Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
File: RXqhx49syrxHtVEho1_zDZmCfuk.mft (raw, json)
Hash identifier: ivQHSsxExx1aphsIedP5eiygfS28o/7TmwGw1wO49to=
Subject key identifier: 37:98:D5:9F:28:AC:43:87:48:8E:99:95:E7:6B:F4:03:C1:59:3C:AA
Authority key identifier: 45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
Certificate issuer: /CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Certificate serial: 019A4F994C7DE36775171C18F59DBDC3D8FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
Manifest number: 09DC
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: IoWApYhOxVomHgy4Fx2-jrx61Zo.roa (hash: 2uCskjnfoZqh1VsnqhjGmG830eQNnYhl1PL8LlzJ7CQ=)
2: RXqhx49syrxHtVEho1_zDZmCfuk.crl (hash: fJQ+arluwfUqxyR67PWf/yDhZ/lnFMQQtW5vCRhHCWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4c:7d:e3:67:75:17:1c:18:f5:9d:bd:c3:d8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=457aa1c78f6ccabc47b55121a35ff30d99827ee9
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=3798d59f28ac4387488e9995e76bf403c1593caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:c6:1c:c7:6c:29:92:b5:e1:0f:7c:0d:6d:
8d:40:6b:af:83:9e:88:d4:d7:59:bd:7a:c7:91:39:
4b:c4:6f:27:36:b6:ca:d3:44:9b:ad:57:bb:98:ed:
98:dd:fa:fb:4b:4c:8e:3d:12:64:17:e2:f8:69:50:
60:88:64:68:37:d8:10:79:2d:0f:b2:6a:f6:39:fe:
b1:66:23:12:b2:4c:a0:03:57:8b:3c:5c:7d:b7:47:
52:37:3d:a6:da:32:ee:32:20:d8:2f:67:52:ed:00:
e9:96:f6:0e:60:7c:d6:09:6d:81:57:17:35:93:59:
17:98:da:a9:ec:a9:3d:0e:e0:e3:65:be:c1:6b:11:
5e:4b:34:65:45:33:30:15:72:38:98:ad:b3:41:e6:
9e:00:4b:4a:f8:dc:03:c6:73:ba:9e:3d:c4:d1:43:
7b:bc:58:9b:6b:ce:ad:bb:12:dc:51:52:6d:6c:26:
6a:02:39:51:71:38:70:83:1a:b7:40:7f:db:15:9d:
3f:6d:41:05:25:6f:1d:97:95:6f:18:a8:30:b7:5e:
99:da:e6:2e:f9:5e:17:db:d1:59:f7:74:1d:62:1a:
69:d8:55:03:ee:a9:b7:d2:83:50:81:97:fa:61:f7:
3c:44:3c:58:ed:64:09:d5:26:a0:85:9e:e0:b1:11:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:D5:9F:28:AC:43:87:48:8E:99:95:E7:6B:F4:03:C1:59:3C:AA
X509v3 Authority Key Identifier:
keyid:45:7A:A1:C7:8F:6C:CA:BC:47:B5:51:21:A3:5F:F3:0D:99:82:7E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RXqhx49syrxHtVEho1_zDZmCfuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5427b-5990-42ac-bc54-c740e2fe30d3/1/RXqhx49syrxHtVEho1_zDZmCfuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:59:60:da:96:72:c5:05:dc:fa:50:68:73:8a:af:bc:d7:bc:
87:2b:91:29:b0:75:39:16:8d:e5:52:0a:22:d6:c0:03:ba:fa:
d4:19:ca:e9:06:56:b8:5f:6c:41:d7:1a:41:71:0d:b6:d3:f6:
a6:60:7f:9c:5c:10:23:6d:6c:62:e5:b5:eb:a3:5c:46:c3:12:
36:cc:d0:58:fc:0e:6a:1f:8c:0d:56:97:65:37:d7:22:83:9d:
cb:a9:7f:f1:26:04:1e:3e:50:03:0d:4e:27:9f:64:80:c2:88:
66:18:96:05:b6:30:e4:07:67:0b:0f:3a:93:35:b2:95:49:7e:
2b:67:2c:c3:5b:84:cf:19:4d:dd:a6:83:b3:a0:b8:42:aa:2d:
71:bf:7e:32:8e:11:e8:cf:a7:1c:90:14:80:79:d9:09:3d:4e:
fa:c3:f5:24:3a:29:29:ba:d2:76:73:54:0a:cf:39:75:90:9f:
2c:53:7d:90:8e:55:a2:3a:51:94:59:24:a1:8a:92:5d:5e:d5:
46:03:c9:ed:4f:c5:40:49:35:ca:f2:07:d2:96:5d:c2:60:3d:
93:e4:23:dc:d4:d0:fc:e5:8f:a0:2f:1b:47:4b:56:b9:a0:a7:
06:2a:6b:62:ec:a7:73:76:b8:f7:2f:db:e9:d5:6c:8a:33:27:
8b:b1:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:48 2025 by rpki-client