Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json)
Hash identifier: vHoVxg4xUKLzS3SRGAE1wvjp/MoXQfiJ8d4TS/Y8up4=
Subject key identifier: F7:97:88:A8:BC:C0:0C:95:8E:E9:39:41:B8:D8:F2:D1:02:C5:6E:FA
Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4
Certificate serial: 019A4D7409C7DBD7E7F81945DB211B997C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
Manifest number: 07E0
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=)
2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: ZL2nQgNZlvGC5bdlHnscglBY0Sl7LOkBpQSoexdNgZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:09:c7:db:d7:e7:f8:19:45:db:21:1b:99:7c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=f79788a8bcc00c958ee93941b8d8f2d102c56efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:5f:78:f5:e9:f5:46:09:09:b1:51:a6:c2:
a1:88:15:13:ca:fd:a4:9e:50:e4:28:34:cc:69:32:
cb:c6:4d:c6:6f:96:4a:79:ff:d9:96:3d:d8:77:80:
b8:1b:c8:67:1b:3a:e4:30:04:dd:31:38:db:ca:8c:
0b:ec:16:7e:84:81:f9:c4:65:45:c6:03:28:ce:a7:
34:a7:b3:9d:6f:4b:60:96:8c:f2:e1:08:0b:e3:37:
0c:eb:1a:25:81:f1:21:77:12:3b:9f:a1:e4:1d:9d:
18:1f:7c:05:8d:6e:22:b7:89:9b:75:15:29:cd:62:
5d:82:3b:52:4c:2c:01:86:44:13:a1:7c:a7:aa:52:
c5:40:f6:81:ff:29:09:0c:0f:11:9f:70:59:76:3d:
7c:84:7e:cc:b4:65:93:60:58:3a:35:99:07:c9:ff:
39:59:43:66:a2:4f:96:74:f4:99:9c:58:35:c0:57:
bd:30:69:3d:f5:c6:82:22:cd:5f:6b:25:f1:49:48:
c3:88:3e:2c:ec:b4:74:5c:67:9d:92:16:40:c9:6d:
45:bd:7a:b9:62:47:d4:3d:0f:47:3d:66:93:c2:40:
0a:ad:38:4b:71:21:86:32:a1:21:12:f0:60:aa:50:
c9:fb:1f:02:ec:00:34:50:c1:e7:7a:38:e0:4a:00:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:97:88:A8:BC:C0:0C:95:8E:E9:39:41:B8:D8:F2:D1:02:C5:6E:FA
X509v3 Authority Key Identifier:
keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c8:f6:91:21:da:e4:26:68:c9:c5:e1:ac:58:a2:dc:31:34:
37:2a:45:12:42:c8:0a:28:ce:bc:f0:d0:4e:4b:ee:5b:04:66:
a6:ba:b5:06:a4:f7:e0:df:98:eb:e1:c0:a2:6f:28:d6:a5:8f:
4e:34:ae:18:71:7b:26:84:66:79:92:ed:bf:51:cb:1c:f1:5c:
83:f8:1e:9f:51:d1:d2:61:56:ca:56:2a:8a:f6:e6:59:83:2c:
cd:7a:25:d3:80:ea:11:b4:b2:f4:a0:02:72:c8:51:9b:2e:8a:
fa:42:ee:68:1e:45:d7:3d:4b:ea:86:3b:fd:11:07:b8:a5:54:
60:85:46:cb:58:3b:6d:a4:c1:07:0a:ee:35:df:dc:fe:39:fc:
04:aa:a5:28:aa:86:2f:54:92:4f:49:75:46:26:15:ba:2d:ae:
63:4a:fc:18:23:d3:42:57:33:bb:f0:90:47:ce:02:1a:b3:5f:
ec:8e:ca:d7:d5:e6:31:1c:05:4e:ac:f6:8d:2b:07:f4:8f:d5:
14:f8:cb:2a:2e:d4:00:70:7e:05:09:4b:2f:8b:b4:c8:d6:69:
e1:cb:05:d2:84:39:32:64:e6:a8:8e:71:cb:8f:e0:51:a7:34:
40:35:e5:ee:c3:2e:11:87:74:de:16:b2:82:a8:21:5d:e5:c6:
20:10:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:54 2025 by rpki-client