Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: 5DXw3L8iCxYGbTLpGOFD+TbNXZc5SgN8M3HPFUkxAcw=
Subject key identifier: A6:A4:74:FF:BB:C9:09:54:D7:30:42:31:58:BD:99:84:FB:C9:EF:B4
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 019A4E4F9AFB6B8EDED6E69CE2ABB2029474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 1242
Signing time: Tue 04 Nov 2025 10:00:31 +0000
Manifest this update: Tue 04 Nov 2025 10:00:31 +0000
Manifest next update: Wed 05 Nov 2025 10:00:31 +0000
Files and hashes: 1: EOCWiGvbLbC8SrTdZuW8112GldA.roa (hash: 6TEyJTlSHuy3i9dMVFX2h1KeLM589ScTuB8gZ6GHeEg=)
2: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: 6AmvXtQOldQrc9ILknWLVo1vt08501nLeXvIF7Pz0mw=)
3: ZSASssxXWzh67IcbvQuSjMbjXlE.roa (hash: 8NFvVB0e1Ed6PcQb0KzEDJBB77MUqbc2YSQy8ySf1Y4=)
4: iefIsjicRY6rMPB46yzGeoYmfDY.roa (hash: wYK+cODxbPgs0PQn468rpCusa1e+6M4kLS/qnuHcsvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:9a:fb:6b:8e:de:d6:e6:9c:e2:ab:b2:02:94:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Nov 4 10:00:31 2025 GMT
Not After : Nov 5 10:00:31 2025 GMT
Subject: CN=a6a474ffbbc90954d730423158bd9984fbc9efb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:3b:90:b0:37:84:94:7e:74:58:0c:f3:2f:
fd:f0:77:fa:8c:0b:59:51:57:bb:f3:bb:d9:6c:c4:
54:12:8e:7b:0f:b0:6d:9f:d3:64:97:d1:b2:fb:be:
4e:0c:c6:bf:8f:81:45:73:91:43:3f:c5:08:34:fb:
3b:78:fd:0f:c5:c0:82:e0:3e:b8:9c:24:9d:35:0e:
f3:1b:38:e1:09:7b:11:95:58:b4:a0:0e:f3:45:52:
10:94:e5:f7:9a:a4:60:ca:69:fd:3a:3c:bb:d1:f9:
68:7a:5c:81:ea:5e:de:fb:78:fa:cb:d4:96:e7:e7:
aa:a0:10:51:ae:f0:dc:08:56:6f:6b:c8:e2:72:79:
9b:66:39:af:2d:98:0e:ba:eb:f6:26:70:67:b6:51:
02:5a:11:09:f9:fe:c6:c3:a7:a0:56:96:74:c1:24:
09:a4:e0:78:78:75:e3:de:10:0a:a5:52:8d:36:b4:
b9:5f:8b:14:04:0c:6d:ce:1d:22:e2:d7:c7:59:04:
1a:c6:32:1d:fb:bb:95:c2:8d:e2:ce:2f:0c:51:41:
3c:cf:40:a9:28:64:e9:42:64:ad:1b:c2:58:69:a0:
d3:a7:78:fa:c6:eb:66:6a:ea:1c:85:1e:95:82:82:
89:52:55:84:d6:55:ab:97:cf:73:7b:2c:bc:ee:ae:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:74:FF:BB:C9:09:54:D7:30:42:31:58:BD:99:84:FB:C9:EF:B4
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:86:8d:a2:f8:fc:1e:f1:81:6f:d1:9d:6a:3c:82:ac:c2:cc:
9c:1a:30:9c:53:da:c0:3d:4e:8c:55:51:00:f8:6d:08:e4:74:
44:94:66:ac:5b:d3:c2:98:ad:c2:ea:47:97:0c:77:f4:cd:ff:
c7:73:02:dd:fd:c2:02:9f:0c:3a:00:95:43:06:85:40:3e:07:
69:b0:84:24:11:ea:8a:a4:89:a4:39:af:aa:d6:c0:1e:70:1b:
5e:c6:d4:91:5b:b2:ca:e4:d4:a8:ca:43:97:c8:54:b0:33:4d:
01:51:fc:af:af:64:c3:6f:9c:47:ba:33:fc:65:1c:9d:30:9e:
20:3d:0f:2a:84:15:84:81:2b:e3:8f:c9:02:5c:51:37:9c:eb:
6e:0e:32:f2:f6:21:47:4a:86:1b:67:74:39:3c:06:30:57:5f:
50:33:8f:77:7d:ad:f4:bb:a0:9c:e1:43:23:ff:82:7e:aa:76:
df:7b:73:cf:e3:42:e4:18:d1:b9:78:4c:20:9b:f8:d3:ee:99:
dd:ee:6a:90:74:9d:68:96:d3:7b:8c:30:9a:0c:d8:29:a3:1b:
f5:8b:a0:95:3e:80:73:39:67:09:86:dd:6c:4f:e7:0c:43:27:
62:70:9f:10:66:05:59:36:74:09:ec:1c:e6:2c:f1:97:04:15:
96:c7:d9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:22 2025 by rpki-client