Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: 3/+e4gDAXs1PnC8+bZECmpnkVz/g/H8X1DTgC1D4QV8=
Subject key identifier: 90:7B:3A:C9:6E:2F:A2:73:B0:BD:07:42:6E:CF:8A:13:05:65:1A:D3
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 019A4D7381D6C786FDA31B33B44F69EC356E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0625
Signing time: Tue 04 Nov 2025 06:00:06 +0000
Manifest this update: Tue 04 Nov 2025 06:00:06 +0000
Manifest next update: Wed 05 Nov 2025 06:00:06 +0000
Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: 01vIMtu0bq2fugvQfSgEytUvLH5yb0Osgl0ki/4+3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:81:d6:c7:86:fd:a3:1b:33:b4:4f:69:ec:35:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Nov 4 06:00:06 2025 GMT
Not After : Nov 5 06:00:06 2025 GMT
Subject: CN=907b3ac96e2fa273b0bd07426ecf8a1305651ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:15:78:51:2c:6a:89:70:fa:5c:75:9b:2b:
c5:a2:b0:89:d7:7d:83:61:aa:71:c6:e5:fe:40:a9:
81:73:32:a2:f8:23:18:9c:1a:cd:bd:8c:09:e1:3c:
67:a6:ef:ee:8e:ad:3e:15:f1:82:bc:35:4d:8b:4c:
cf:4e:2b:04:e4:d5:7b:51:22:f2:46:4e:02:1b:ee:
a9:ec:d4:6f:1a:1d:9f:82:ae:55:1f:82:6a:a3:89:
69:68:07:d5:8e:c8:09:f9:ee:ae:7f:61:1f:9e:f7:
f6:19:a0:f3:8a:dd:46:d0:5a:bb:30:23:21:13:04:
03:ce:19:d5:9a:ca:7b:eb:06:c2:a6:96:68:c5:d6:
46:54:b7:df:7d:bf:44:32:5f:8a:59:5a:65:15:60:
f0:b1:b6:81:c6:5f:03:cc:85:24:a1:97:f6:f2:d5:
f8:c8:3b:2e:97:0a:6f:80:ba:b0:ee:eb:a1:23:4c:
f2:b5:d2:1a:fd:29:c5:44:99:fc:19:2d:04:08:6f:
67:3f:fc:c6:56:80:4c:6b:03:91:57:6a:13:1b:59:
3e:26:b4:31:b8:70:43:40:23:0c:3c:99:1e:a6:c3:
98:c7:00:08:e1:af:45:3d:f4:10:05:2b:2b:5b:4d:
b2:80:d7:2c:00:21:b7:5b:2a:5d:85:9e:96:c8:4d:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:3A:C9:6E:2F:A2:73:B0:BD:07:42:6E:CF:8A:13:05:65:1A:D3
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:11:08:7d:5e:54:2a:be:86:dc:48:68:74:cc:41:94:48:f3:
55:36:d2:9c:56:02:0b:8a:42:d5:2b:ac:b9:5a:ef:a8:98:7a:
ac:02:de:71:53:7c:00:e7:1c:31:74:39:2e:97:73:71:51:3e:
f5:6b:65:c7:60:71:64:2f:a2:7a:36:82:9b:ec:fc:a3:9d:8d:
e2:d1:68:7a:ab:e4:f3:2c:14:f8:f7:b8:a8:e3:61:76:c7:d9:
41:67:99:5b:bc:b8:a8:19:ce:66:db:c8:e2:a0:dc:2d:bf:94:
b4:fe:59:dd:6a:f3:16:49:ff:d5:b4:c7:c6:a0:0d:ef:82:37:
62:b9:de:71:cf:ed:f8:32:6c:86:ca:35:71:74:69:83:4a:23:
dc:f0:a1:d6:28:02:61:fc:12:b7:c9:41:fe:48:d0:45:b1:00:
6e:62:9b:01:28:d9:28:dd:fb:67:79:d0:86:57:25:4d:aa:66:
02:8e:13:ad:13:47:79:6f:29:d9:71:3d:26:57:1c:46:4d:f5:
c2:98:37:83:77:63:6c:ae:fc:f2:4e:7a:15:55:36:c5:47:67:
a7:b8:4a:6b:bd:06:25:ee:44:e2:fe:ba:c1:c9:db:86:8c:56:
d2:3a:fd:2f:0d:fa:f0:86:d8:5a:de:86:bf:61:f1:ca:63:b1:
6d:16:ec:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:11 2025 by rpki-client