Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
File: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft (raw, json)
Hash identifier: mnmO/SQSHqCZQPxgHKMm1XjBzSe9suq/mi4cY2pHSXk=
Subject key identifier: 0C:64:35:A9:66:F3:73:A2:B3:C6:DD:4A:6E:85:E8:74:AD:49:91:9D
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Certificate issuer: /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial: 019A4EF44C67A75BA76226F0B2ECA55B5601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
Manifest number: 06CB
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: MjurembtvVeEftl3x1ofb2bHb8o.roa (hash: LMEfB1EahjyEN1vkkgX4Rq92rZ+ObZyJ1Ue8yFCn1Pk=)
2: Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl (hash: 7UF0hReGySsbYL99+YitdDOZMoe1YXnx83j5ZM3ShDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4c:67:a7:5b:a7:62:26:f0:b2:ec:a5:5b:56:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=0c6435a966f373a2b3c6dd4a6e85e874ad49919d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:b4:72:da:61:de:2f:be:44:80:93:06:2c:
ac:1d:29:10:3d:09:be:ad:83:18:8e:33:61:dc:80:
51:a4:9e:30:42:eb:27:ae:09:be:fe:bb:90:a6:3e:
6e:7a:9c:2a:f8:0d:e3:b8:62:a5:02:96:37:1e:56:
dc:c2:a5:53:31:33:24:98:00:8b:f4:96:cd:4b:4c:
85:1c:ae:09:70:83:51:63:80:a1:9e:e2:50:1e:fd:
fa:c5:4b:bc:84:c2:0c:0a:82:e3:a1:ce:4f:91:81:
1f:98:20:9f:b4:9f:17:f9:c1:da:eb:14:3a:ac:7e:
c7:c8:bc:f5:48:ae:67:c9:1e:34:59:99:a7:16:cc:
ee:07:9a:fe:70:56:84:22:a0:20:fa:e3:c5:13:17:
ae:cf:de:70:3c:cb:a9:1f:f2:c1:9f:f8:2c:13:8f:
82:bb:73:cd:8c:cf:80:3c:b9:d9:28:80:97:a5:c4:
58:b6:c3:34:92:49:c0:98:64:a4:8b:b6:a1:ab:a0:
a3:29:46:7c:21:00:f3:06:ac:f6:08:cb:84:4c:a7:
9e:ea:41:6d:43:35:47:45:df:6f:6a:42:2f:2a:8f:
15:41:bd:cb:bd:cc:7d:b3:1c:5b:7f:3e:0e:02:b9:
11:e3:9c:d5:be:3d:9c:b3:9d:77:9a:ba:f3:01:e7:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:64:35:A9:66:F3:73:A2:B3:C6:DD:4A:6E:85:E8:74:AD:49:91:9D
X509v3 Authority Key Identifier:
keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:00:72:e1:9a:0b:39:79:eb:a3:fa:16:80:28:7e:ea:ff:
22:c4:9c:be:52:a3:89:8c:43:42:7e:3e:e9:0e:40:8a:8b:0e:
98:70:b3:c6:f6:0e:d9:d2:4d:f1:2b:00:23:58:2a:a0:fe:0f:
aa:5c:9d:b3:01:0a:5d:9a:9d:16:5c:b9:3e:5f:fa:a2:f8:d5:
62:8e:51:89:a5:ac:fe:ef:bf:2c:89:bd:2e:c9:d7:51:ca:8e:
c2:61:21:f1:d7:b8:a3:fa:dc:45:57:dc:69:7c:71:20:9c:ac:
ca:26:fb:bb:7f:c4:ce:ec:44:ae:fa:18:8b:cc:be:2f:68:04:
af:fb:dc:10:29:8f:3b:47:a7:9c:ce:54:df:d8:d7:21:f1:83:
b0:ca:68:91:da:82:c5:96:7c:a6:3e:ae:be:b3:f6:7a:f0:36:
79:63:a0:b9:6b:df:a2:00:7f:c1:70:f1:8e:51:25:1f:73:f3:
07:d4:d6:57:9a:38:bc:2f:90:34:83:5a:a6:21:78:0e:6e:8b:
a7:1f:b2:55:71:f8:01:71:1b:94:08:86:c9:88:99:83:73:da:
bc:6a:3e:05:2f:18:9c:76:a5:52:89:b4:1b:98:c0:67:2a:d5:
15:13:df:a9:92:37:b1:26:46:aa:63:10:83:d3:f7:89:e9:0b:
b7:93:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:49 2025 by rpki-client