Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json)
Hash identifier: IhNenKTKsbxR5RxQ7BB+cJpqZH8i7Ys3LpT1dPS4F7w=
Subject key identifier: 72:37:09:3E:54:79:44:2E:DD:40:BB:ED:39:A7:12:B2:E0:C6:37:80
Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Certificate serial: 019A507500E3D4A5FDBEBDA41244EB2CE0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
Manifest number: 116F
Signing time: Tue 04 Nov 2025 20:00:36 +0000
Manifest this update: Tue 04 Nov 2025 20:00:36 +0000
Manifest next update: Wed 05 Nov 2025 20:00:36 +0000
Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: 4yiny7BZwCe4kbYgzYh46MLOqCu7YBdgBZwOPBlSFs0=)
2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=)
3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=)
4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:00:e3:d4:a5:fd:be:bd:a4:12:44:eb:2c:e0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1
Validity
Not Before: Nov 4 20:00:36 2025 GMT
Not After : Nov 5 20:00:36 2025 GMT
Subject: CN=7237093e5479442edd40bbed39a712b2e0c63780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:8b:f8:af:59:4c:b8:39:97:62:f5:2a:53:
9f:b3:e3:29:fe:e0:de:25:2a:8b:29:1e:1e:21:eb:
67:16:94:a3:7e:65:5a:60:90:b1:e7:02:1c:e5:bf:
24:08:77:e6:af:a5:a9:d8:7a:53:79:bf:a7:8c:70:
3d:3a:5e:c7:0f:ca:54:9e:0e:62:63:ae:20:ff:18:
b2:5c:23:f3:27:8e:9f:60:34:7e:6b:54:c5:6a:ca:
00:eb:a0:03:03:dd:25:47:8d:d3:6e:47:02:d8:2e:
46:99:36:92:d5:1f:85:2c:70:ba:b5:7b:26:b9:d2:
be:16:57:7e:d0:6b:7f:1f:e2:39:d2:4f:f8:88:8a:
99:8f:eb:f2:7a:66:d3:8f:a4:12:f9:27:db:ce:e4:
e6:69:b3:ef:36:33:ea:ea:c2:73:87:de:19:fa:d1:
d8:e8:0f:82:bb:72:16:a9:be:5a:10:ed:e1:db:6f:
af:66:46:a3:77:c0:8a:33:af:4f:02:76:c2:f8:ef:
5c:d0:96:be:0c:2c:56:20:f7:28:cf:88:1a:a7:4c:
65:e9:87:7e:1b:8d:6d:ca:4e:75:e5:58:1a:29:a8:
3c:da:ae:4c:08:61:ef:9d:d9:a7:31:a9:10:0b:48:
6b:a4:7b:35:35:06:69:fa:fb:4d:e3:0e:2e:49:af:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:37:09:3E:54:79:44:2E:DD:40:BB:ED:39:A7:12:B2:E0:C6:37:80
X509v3 Authority Key Identifier:
keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:84:b1:79:a6:36:41:8d:f4:43:b3:5a:84:ad:93:1b:0f:01:
fe:b6:f3:29:66:39:07:b0:08:03:52:5e:a3:e3:5b:b1:e4:21:
70:77:04:a4:71:eb:0d:24:77:82:4d:15:09:83:5b:08:8d:76:
47:9c:18:b4:49:fa:b5:a1:2c:57:a5:1a:cf:dc:1d:a3:ac:65:
0d:f4:5b:11:0c:49:f6:9a:a1:4e:b0:8c:a5:85:c0:3f:d6:cc:
21:1a:09:2d:eb:1f:0d:83:a7:23:44:90:65:08:b9:08:81:5b:
f3:28:9c:48:d2:7a:6b:02:3e:ad:76:46:0f:e4:66:a7:6b:35:
f3:43:a3:80:fd:eb:b7:20:5a:a0:eb:48:0c:80:27:ea:88:d4:
09:0b:47:5d:84:81:37:7e:cd:50:e2:52:48:48:f3:28:03:66:
e6:2c:68:15:8c:ba:93:83:d4:7e:a8:3d:57:d2:78:61:29:15:
e2:fb:06:5c:51:05:50:6b:e9:d1:35:b7:8d:f4:ae:4c:19:a2:
27:d9:ed:d8:79:53:77:90:b3:22:8b:0c:99:01:bc:6a:84:d4:
8d:99:1f:5c:45:1a:78:b8:76:7e:f9:97:33:42:38:5d:0d:b2:
a8:9d:93:2b:da:83:5d:d5:b9:11:3e:4e:53:1c:84:0b:a9:5f:
bf:7f:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:44 2025 by rpki-client