Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: lj1R5vmDEEgTmFE3tu2htMA2LG0YPZQjYeDjn5E+aA8=
Subject key identifier: 14:D8:DE:62:96:5E:56:74:29:FF:4A:83:36:09:02:99:FF:69:08:2F
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 019A4E189E4E2A8139DACB1E8C5AE1B65662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0C1C
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: 5JqncfPxEsvv1TZW4uXCRCKlQ+L5DKuS5iYz8imyyQo=)
2: vKqft3GpUgOOXSf2VjTKls-pWMw.roa (hash: 5Tvu15lYIVA9/K7Qk9i7l4tCbiMQ02zrBkIoUMRXadY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9e:4e:2a:81:39:da:cb:1e:8c:5a:e1:b6:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=14d8de62965e567429ff4a8336090299ff69082f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:6e:47:1a:86:d1:b6:67:98:2b:9b:f8:b8:
bd:d7:13:25:e4:c9:85:bc:d0:40:72:d3:9e:5c:0c:
ea:4a:00:74:ac:c7:02:03:1b:05:11:2b:14:cf:b3:
31:01:04:d8:82:b5:60:71:53:3e:9d:24:ab:f9:f5:
87:33:fd:8d:99:2e:9a:3b:f1:2f:ce:3e:38:08:f3:
75:82:84:78:8d:d7:07:91:ae:15:84:a5:6d:a5:db:
fc:99:a7:c0:90:9b:ff:d7:86:f9:4b:99:1b:23:88:
74:c4:bd:21:2e:af:b4:8b:57:db:5f:47:15:55:89:
92:98:35:30:78:08:0b:e4:cc:06:3b:f2:be:99:26:
b7:02:d8:0a:5d:a7:89:f7:6c:9e:df:79:d2:e8:50:
31:4b:1a:ad:5f:d6:c9:c6:74:78:46:ce:c5:af:1d:
7e:88:38:77:02:2b:d8:25:14:c1:d8:0c:0a:97:b6:
ce:b2:2c:e0:f1:a8:75:73:8d:f6:47:52:29:1d:e2:
ce:0e:f8:7a:c9:14:9b:dc:39:2d:4b:e8:e6:7f:f1:
40:31:27:8d:d5:1a:85:b7:8a:b1:ce:17:3b:37:84:
44:4b:7c:fe:52:b5:a2:7b:6c:7a:4e:76:4f:43:ef:
8f:80:2e:ce:7f:dd:51:49:cd:5b:af:60:1e:46:34:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D8:DE:62:96:5E:56:74:29:FF:4A:83:36:09:02:99:FF:69:08:2F
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:0d:59:7f:6c:2c:9d:dc:80:60:de:2c:cd:68:32:9a:86:
3e:74:18:a8:57:97:83:5b:d6:db:7c:ee:a7:81:f5:c9:84:3b:
0e:9f:3a:33:0c:9b:40:7c:fe:19:b9:57:c1:39:9f:b6:49:b9:
c9:98:35:c7:07:a6:f0:9a:36:2d:c9:eb:d5:b2:79:94:99:2b:
88:50:cc:54:26:14:b2:72:ca:6b:ab:98:a4:dc:a9:b5:63:8a:
56:fc:fb:ba:59:b2:f3:b4:32:80:95:e7:2e:ac:b4:2a:74:5f:
07:67:05:62:70:a8:86:e1:90:39:6e:15:c3:e9:1e:24:1d:91:
3b:7f:0a:81:dd:ba:f1:5b:4c:28:29:d3:30:28:c4:78:61:c7:
ef:b2:24:46:f2:56:00:42:30:82:0e:90:a5:ab:93:73:58:a5:
dc:21:d7:34:ea:2d:a9:9d:2a:c4:fe:ae:8f:0e:a4:ad:1b:fc:
ce:7d:84:32:24:3b:4a:f4:34:7b:b6:6f:81:59:93:99:92:a7:
a6:ce:bb:f4:2a:31:c0:7c:7b:8f:33:e0:03:e2:4e:4a:61:db:
1e:5e:c0:94:8d:60:2a:e4:1a:47:42:f2:fa:67:60:eb:77:58:
f5:04:a5:66:cb:f7:99:a0:9c:84:17:b2:28:b5:ce:2e:44:7f:
64:17:7f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:28 2025 by rpki-client