Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json)
Hash identifier: bp1ZlJLH5NaNMf7RpF30MCor9NbIScNf6Wnf6FV3iNs=
Subject key identifier: 1E:EC:18:8B:EB:F4:70:B1:F2:8A:F1:1D:CD:E9:BF:29:E6:8F:6C:15
Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Certificate serial: 019A4DE17BB9D27B9964AE64200435E799EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
Manifest number: 09E9
Signing time: Tue 04 Nov 2025 08:00:14 +0000
Manifest this update: Tue 04 Nov 2025 08:00:14 +0000
Manifest next update: Wed 05 Nov 2025 08:00:14 +0000
Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=)
2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: YhxViI4ayVIWsl9ZYg3xn477Kpn+olB6HbMQrrUN2EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:7b:b9:d2:7b:99:64:ae:64:20:04:35:e7:99:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7
Validity
Not Before: Nov 4 08:00:14 2025 GMT
Not After : Nov 5 08:00:14 2025 GMT
Subject: CN=1eec188bebf470b1f28af11dcde9bf29e68f6c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2e:a6:d2:88:af:3c:63:1f:31:c5:bc:ea:98:
51:c1:3d:a1:20:45:f2:5b:fc:40:c5:f8:66:a7:b2:
0d:a5:eb:77:b8:4a:bc:19:57:4d:ab:4c:b7:05:e0:
8d:a5:0f:7f:2b:98:42:b8:72:86:d9:a0:ec:43:c2:
d1:20:d9:d1:15:12:f5:67:9d:76:5b:8c:16:e2:df:
46:a2:12:44:34:e1:21:6d:54:27:9f:32:06:f0:73:
07:82:5a:7d:6c:29:de:25:6d:2a:8f:b7:d1:13:f9:
6e:c7:50:e6:34:dd:b6:89:3a:79:a4:6d:bc:a9:34:
37:09:d0:81:93:28:a5:27:63:91:60:be:06:f1:38:
ff:3e:dd:ba:20:17:d2:c3:37:ce:ae:44:96:26:9c:
c5:2b:bd:52:73:a7:f1:eb:a4:7b:f9:6d:51:55:ef:
a8:88:03:72:aa:bb:2f:19:9b:d8:42:1a:84:eb:57:
c6:cf:c6:f3:40:c0:f6:cc:94:72:2a:5d:df:0c:1c:
97:35:ed:4d:47:98:f7:96:fe:c3:d9:db:12:f0:af:
1b:b6:e3:fa:a7:de:dd:02:67:ff:32:0c:f5:ae:58:
73:51:4c:be:27:bf:4d:07:cf:78:41:10:d8:03:cc:
54:83:63:23:cd:dd:a1:2d:5b:c2:89:5d:f9:21:d3:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:18:8B:EB:F4:70:B1:F2:8A:F1:1D:CD:E9:BF:29:E6:8F:6C:15
X509v3 Authority Key Identifier:
keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e4:e1:d2:35:11:bd:20:92:19:75:1e:5f:4d:8b:0d:3c:ff:
31:fc:a7:1d:64:a0:fa:58:61:f6:78:12:e8:91:cc:49:26:c4:
66:28:6d:7b:69:38:71:c1:63:3b:89:33:55:1b:06:8b:82:3a:
1a:25:fc:b0:02:7b:03:ec:60:dd:0b:1f:cf:06:49:ee:b8:4e:
72:d4:2e:59:49:12:dd:15:f1:71:ac:3a:89:61:1b:5c:a9:6a:
9f:17:ce:8e:61:4e:13:64:a8:93:e5:3f:6c:33:d3:16:c2:2e:
ca:0f:ef:31:29:7a:50:89:ff:35:14:cb:4e:96:c7:da:ac:a6:
6a:1b:ad:cc:5d:c3:d8:f4:b5:27:03:0f:83:c3:24:79:2d:6f:
26:48:5b:b6:5f:8d:2f:57:e6:21:8f:75:42:3d:14:6f:c8:b1:
39:6f:3c:c4:56:6f:aa:72:ec:c1:08:27:f9:ba:84:9f:fe:5a:
ca:39:43:21:bd:b0:97:9c:0d:57:02:b4:b6:45:40:47:fa:66:
b6:51:cf:94:9b:3a:9d:37:0f:4a:dc:f2:15:25:ec:37:a8:8a:
d0:9b:55:d9:0e:bc:55:73:1d:70:6e:3c:c1:85:2d:ee:99:fb:
ce:86:35:3a:d8:f2:51:88:ea:00:0e:f1:b8:13:a2:a0:af:51:
20:24:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:06 2025 by rpki-client