Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: KUCsGGPG/wiNISmtvog3NPTOD8PyAjS/wvFdYhym4oM=
Subject key identifier: 51:53:B8:75:11:52:46:34:10:31:96:71:E4:32:C6:F5:B4:C4:E6:98
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 019A4DE22EE69037B25AC791417EBBCFF8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 11B9
Signing time: Tue 04 Nov 2025 08:01:00 +0000
Manifest this update: Tue 04 Nov 2025 08:01:00 +0000
Manifest next update: Wed 05 Nov 2025 08:01:00 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: mZt4Wn9BLsy/1fBBhX3KlKCkSYxvj6uDgIc9Oy9v3bE=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2e:e6:90:37:b2:5a:c7:91:41:7e:bb:cf:f8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Nov 4 08:01:00 2025 GMT
Not After : Nov 5 08:01:00 2025 GMT
Subject: CN=5153b8751152463410319671e432c6f5b4c4e698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:91:3f:f8:32:65:28:8f:0c:cf:37:7d:32:
dc:4f:fd:ac:40:71:01:b4:c2:bd:fb:ff:ae:10:db:
c0:85:d2:61:e4:a0:ad:33:de:49:8c:2e:01:c7:67:
ef:68:63:1b:1a:25:ef:5c:62:dc:bc:48:a6:f9:4d:
12:ee:d2:79:46:32:72:39:5e:ff:43:2e:a4:f1:06:
86:8f:b4:bc:7d:b7:49:b6:e4:ed:bd:9b:73:4d:8a:
88:56:74:73:38:09:a2:9b:b2:39:ff:4f:4d:6e:b1:
6a:ec:9f:c4:88:d4:1e:93:f1:e8:d0:18:d5:af:ba:
5b:4c:8d:b7:b4:19:c7:e3:23:0c:53:c9:24:24:12:
ae:25:39:cf:e8:45:f2:fa:9c:94:3f:81:be:70:3e:
7b:91:12:8c:b6:92:ad:4c:32:d5:96:21:e5:84:e7:
da:0d:13:5a:52:87:77:fb:a3:26:4e:3c:16:c7:9c:
90:16:33:22:e9:ba:f1:d5:88:0e:57:c9:43:ca:e7:
0c:50:b1:15:f4:cd:d2:73:8b:6f:40:2c:47:e1:08:
f6:b1:ab:c9:fe:6a:cc:1b:a6:79:c0:21:1b:47:4f:
a3:1a:75:f2:96:90:a1:87:b7:66:49:f7:bc:1b:a0:
15:29:45:c4:b1:35:fd:e3:9a:db:af:8b:19:e2:64:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:B8:75:11:52:46:34:10:31:96:71:E4:32:C6:F5:B4:C4:E6:98
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:56:77:e3:f6:3f:1d:b9:86:2e:76:27:05:a5:27:57:2e:1d:
b4:ff:20:74:2d:d0:ff:12:4a:01:19:a2:c9:ba:f7:f8:c1:a2:
6d:f8:5b:96:11:24:0a:44:00:85:0c:aa:22:8e:f2:6f:5b:bb:
ed:4e:43:71:75:0c:8f:c2:d0:b5:4e:6f:b1:2b:41:b5:05:7b:
77:bb:18:fd:49:a8:56:a6:62:6d:a4:a9:54:40:1f:10:d3:41:
6b:4d:77:b5:f5:12:a8:d1:3e:95:2a:1f:e2:60:7f:bb:e0:e2:
fa:e9:51:44:5a:cb:05:b3:c4:d8:90:4a:88:89:6e:fb:e7:fa:
74:40:03:40:f8:d3:01:78:3f:6c:d4:3b:ef:27:a8:fe:a0:5e:
07:3f:06:88:38:84:dd:5b:52:10:77:6b:b9:62:70:c5:9b:37:
7e:d1:ca:6b:07:b7:0a:5c:41:06:78:b0:66:3b:55:c2:e5:a2:
92:a8:2e:46:14:cf:a4:50:cc:6e:1e:d9:f3:cd:13:bb:aa:b8:
5d:6b:fb:08:fa:11:12:72:ef:28:3b:a6:68:ca:00:8f:40:1d:
fe:28:74:b9:02:34:06:b4:47:55:07:42:01:b4:9d:eb:0f:87:
34:51:eb:73:58:ae:89:64:58:90:d7:d6:fc:52:2c:b8:7b:87:
e1:75:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:07 2025 by rpki-client