Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json)
Hash identifier: H+8UlSkrQ83mwhY6p4NYdy7mb+bS2vSa5nTl7I6EfiY=
Subject key identifier: 5C:90:C9:07:67:BE:FD:52:65:0A:36:09:47:B2:DD:8B:0B:F1:77:A3
Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Certificate serial: 019A4D3D40B28E5EBD5522271E89BD88E4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
Manifest number: 0EC2
Signing time: Tue 04 Nov 2025 05:00:51 +0000
Manifest this update: Tue 04 Nov 2025 05:00:51 +0000
Manifest next update: Wed 05 Nov 2025 05:00:51 +0000
Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=)
2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: ep4sBdiPwUIju2k32phThPMAhaWTSBURwRkUXkPm5ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:40:b2:8e:5e:bd:55:22:27:1e:89:bd:88:e4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf
Validity
Not Before: Nov 4 05:00:51 2025 GMT
Not After : Nov 5 05:00:51 2025 GMT
Subject: CN=5c90c90767befd52650a360947b2dd8b0bf177a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:a3:ea:11:c0:87:24:b2:38:81:5d:78:76:
3f:d8:81:34:c2:41:45:70:64:78:7d:18:10:17:f1:
b2:92:46:25:42:56:ec:e9:46:f7:a7:fb:02:11:a2:
24:4b:d3:d6:af:2f:f3:72:3b:dd:94:87:ae:b3:d2:
26:52:f2:f9:c9:29:04:24:4c:6e:67:9e:7a:d3:ef:
04:2b:e6:d4:67:e4:67:02:d9:88:a5:f5:e6:3a:0b:
a8:59:c2:70:e0:e5:28:25:02:fb:36:52:2c:24:d3:
f6:77:66:56:8f:72:08:0b:c3:8d:24:9f:f0:98:6a:
8e:0a:39:a9:49:fe:b5:4f:ae:51:06:f4:3b:5c:20:
78:2d:61:d5:3a:18:4b:0b:09:50:de:24:aa:aa:bd:
17:ef:1b:78:73:7c:c7:ca:17:84:21:9d:76:e1:1b:
06:3d:1e:a0:a9:79:d0:bd:e1:31:ab:95:35:e0:0a:
50:6d:65:38:a9:6f:fa:8f:db:a5:a7:99:36:f1:d6:
f2:12:a1:c6:f5:33:22:cc:75:51:d6:fc:fd:8b:ae:
c0:2d:24:ff:1a:fe:9a:27:2e:ed:e2:35:a3:4b:f2:
f0:41:17:3b:9e:5b:2a:b5:ba:ef:b2:a0:8e:85:44:
8f:53:a2:53:0c:84:19:94:51:cd:8e:22:41:ea:32:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:C9:07:67:BE:FD:52:65:0A:36:09:47:B2:DD:8B:0B:F1:77:A3
X509v3 Authority Key Identifier:
keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:42:91:f0:e2:68:7f:f8:a3:e2:57:4a:72:b6:f1:0a:bf:f9:
5b:aa:9a:f6:dd:dc:fb:b0:39:d6:4b:47:44:46:f2:69:97:3f:
21:9a:e0:c3:59:86:44:08:8a:14:12:33:78:86:cd:b1:5c:aa:
d5:ff:0b:e3:d9:13:8b:24:22:67:86:17:98:97:0a:2a:36:27:
3f:57:57:67:47:d6:fa:74:12:f8:88:7b:0a:2a:bd:89:cd:d1:
ca:5d:79:e0:b8:19:71:07:fa:da:9c:4a:df:c0:a2:5d:db:43:
9e:2e:95:b5:70:72:46:d7:fa:95:3c:40:76:b9:3e:89:df:e8:
47:61:c8:df:39:ed:ae:64:82:aa:82:3b:c5:0a:1e:d2:23:60:
8e:c6:a1:d4:55:87:05:51:63:f0:5d:73:e8:fb:c0:0d:81:a8:
c5:a3:b0:63:f9:e2:6f:12:2d:d8:ee:4e:3d:97:59:a0:49:f5:
90:2e:5e:6c:13:fe:75:d1:37:79:cd:29:2c:46:a4:59:6d:a5:
c4:a2:6a:41:e2:c0:ea:80:6b:f3:51:42:4f:2e:67:78:da:96:
38:bd:a9:02:b8:f9:d8:70:27:7d:24:94:4b:0a:f4:f0:b7:1b:
a9:97:b9:c6:23:34:f4:c9:da:37:a9:e1:11:b4:cd:95:4a:d4:
fd:65:e9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:19 2025 by rpki-client