Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json)
Hash identifier: CH+ff/wNU7i5B3gHTY9cWiryPnWNBZgi8/28sTjc3NY=
Subject key identifier: 11:90:17:63:E3:97:22:8D:48:64:0D:48:EF:8E:17:80:89:DD:0B:85
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial: 019A4DE183CFCDF4E5CC0723FEEF60067A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
Manifest number: 0678
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=)
2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: t3ctPQUgLCDY304DlEKMbvKFDXBa2dWKyeBSUp9Oo1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:83:cf:cd:f4:e5:cc:07:23:fe:ef:60:06:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=11901763e397228d48640d48ef8e178089dd0b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:5d:a7:ad:16:a0:8d:d9:4c:03:bd:42:71:
85:11:4f:cf:91:12:78:31:9c:f9:71:1c:f8:69:dd:
c2:f5:d3:89:4e:e3:10:3b:71:a3:f0:e4:d3:e3:95:
f8:9a:6e:c4:a2:ab:1f:a3:69:d2:66:99:30:5b:e9:
e6:46:e4:ef:6e:77:a5:eb:90:9f:88:eb:cb:6b:e2:
85:6c:11:3c:09:8c:7c:f7:33:5b:7b:df:16:81:2d:
3f:89:32:b7:01:88:12:2c:ad:aa:cd:c8:a6:b7:2f:
ab:bd:93:c0:97:28:75:2b:61:4e:d4:e5:3f:6d:74:
80:15:3e:18:61:a8:35:25:b8:9e:2a:1d:e9:43:1d:
62:b0:59:ca:85:e4:80:4e:06:64:47:61:05:a4:37:
6c:b6:d3:21:5d:23:7c:e7:74:9b:95:36:7a:b2:0e:
22:96:c6:d5:70:96:68:4d:14:07:ef:7a:4a:34:16:
0d:c0:01:16:08:a5:67:9f:03:93:a0:d8:02:70:b6:
e4:72:37:6c:63:71:f8:f2:aa:82:10:51:c4:1d:d9:
52:b1:86:0f:92:44:d5:b1:f5:12:59:b7:99:39:58:
48:0e:0e:7e:d6:55:07:df:44:48:38:f4:33:c2:71:
14:5e:fc:51:9d:35:7a:28:80:d0:9a:e5:1f:60:c4:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:17:63:E3:97:22:8D:48:64:0D:48:EF:8E:17:80:89:DD:0B:85
X509v3 Authority Key Identifier:
keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d3:7f:6b:e9:5d:b1:ed:ab:2b:3b:b9:db:f3:2a:4a:97:74:
e2:d2:9f:30:79:ef:05:03:59:78:86:10:ab:67:db:ea:b6:c5:
a4:02:83:29:08:ed:8c:22:8d:07:97:49:01:1f:53:11:c4:0f:
66:5c:75:ab:fe:35:8f:b9:9c:52:b3:72:bb:78:29:02:56:f3:
89:50:4e:34:96:dd:d9:65:1e:b2:36:73:48:33:5b:04:2c:43:
77:10:8b:7f:d9:7f:8f:06:cc:c7:23:16:dc:90:bd:50:6b:9a:
66:4e:93:a1:2b:44:56:21:66:06:57:75:f1:9e:e6:f4:07:2e:
90:02:39:f0:69:f4:1b:3e:ea:89:40:d3:c0:e8:db:a3:43:fc:
98:30:27:bb:82:8a:5f:70:f0:9f:07:3b:40:c2:db:c8:1b:4d:
4f:96:b8:6a:10:65:7b:82:68:12:3d:1e:62:f8:17:ce:de:77:
31:95:5e:17:af:e2:65:0d:9b:06:90:17:e0:d4:87:b5:fb:f7:
d8:26:b1:ee:2d:93:d1:1a:40:ac:f3:5e:ea:e7:bf:8c:61:39:
9f:33:eb:e5:ec:c9:94:f6:07:d9:39:53:ae:21:f2:6a:96:71:
74:ef:24:bf:69:2d:ec:de:83:65:3b:ea:04:fb:c7:10:11:6f:
1c:21:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:43 2025 by rpki-client