Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: mSWgd6tJ0sgTjqw3XLW0fgiU0GQybi7Od5ITZRGAAt4=
Subject key identifier: A8:24:BF:DE:A5:40:C9:C2:64:35:BF:44:04:1C:BA:C0:1A:8F:D0:BA
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019A4F62C35656931452FF23410D7B07DA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 0579
Signing time: Tue 04 Nov 2025 15:01:03 +0000
Manifest this update: Tue 04 Nov 2025 15:01:03 +0000
Manifest next update: Wed 05 Nov 2025 15:01:03 +0000
Files and hashes: 1: 59Mn6Fq_ztW3ZpObO3_epXiDhpk.roa (hash: cp+rR6j5Vo4FlHwAzBmhQ3KTx+zcyZnQHkQLzqefDBI=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: QEYPenDXWxO6WPtTtB0RlTjBua3u5eIXQFGbYE86uDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c3:56:56:93:14:52:ff:23:41:0d:7b:07:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Nov 4 15:01:03 2025 GMT
Not After : Nov 5 15:01:03 2025 GMT
Subject: CN=a824bfdea540c9c26435bf44041cbac01a8fd0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:a6:d6:2f:6e:23:fc:f5:0f:bf:7a:ff:35:
11:96:68:73:70:37:c5:38:02:9f:d3:eb:07:5d:96:
88:e2:6d:b2:2b:a4:a0:98:32:1f:03:a9:0a:24:5e:
39:ac:ec:33:e0:05:57:a1:c1:85:a4:7d:7a:42:c9:
29:6d:76:5d:4c:f8:c4:0d:58:8d:f0:d1:bc:66:8c:
29:0c:28:3b:7d:df:7e:92:d2:b5:84:6f:89:2d:c5:
2d:de:ba:f1:e4:46:6e:3c:44:f7:0c:9f:29:0b:f3:
ea:45:72:b4:ca:c1:4a:10:90:bf:ac:e9:e0:7f:5c:
9b:b8:61:c9:60:4b:3c:2f:ef:fb:49:b8:b3:d6:27:
07:61:8a:f7:09:03:16:f9:62:96:fd:e3:84:58:b2:
d8:9b:e8:71:b4:83:60:28:e1:44:57:fa:4e:d4:28:
52:7b:f1:2e:5b:2c:50:49:da:64:96:59:2f:d1:17:
3b:b9:0a:5e:95:ad:ba:4e:59:5e:30:d5:1c:e0:b5:
ec:b9:6f:41:32:21:9a:67:a0:fe:19:87:e7:fb:2b:
87:61:db:ae:9f:63:35:1e:8d:ba:44:34:d8:ee:63:
ce:74:82:e2:40:c5:0f:81:9f:9b:c7:f7:9a:d1:d1:
a0:07:e8:7b:35:88:a2:a9:28:b3:7b:ee:46:a2:b4:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:24:BF:DE:A5:40:C9:C2:64:35:BF:44:04:1C:BA:C0:1A:8F:D0:BA
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:25:cb:53:ab:36:33:af:7f:98:21:2f:e7:87:d0:59:24:c3:
3a:43:36:dc:d7:82:e9:6b:bb:d1:a2:69:d4:88:0d:7b:fa:ea:
12:9c:1a:1c:dc:66:97:da:c5:4d:56:eb:04:ad:78:b4:eb:de:
f4:c7:a7:a2:33:2e:16:b3:49:b7:09:60:f9:93:3c:e8:8c:0e:
4a:ad:4f:c4:9c:9f:31:68:70:c2:48:70:70:40:85:04:e4:19:
88:18:dd:1d:53:5c:b3:64:3c:82:b0:af:ca:49:35:70:ba:0b:
ea:a0:79:0c:bf:09:99:22:98:89:c2:d1:88:da:9e:66:aa:9a:
4d:84:b2:db:cf:11:90:7a:5f:e3:f2:f6:78:6f:a5:72:6e:ad:
53:fe:db:2c:15:d3:50:aa:61:7e:2d:d2:ae:51:b6:46:73:d1:
a8:6f:62:4d:9c:bf:ac:b4:54:d6:f3:df:9a:20:43:76:de:97:
37:c6:f4:88:b9:42:cb:7f:37:ef:a3:d3:8c:12:c2:89:ae:80:
13:2b:90:1e:fd:70:ce:e2:01:14:29:c3:27:54:47:e4:72:1d:
5a:c3:f9:4e:ed:2c:ca:99:7d:1a:95:7e:0d:85:26:bc:34:4b:
58:e9:ca:97:be:df:3a:bb:2f:4f:2e:c7:67:90:4f:27:60:eb:
5e:02:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:48:42 2025 by rpki-client