Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
File: x90pfQiY__3ijXaWeVvb1SI_imY.mft (raw, json)
Hash identifier: t3vR26x26ylnimErE2F71rBtNVad6eO5vz1FlEYcX34=
Subject key identifier: C4:95:B8:31:F3:0C:0F:15:3D:A6:E0:75:9B:58:87:B2:04:A9:F5:A5
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Certificate issuer: /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial: 019A4D072B4C3C5B5E6F7CB6F491FEE9A96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
Manifest number: 0858
Signing time: Tue 04 Nov 2025 04:01:46 +0000
Manifest this update: Tue 04 Nov 2025 04:01:46 +0000
Manifest next update: Wed 05 Nov 2025 04:01:46 +0000
Files and hashes: 1: 1AGt6vAj9ZNv2w7Fp5tJobLB8aI.roa (hash: GbnSbQEBgHsaOZrngwqdPSv9qkJB1d7PRyKBT0jDdQQ=)
2: x90pfQiY__3ijXaWeVvb1SI_imY.crl (hash: u7omd8mYIIX+BCTABpjVkriY70tGJ0fjQdwEwiKvkrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:2b:4c:3c:5b:5e:6f:7c:b6:f4:91:fe:e9:a9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Validity
Not Before: Nov 4 04:01:46 2025 GMT
Not After : Nov 5 04:01:46 2025 GMT
Subject: CN=c495b831f30c0f153da6e0759b5887b204a9f5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:19:db:8f:64:54:81:af:3b:69:88:2f:17:
8e:cf:22:09:af:7f:f1:14:0d:24:03:05:37:c9:e0:
b9:cf:5c:75:55:03:32:66:53:b1:71:80:96:cc:25:
e8:a0:a6:38:06:dc:a6:e1:96:ed:c0:76:f6:4f:56:
ce:05:20:a3:21:b2:a7:19:b4:65:75:52:95:26:5b:
0b:78:8b:8f:3e:48:f1:d7:d4:f5:41:ad:17:99:ac:
96:39:73:19:ff:6b:63:71:22:0a:e4:97:06:b2:c8:
b5:85:4b:ae:db:fe:5f:43:16:45:3b:a9:d0:38:a2:
ca:87:7c:e8:11:ac:c6:49:cd:ca:6f:d2:2d:7e:d9:
f3:1a:9c:89:a0:c1:55:26:bb:2c:60:06:2c:4c:52:
f9:1a:59:7c:11:86:8a:c3:db:1e:83:96:eb:9e:f0:
bb:9e:5f:0f:78:9e:55:cc:f7:02:02:a2:bf:0e:3f:
1d:92:f4:36:cb:54:01:41:6e:cd:90:5e:52:5e:8f:
48:44:e7:a1:b8:51:f0:0a:8d:21:3b:5d:65:f7:0a:
bd:1a:ab:33:b3:9c:e9:d8:23:b4:03:40:38:07:92:
d1:bf:29:ea:fb:4e:d8:75:85:7f:74:fe:c8:c6:87:
da:17:db:85:73:51:b8:37:d3:7c:09:ac:60:51:58:
ef:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:95:B8:31:F3:0C:0F:15:3D:A6:E0:75:9B:58:87:B2:04:A9:F5:A5
X509v3 Authority Key Identifier:
keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6c:c0:44:9d:fc:cf:35:25:7c:a0:f6:c3:6f:b8:95:68:8f:
61:fc:d8:67:4f:6b:9d:40:f7:10:bf:b5:21:70:6a:cc:9c:a2:
df:39:47:2a:d4:63:7e:71:52:d8:f3:2f:f9:fe:98:4b:f5:e7:
84:90:48:da:af:de:a7:4e:a7:04:c6:88:8d:d0:c5:de:3c:dd:
bc:6d:3c:44:e1:06:b2:ae:f2:72:6d:9d:1c:32:6b:98:36:d9:
c1:35:15:57:7f:9a:25:3d:01:7d:20:45:b4:27:c5:97:96:e9:
69:9a:c6:7f:4d:96:f5:1a:5c:f1:7a:db:a9:10:ae:1f:d3:ac:
c1:bf:c7:ab:35:af:ea:fa:b2:b6:ca:25:2f:e8:c5:7c:4c:20:
57:b1:ba:ed:4e:95:15:e1:7a:a9:85:c1:2b:30:ab:9d:3d:16:
3f:86:69:a3:59:7c:48:c1:8d:c0:6f:56:59:b4:9e:81:71:1c:
bb:d2:9e:03:d8:42:52:cc:87:fb:71:c7:71:e2:05:48:ae:9c:
fb:9f:2d:1a:68:c0:4b:33:0d:57:37:84:1d:1e:11:d2:23:25:
8b:8e:c4:c8:00:6f:f7:14:a3:7b:9f:3b:89:cd:b8:f1:e4:5a:
30:71:83:1a:c3:5d:7f:48:34:7c:0a:01:88:e6:7b:a1:0d:cb:
5b:89:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:46 2025 by rpki-client