Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: dscPQlL1KCiYkQPMVmpbTeISKwbqe0YHG7UjIfS9meg=
Subject key identifier: AC:D1:90:1E:DF:A9:2B:A7:6E:81:49:D6:BA:5A:A2:84:02:33:4C:D9
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019A4D05BCCD758C2F40DE34B2892C3C5EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 04:00:12 +0000
Manifest this update: Tue 04 Nov 2025 04:00:12 +0000
Manifest next update: Wed 05 Nov 2025 04:00:12 +0000
Files and hashes: 1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=)
2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: 3mfudPmzo+4lwDdC1hPlIgUZ1NX43jtcVbnWJRC/TLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:bc:cd:75:8c:2f:40:de:34:b2:89:2c:3c:5e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Nov 4 04:00:12 2025 GMT
Not After : Nov 5 04:00:12 2025 GMT
Subject: CN=acd1901edfa92ba76e8149d6ba5aa28402334cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:67:78:65:cf:26:c5:9c:be:c5:ae:85:16:92:
be:04:54:cf:78:31:1c:3b:d8:e5:59:31:3a:a4:5b:
75:d7:16:fc:7a:cf:b9:ef:a0:25:53:81:67:94:16:
c8:65:44:4c:a7:c7:31:6c:2a:3f:e4:b3:25:5e:b0:
86:0f:2e:55:7e:e9:1d:01:a1:ee:29:82:c4:56:3b:
ad:36:3e:87:8e:14:30:74:d8:70:e0:0d:be:64:52:
d6:a9:48:dc:09:33:37:d7:6b:13:15:17:05:64:7b:
06:e2:18:0a:72:3e:f5:d1:9e:e3:1d:ed:e1:93:be:
03:81:35:77:b5:e0:b0:d0:66:c5:12:eb:c9:7a:d8:
28:ee:ee:2f:b5:2e:53:4f:d6:4f:1d:ad:1b:0f:88:
28:ae:07:d7:ed:7b:52:21:99:5d:98:ff:5b:87:44:
a3:88:68:a1:bf:40:3d:36:2d:5f:c3:37:3c:83:50:
ee:ab:90:8b:74:2f:b2:83:ef:bf:c6:94:29:fc:19:
87:dc:73:50:ee:a9:3b:1e:4a:70:64:5d:f4:88:4e:
82:c2:33:ab:d5:53:13:23:fd:7d:24:6f:21:f6:f6:
92:0b:a8:ba:6b:69:c8:fa:91:32:fb:d5:ef:05:40:
1c:7c:17:37:63:2e:89:44:8c:14:5d:33:5c:20:ba:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D1:90:1E:DF:A9:2B:A7:6E:81:49:D6:BA:5A:A2:84:02:33:4C:D9
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:73:8c:d2:8f:f3:fe:bf:c9:9b:2b:3d:5d:93:4c:d8:c3:fa:
f9:b6:8f:46:e3:90:60:fd:a4:86:4a:ef:5b:c3:9f:50:1a:8b:
cd:61:fe:6f:78:f8:c1:24:90:bd:25:8d:30:4b:cd:85:d8:7e:
86:f8:40:c1:87:84:d1:fa:eb:57:3b:81:59:fe:2a:98:f1:cd:
7b:88:a7:c7:c0:d6:de:54:fc:af:ac:c2:c7:f9:cb:64:af:3c:
3a:81:77:cd:e7:26:0f:03:d1:f2:f3:a5:8e:42:a6:b3:a9:0b:
bf:a0:bf:fc:66:63:90:f4:c4:21:8a:17:c6:fd:36:87:8b:8b:
0b:c2:b6:a8:9f:02:5c:d4:02:2c:63:52:ff:ab:86:ca:1a:fd:
6b:7a:01:bd:5a:f7:36:b7:45:b7:d1:50:85:a5:06:aa:02:1e:
65:11:9d:6d:23:be:d4:d4:f1:89:36:24:cf:89:4f:1c:5b:15:
ac:b4:7a:f3:5b:4e:c9:4e:e4:91:e8:93:76:14:0c:f6:3b:bd:
b7:73:33:8e:f0:45:03:64:50:41:9a:a9:70:b0:23:68:dd:a9:
f9:be:13:0c:70:b6:1c:a0:23:ef:df:a5:7e:a5:11:98:bf:5e:
0f:02:40:d6:76:b5:76:ed:de:c9:e2:ba:75:81:97:22:42:ff:
f2:af:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:02:43 2025 by rpki-client