Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: NbyR5EnhjIE5zi3fUptKN20sGSSWthY7jPQBsI+UiWk=
Subject key identifier: 91:9D:22:0A:08:6A:D0:5D:91:01:FB:B2:67:63:C2:38:7A:99:7B:BA
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 019A5119AE9FFEF9D14F2F1456520FC92326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 1420
Signing time: Tue 04 Nov 2025 23:00:28 +0000
Manifest this update: Tue 04 Nov 2025 23:00:28 +0000
Manifest next update: Wed 05 Nov 2025 23:00:28 +0000
Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: kUBbucBafoOjGoAer0xA0Op+cmPqrgmiVk2O7PfPvwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:ae:9f:fe:f9:d1:4f:2f:14:56:52:0f:c9:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Nov 4 23:00:28 2025 GMT
Not After : Nov 5 23:00:28 2025 GMT
Subject: CN=919d220a086ad05d9101fbb26763c2387a997bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:89:ce:26:c8:10:7a:ed:5b:32:ac:e2:ba:
95:5d:93:de:6f:81:29:dc:bc:e1:26:a5:2f:52:dc:
25:bd:06:16:41:52:5b:80:d8:bb:c3:96:89:13:d4:
ec:85:be:5f:60:3f:5b:13:fc:c4:40:ac:fd:ff:8d:
98:e3:2d:67:7c:f7:fd:d2:5e:11:a6:df:bd:2b:52:
48:62:d1:29:69:ef:65:38:8c:6d:c1:22:14:1f:86:
ad:51:4f:ca:5f:5e:03:ce:28:4c:81:6a:96:15:3c:
67:d3:ee:aa:09:06:d4:78:ff:76:34:51:35:70:7e:
38:19:7f:e8:35:20:d7:7c:3a:a4:1d:a3:18:e0:c0:
c3:78:7f:c3:1a:2b:2a:42:09:40:72:a3:71:9d:80:
43:ea:fc:c6:16:65:8c:fb:d3:61:8d:42:d1:80:d6:
3a:93:fb:10:57:e7:25:3c:39:aa:04:f2:74:f6:8d:
96:ad:31:79:08:76:f9:b2:ad:47:2e:15:5b:6a:a3:
4b:75:e5:53:76:7e:62:db:78:85:36:78:df:3a:05:
66:76:c1:f8:ec:7b:96:75:18:98:d7:e1:be:29:c0:
29:44:09:fa:eb:73:f2:f3:2d:2c:aa:8d:61:0e:6f:
6c:e4:fb:d3:f3:c0:0d:9c:3f:8d:ee:6f:0b:03:37:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9D:22:0A:08:6A:D0:5D:91:01:FB:B2:67:63:C2:38:7A:99:7B:BA
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:22:73:81:61:90:96:40:94:72:89:3b:3d:6a:fe:b2:bf:40:
08:f9:63:e0:29:27:e8:c9:59:1c:20:7e:f4:fe:74:e7:4b:ac:
63:f3:23:71:47:82:7c:41:ad:e2:72:70:3d:31:89:de:db:8f:
fd:62:82:a1:4c:7b:83:73:98:9f:6e:5d:5c:40:cd:e8:29:c5:
12:db:85:4a:f9:8c:3f:9a:ca:4c:94:1b:81:79:84:89:9b:50:
17:47:16:88:87:cb:13:4c:ec:40:81:09:31:87:93:e3:da:23:
98:b7:f6:04:fe:fc:7a:c8:3d:d6:d5:61:7f:14:83:92:e9:83:
b9:aa:dc:a0:4e:7b:71:4e:74:25:c4:1d:49:2a:fa:b4:dd:19:
e3:4a:1e:88:d8:7e:ab:9d:7f:63:27:08:76:24:1d:ed:77:e6:
8a:56:3d:ac:74:cc:75:aa:0c:cb:53:fc:6e:7d:01:d7:7f:0a:
0b:7c:9a:b7:2e:36:e7:3b:e6:77:d7:51:99:46:8d:82:a3:8b:
86:52:ae:c9:39:3b:19:9b:a4:7a:31:fa:aa:4e:0a:ce:ec:cb:
de:01:b0:12:8f:02:64:ff:41:c6:de:b1:c3:58:fe:1b:87:52:
24:29:60:d4:37:95:8c:4d:fa:0b:72:a2:d1:9c:1d:29:fd:96:
52:4a:0f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:46 2025 by rpki-client