Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: rGBqVaaXZd73PVOLwpwt6UtmFaZrOiE4egc6pt+tshE=
Subject key identifier: 8F:EB:6C:56:7B:72:A8:88:28:59:46:67:47:A3:A1:DF:A1:F4:47:68
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 019A50E3227F9E1CFE8FA8EB27AC5D23E0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:54 +0000
Manifest this update: Tue 04 Nov 2025 22:00:54 +0000
Manifest next update: Wed 05 Nov 2025 22:00:54 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: PF9enXcvzQOAhToICU4fJpeIoA1lsPcFmyvQOsrKYC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:22:7f:9e:1c:fe:8f:a8:eb:27:ac:5d:23:e0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Nov 4 22:00:54 2025 GMT
Not After : Nov 5 22:00:54 2025 GMT
Subject: CN=8feb6c567b72a8882859466747a3a1dfa1f44768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:89:23:7d:c4:38:aa:81:21:99:5f:2d:97:
83:ff:00:6e:9c:b6:12:be:f1:47:04:80:fc:41:fc:
8a:db:92:3b:26:8c:27:ed:70:b3:cc:cd:ea:f7:cf:
64:3f:b1:46:7a:cb:fd:57:49:de:ad:b0:58:dc:d9:
7e:96:44:32:7c:b2:4c:48:0f:ba:73:e5:87:03:ce:
af:ce:6d:06:18:c6:35:ac:2a:6b:a4:39:f7:fa:1b:
ea:0f:28:6b:ab:a8:59:44:de:fc:31:35:d9:83:16:
2e:25:95:0f:dc:e8:80:40:0f:e4:4d:db:b1:1b:db:
54:84:83:f0:a9:3a:0e:89:9a:e8:e7:5f:06:5a:48:
9f:a1:5c:e0:b2:cf:e7:a7:6a:bd:af:cc:c5:60:1d:
37:ca:1f:9e:c4:9c:da:fc:16:20:31:a3:18:64:33:
97:1d:e2:4b:c5:0e:71:54:fe:9e:2a:47:cc:a9:75:
7a:e1:8b:f2:96:db:17:21:75:40:27:ec:59:d8:9a:
83:cc:e5:23:e5:30:09:3a:96:02:3b:fd:ee:db:13:
e9:17:3e:96:cc:56:ed:d7:71:96:86:ce:6a:76:3d:
12:60:ec:dd:2b:cd:6e:2d:e8:b6:2c:14:c2:4a:df:
33:f8:55:3d:61:8f:2f:0f:62:18:f8:5a:c7:25:5a:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:6C:56:7B:72:A8:88:28:59:46:67:47:A3:A1:DF:A1:F4:47:68
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c4:c5:90:f9:e6:fb:88:4b:f9:b9:2e:83:94:b8:ea:27:f2:
d6:31:8d:6c:9c:72:d6:f6:4a:bb:7e:f1:27:c0:c2:9b:da:ca:
19:66:4d:25:dd:c0:df:ce:5b:94:70:b8:32:9f:c0:9b:52:f0:
f9:9e:5b:0a:86:35:5c:d7:bb:55:0e:5b:58:67:47:b0:39:2a:
be:c2:f3:a7:f1:01:e3:e8:99:4d:6d:6c:43:82:db:0f:9e:40:
2b:af:34:8a:7e:32:8b:39:c1:82:b1:fe:97:13:fa:40:6d:39:
ba:3a:45:0e:8e:4c:16:1a:15:ed:40:51:f0:dc:90:6b:76:d4:
01:c7:a6:31:97:3a:2e:54:c1:eb:3e:5e:51:30:40:49:dd:37:
1f:9c:bc:27:45:a3:93:04:b7:b1:5c:e7:d9:e4:a0:bc:41:70:
f6:c7:27:36:46:8d:62:df:53:dd:0a:02:40:ea:7a:1c:4d:54:
ea:9a:62:9f:ee:9c:a9:1a:23:b8:93:79:26:13:dd:8a:25:0b:
e0:b9:d6:d7:f8:8d:87:1b:e6:f5:61:20:db:e0:a2:66:eb:25:
bb:91:76:cb:98:1e:9f:3b:c5:cb:1d:96:1e:9e:8a:7a:65:73:
a6:cf:73:59:4d:24:7b:21:24:d0:32:07:dc:c8:03:37:5a:eb:
76:0b:2b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:04:32 2025 by rpki-client