:39:11:
1c:57:63:7c:f9:31:30:19:b6:50:f2:52:b5:87:02:
14:0f:3e:c5:db:3d:c1:d5:de:62:2e:20:32:c1:88:
b2:95:b4:2c:53:6e:7e:39:76:21:fa:d5:15:57:e1:
8b:df:ce:a4:61:ad:3b:74:54:8d:e7:76:cd:f5:eb:
78:14:79:8c:27:bb:96:14:58:3e:b8:41:07:a7:e7:
fc:f3:55:dd:42:6e:bd:b6:1c:81:53:2a:ed:9e:b4:
45:4f:e6:2d:8f:5c:17:0d:bc:95:53:94:9a:97:d9:
7a:41:30:03:14:fa:2c:f5:e7:e2:fd:95:8a:85:5b:
34:5a:dc:47:b1:b8:39:ee:58:c6:81:2e:67:45:ac:
d5:01:42:cd:c0:7b:05:90:d3:f9:3d:74:54:9c:82:
e9:d9:94:7b:cf:de:d3:55:f9:83:4e:43:4c:25:6a:
ef:50:5c:ea:73:0a:64:5f:2f:67:3f:24:93:51:07:
7d:00:63:0b:88:a4:49:ac:41:dc:10:72:48:19:ca:
c6:22:1c:64:30:31:5b:7e:56:54:d9:60:b1:af:1c:
e7:20:2e:56:0e:ba:e2:de:f2:d3:da:37:a2:eb:b8:
1d:8f:59:d0:97:76:8d:54:ae:b6:88:31:50:23:50:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C8:31:63:F0:48:F8:C4:23:FB:04:76:3D:84:22:9D:35:6F:1D:2B
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0d:3d:0d:9b:b1:d6:07:96:03:19:18:74:08:b5:72:bd:2a:
73:e8:8e:f8:69:3a:6e:f0:f8:0e:6e:0a:f4:51:a8:c0:9c:a0:
c7:6c:0e:74:3b:f8:7e:78:ed:e7:5f:7a:d4:67:85:1f:2b:6d:
a0:83:4f:6e:2d:cf:77:d0:e5:a7:bf:a9:2b:31:84:91:7c:3f:
53:a0:7d:ab:ab:d6:75:e1:f4:2d:c3:11:9d:2c:e0:c0:1c:de:
db:44:ad:f6:0e:2e:58:2d:b4:b6:2f:a7:ff:fc:ac:ea:00:62:
e7:39:cc:34:bb:86:3b:ab:f2:8c:b9:95:97:42:c0:a8:cd:92:
99:68:02:e6:b7:7a:55:c8:e4:42:b4:82:38:fe:dc:b4:c9:a0:
7d:be:ff:22:de:0b:74:3c:c0:1d:a2:3b:4e:b1:f7:fb:4d:ca:
9f:b3:b2:59:13:be:69:d0:e0:ab:57:ae:d8:76:f4:6b:f2:52:
92:bb:f9:5e:5e:5a:ba:04:b8:fd:dc:fb:17:9d:3c:fd:da:85:
d6:a4:1f:5f:77:92:8a:be:1d:64:a9:d8:bc:6f:cf:2b:2b:ac:
f3:13:b9:0c:8a:1e:3e:ee:1c:d4:74:ba:7a:f3:f4:25:ad:8f:
b0:22:a9:f8:7f:e6:21:10:30:f4:d5:42:1d:ed:08:7a:98:03:
98:8d:5b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:25 2025 by rpki-client