Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json)
Hash identifier: nYjhsvjcr4XilrydEgSXGGXZ09dvUdzSLWZVPqGRyro=
Subject key identifier: A5:DA:5B:25:B4:89:BA:2C:35:50:28:06:E5:8D:42:B7:44:8D:DE:13
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial: 019A4D739EBA2B87E1ADA430AEA9312DC81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
Manifest number: 13EA
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=)
2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: A6ZFwLrrcMU/WCQ5zKhQ+ZuWiQgmmwFXOTzVeoOiP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9e:ba:2b:87:e1:ad:a4:30:ae:a9:31:2d:c8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=a5da5b25b489ba2c35502806e58d42b7448dde13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fb:0f:01:4f:b3:fb:a4:2b:a7:30:52:8c:04:
9a:69:7e:07:ea:93:9d:bf:52:5a:c2:82:9d:d4:36:
91:24:01:e2:1a:a3:92:82:dd:45:c1:c6:1a:76:33:
23:0d:4f:d4:24:40:c2:cd:17:f9:aa:cf:0a:b1:27:
6d:18:b8:2d:32:ca:9d:fd:0d:6e:c4:7b:f9:58:a8:
c6:c3:56:46:c9:ed:2d:4c:b8:b0:58:3f:d4:c9:b4:
87:b3:4e:e4:f6:b2:54:58:7c:36:04:a5:0d:25:a9:
ab:b0:df:67:d3:55:0e:c9:76:9b:41:63:9a:5c:26:
ed:df:e4:46:4d:d8:9c:da:cb:6c:f4:e0:2e:2f:91:
f5:cc:71:6c:a6:18:79:cc:c2:cd:a2:0f:ad:85:38:
73:f9:42:7a:95:00:48:22:7c:be:cb:99:30:7b:0f:
26:09:93:90:11:14:1d:75:30:98:3e:84:79:19:f3:
ee:b3:68:1e:f6:a6:01:1a:1f:ab:c3:f2:f8:88:fc:
1f:c4:ae:e6:22:3a:61:3b:30:a5:9f:20:2f:e7:27:
16:3a:ed:9b:96:79:44:23:8e:ca:f4:b6:03:1f:2a:
0d:b9:34:82:18:08:62:e2:22:68:d4:c8:34:40:ac:
93:f1:70:45:f0:2b:5b:be:4b:c7:ec:0b:eb:8c:e7:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DA:5B:25:B4:89:BA:2C:35:50:28:06:E5:8D:42:B7:44:8D:DE:13
X509v3 Authority Key Identifier:
keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ab:83:5d:fb:c7:30:90:2d:fa:75:35:f0:ae:07:f9:61:68:
e9:b8:10:07:2b:08:cd:69:e3:f0:03:8c:a1:06:9c:98:39:ef:
c7:16:25:43:5b:37:d1:76:80:b4:cd:b3:69:17:3c:6a:db:a2:
1e:fb:16:7d:6d:73:8d:e2:48:ba:17:02:7f:da:72:72:12:4a:
e7:5f:4d:61:6b:ba:3d:fa:1f:03:72:b4:bc:e8:d6:cc:70:87:
09:ef:a8:94:c2:44:ed:50:a2:68:34:e9:5c:af:95:ab:3e:1c:
37:73:c5:a5:24:66:68:47:a2:fc:0e:20:68:9e:18:74:f2:73:
81:0c:ab:cb:26:c2:3a:b5:a3:33:63:c4:85:79:ff:d2:f8:ab:
33:26:79:a3:69:7b:5a:eb:21:be:26:a7:15:09:b3:50:60:73:
a0:22:90:b4:4a:5b:54:64:42:0a:bd:b5:0c:b3:2a:e7:f2:e0:
9f:75:e5:61:b1:89:b8:8e:6a:d3:3e:45:72:68:c7:38:2e:9a:
66:db:49:8f:6e:83:bc:ac:bf:ca:4f:cf:48:c0:3e:ec:0b:b0:
1d:b2:b4:c8:40:56:08:70:1a:40:f3:4f:8c:6e:c7:06:4d:e0:
87:cf:c9:b3:57:29:d3:56:46:51:d1:0a:d6:5e:10:7b:ba:16:
f1:e8:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:38 2025 by rpki-client