Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: P7DlIpQy8G0fiRBixk//rH7Q5NkMBaxwY1KaZJLBABE=
Subject key identifier: 5B:A7:4A:77:47:39:F9:A8:F4:12:D7:B6:E7:C3:92:B8:C1:BC:CC:5B
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019A4D737C035EAA80696B5D8AE7C7E4C6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 13FA
Signing time: Tue 04 Nov 2025 06:00:05 +0000
Manifest this update: Tue 04 Nov 2025 06:00:05 +0000
Manifest next update: Wed 05 Nov 2025 06:00:05 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: oRHcu/A101/CVW/t4Uxq4dJBcR4mKRacu8odSEPbYkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:7c:03:5e:aa:80:69:6b:5d:8a:e7:c7:e4:c6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Nov 4 06:00:05 2025 GMT
Not After : Nov 5 06:00:05 2025 GMT
Subject: CN=5ba74a774739f9a8f412d7b6e7c392b8c1bccc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:bc:a5:1e:91:63:2d:24:f9:f6:7b:87:65:
5f:a4:0d:99:e0:0c:0b:1c:51:2d:c2:71:65:9e:39:
74:0d:ff:53:5f:74:bd:01:f3:df:96:d2:ec:1c:1f:
6a:2f:5d:c7:d9:19:6c:47:98:17:29:36:e1:fe:40:
3e:72:c9:fb:c6:16:0b:08:2c:ef:44:50:04:39:27:
5f:b5:39:16:e8:97:d5:3b:63:fd:ec:a7:01:1d:b6:
7d:14:c5:18:5e:22:8f:44:a0:38:ec:ac:cd:a9:c5:
93:24:85:37:0e:98:73:4b:f5:5a:0f:8d:5a:03:00:
51:da:0b:48:30:a8:96:30:91:71:4f:b8:92:26:fb:
f7:a4:99:10:e0:6a:82:cb:95:51:68:c5:8f:4a:a0:
02:93:ee:0a:e3:a5:7e:5e:93:6f:88:00:4b:5a:e4:
8a:5b:1f:46:79:3e:38:52:fc:21:63:59:5e:97:1b:
a6:7a:17:a0:8f:3e:71:88:8d:96:7e:f7:71:6e:16:
e5:fe:9d:47:74:e9:9d:09:6e:f8:75:3b:5a:93:5e:
af:b2:fd:f1:b8:d7:48:6c:f6:4b:7b:a1:e6:67:14:
73:c7:63:1e:ae:71:1b:64:0a:c0:da:d4:60:24:fd:
da:1b:0b:40:c0:e7:bc:09:a5:9b:d2:b0:99:6f:2d:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:4A:77:47:39:F9:A8:F4:12:D7:B6:E7:C3:92:B8:C1:BC:CC:5B
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ad:70:01:4f:f7:e6:4a:1b:dc:0c:45:9f:19:17:d2:4c:52:
bd:09:0a:34:0a:17:17:80:8c:86:75:22:8e:65:82:1f:94:8e:
fe:8b:72:19:53:a1:ae:a0:d2:be:c1:32:e5:c3:e8:36:09:92:
c2:66:e4:38:7e:4a:38:dc:4d:c7:30:5a:73:63:39:c4:51:49:
9f:b0:63:2c:52:af:13:6d:9c:a4:39:72:97:f8:b8:07:75:4e:
5d:72:02:5a:15:d1:50:31:9a:64:ef:8c:3e:84:28:57:45:cb:
a3:c3:11:bc:ac:11:8e:d8:5b:0c:05:fc:bf:4d:eb:03:76:b9:
e3:7f:c0:eb:5b:ad:0d:35:5d:5b:cd:96:d7:0a:fa:cc:b8:d2:
38:85:df:e3:91:f5:41:e0:80:24:bb:4f:72:83:47:23:1c:c0:
de:01:9c:b1:d3:50:81:91:b8:6e:31:05:44:d5:02:b3:b7:12:
69:d6:25:28:19:99:2b:09:89:77:c9:64:33:ca:4f:91:62:fc:
98:ad:6a:44:c7:1c:91:ba:9d:62:20:7c:a8:10:fc:7c:74:0f:
e3:3f:f8:63:0c:23:26:0c:c4:af:7a:54:a0:44:35:36:9f:6e:
01:47:bf:48:57:dd:85:9c:b8:d0:89:50:af:d0:af:7e:31:a2:
34:eb:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client