Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: L454wvvt5uN6MZ2eOxILRpRrAtQ4b+68mJtxSEL0PWg=
Subject key identifier: E0:78:4F:C3:DE:C3:3E:AB:96:59:A4:F6:D4:83:87:50:F2:A4:80:BC
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019A4EF462BE69FFFB443F9C4753B7BFA805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 0E72
Signing time: Tue 04 Nov 2025 13:00:30 +0000
Manifest this update: Tue 04 Nov 2025 13:00:30 +0000
Manifest next update: Wed 05 Nov 2025 13:00:30 +0000
Files and hashes: 1: N9xO1-NLybIuf2QGNV0iV1i1rRA.roa (hash: EUQ0hueLkMsL20to636qmUcLllL0XtQ2Nr9B2Qpz0Yw=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: xLxUXGhDHWzfUIYaGdJ/6FCC20S4QW8sA3LU3WBF+ow=)
3: jaAQVqLk3N6vXmbGkwSHtHbashQ.roa (hash: 57hExgt+ivC5tWr9wIi1WBpxn1Wv7MUmq0/RKAWH5Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:62:be:69:ff:fb:44:3f:9c:47:53:b7:bf:a8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Nov 4 13:00:30 2025 GMT
Not After : Nov 5 13:00:30 2025 GMT
Subject: CN=e0784fc3dec33eab9659a4f6d4838750f2a480bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:c2:e4:53:bd:cc:2b:f4:6f:79:1b:be:34:
66:7b:17:d1:00:dc:a0:54:ad:65:67:db:18:75:a4:
06:58:8e:f0:fa:5a:be:e2:c1:2b:ca:6a:06:fe:ef:
a0:79:6f:4f:3d:5a:df:62:e6:f1:f0:10:15:aa:25:
cb:bc:4c:3d:9b:03:b5:74:73:bf:4f:d4:cb:ad:12:
6b:92:e9:d8:71:1b:d1:4a:0f:28:88:39:d0:81:05:
46:a2:24:20:db:4c:3d:90:2a:38:e6:66:03:81:2b:
6f:d0:7e:f1:18:43:08:5e:93:8b:e3:81:67:07:f0:
e4:e3:ba:27:61:4e:95:93:83:c9:23:9e:1f:14:de:
01:52:d8:73:fa:64:c8:b2:69:b1:ba:ea:72:b7:d3:
d0:09:d1:a3:37:14:73:dd:49:51:0b:89:1a:30:aa:
52:19:eb:ca:70:14:f2:4b:51:3d:0c:95:27:c6:0f:
d9:57:ae:b3:8a:e7:e7:90:59:ce:04:8e:b3:ba:15:
92:4e:f4:b6:be:07:46:62:25:9f:1a:b6:f3:30:a9:
c2:aa:99:56:48:42:b8:51:1c:9e:a2:10:c3:49:0d:
9b:7c:d6:70:0c:52:9b:18:3f:35:c9:ff:26:fb:f2:
26:85:01:8c:bb:ef:95:a0:2e:84:ab:6a:fc:eb:62:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:78:4F:C3:DE:C3:3E:AB:96:59:A4:F6:D4:83:87:50:F2:A4:80:BC
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bd:55:14:74:03:76:8f:57:d2:75:33:b0:33:86:f7:c8:0b:
9c:71:fe:aa:42:84:cc:1d:f0:77:c8:8d:36:f5:ab:94:28:67:
a4:b4:72:82:3d:5d:26:7d:4b:58:33:16:8c:f8:78:3c:d5:55:
e9:84:38:45:8d:18:7d:6d:0d:14:cb:d7:61:d6:8b:67:5d:9e:
27:e3:07:24:ed:11:00:e2:14:bf:6e:eb:6e:f0:f9:c3:14:3a:
c4:5d:b9:8f:c8:20:b7:01:fa:e1:24:06:82:f1:a0:0e:1c:c4:
22:0d:09:18:d7:99:e6:b7:12:16:68:d8:ce:62:f1:43:8d:1e:
cc:f3:03:0b:72:0e:39:ff:b8:40:93:80:c4:a9:31:86:bf:1b:
82:d0:bf:1b:05:d3:c8:f8:2d:96:aa:f4:13:db:51:30:24:4a:
e6:1f:6e:77:4a:8f:2a:07:b4:e6:93:0e:a8:74:be:26:c8:68:
07:fc:e9:6d:0e:19:90:c3:b9:ec:a8:d0:6f:c2:7b:08:7c:0d:
bb:b0:65:1c:ec:a5:67:d8:a5:db:a5:e2:ba:48:68:ca:09:e3:
f8:c5:02:f9:de:d2:07:8f:ba:77:d2:b4:0c:ce:28:f5:80:27:
61:4a:23:7c:64:fc:36:91:94:ac:a0:a7:69:77:ce:e3:05:52:
e3:7b:05:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:25 2025 by rpki-client