Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json)
Hash identifier: HX03JdBuByQd8uAuG2JOY2Y881xgwTT+u7VRd7/FQy8=
Subject key identifier: 22:3A:6E:76:41:D5:63:A2:6B:5C:AC:CB:C6:1D:20:98:9D:52:D8:85
Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Certificate serial: 019A4D73A30EDDC7AD8613945F740DCB90BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 06:00:15 +0000
Manifest this update: Tue 04 Nov 2025 06:00:15 +0000
Manifest next update: Wed 05 Nov 2025 06:00:15 +0000
Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=)
2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=)
3: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=)
4: WP71_y34vxzD5x7BOioebxCCHyo.roa (hash: E5yzZO4QIaYJL7VozBk+Y+K8Kjs53pwyA0H4+gidJRs=)
5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: vW4GnLpKOSZIwq2hPobgmblI+LFUcimrQdYL6bKqAT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a3:0e:dd:c7:ad:86:13:94:5f:74:0d:cb:90:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7
Validity
Not Before: Nov 4 06:00:15 2025 GMT
Not After : Nov 5 06:00:15 2025 GMT
Subject: CN=223a6e7641d563a26b5caccbc61d20989d52d885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:29:4a:94:3c:3f:05:4a:a0:34:2b:c9:e7:
c7:71:70:c5:9d:83:a5:36:7c:29:81:8d:ed:50:8b:
a8:a9:1b:9d:5d:47:61:fd:ba:68:5f:3b:dc:a6:e6:
b0:75:f9:6d:c0:39:21:02:f2:23:ff:36:0d:f9:fe:
27:92:c3:46:e7:d8:c4:3e:37:f6:d1:cd:41:1e:00:
89:3d:fa:fc:ad:af:74:72:7a:6c:13:4b:9d:76:27:
5e:08:12:56:36:88:38:99:09:d9:58:1e:dd:54:8a:
07:70:7b:f5:76:b2:36:7a:9c:ef:07:3f:fd:52:2a:
69:19:45:20:f8:31:1f:f4:07:2b:17:6e:ae:db:df:
9b:40:8b:92:6d:b5:9a:fb:ba:6d:fb:5c:d1:0e:80:
72:96:db:83:4a:98:eb:db:c4:d0:4f:e1:f9:f9:e7:
60:d8:c7:9e:31:db:80:ba:e8:e7:1c:f7:f1:81:d8:
0e:7d:9c:3b:66:e5:84:f2:0a:78:6e:53:d0:4f:26:
1d:44:42:d6:63:e9:fe:67:d2:66:39:92:a4:bb:11:
62:62:21:c4:a8:4d:92:2d:65:3e:6f:29:2c:4a:fc:
44:6e:09:d4:d0:56:60:ed:11:b8:d0:91:1b:8e:32:
72:be:ab:b9:80:9e:89:a6:ce:df:26:b5:e9:ee:cd:
7d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3A:6E:76:41:D5:63:A2:6B:5C:AC:CB:C6:1D:20:98:9D:52:D8:85
X509v3 Authority Key Identifier:
keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d1:8d:ec:67:17:c8:d0:6c:91:9e:0d:e6:c5:dd:84:f1:fd:
5e:0f:ff:86:0c:ca:fa:3e:4b:3a:ae:ca:48:eb:f2:f6:7d:98:
03:cf:d9:aa:ab:2e:19:01:0c:31:07:41:10:2e:7f:9f:24:7f:
79:15:4e:9b:c9:8f:17:e9:c9:14:07:d9:68:37:6d:64:50:d1:
e6:b3:1f:88:d8:e1:1d:e3:49:e2:50:ee:65:49:47:10:b7:df:
7d:b0:33:44:c9:53:9a:bb:9f:1f:f1:ed:4f:d4:b3:4c:a1:8d:
a5:6c:e2:d5:0f:b3:b5:66:61:6e:2b:33:9e:1c:00:6b:52:5a:
db:13:9c:34:c3:3d:6e:8f:84:95:42:a4:4b:7d:c6:42:ad:a2:
fd:fd:2f:7a:5d:51:ce:5c:a2:45:1b:42:fb:e4:2b:fa:27:37:
7d:24:40:c8:63:34:5c:fe:bd:82:6a:5b:5b:33:cb:37:6a:2d:
62:f3:a7:5b:8a:15:b5:c9:e8:f4:ee:34:c9:2d:23:bd:f2:33:
fe:83:e7:c9:cb:98:c3:09:98:e8:f0:41:77:f5:30:c3:bf:e2:
39:bf:e5:2d:11:92:e4:76:c5:18:44:74:0d:0a:3f:ae:b9:c0:
a3:b9:c3:79:41:4c:3d:45:6e:06:a8:a3:eb:b5:0e:5d:40:3f:
48:5c:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:45 2025 by rpki-client