Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: JY2AGGFlVtOmyeWFiP6N8dRElEU/j0XY6R2t8x8U42Q=
Subject key identifier: 6B:7F:B9:79:9A:06:E9:10:E4:CD:05:98:CE:64:2E:B8:A2:60:7E:60
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 019A4DE19AD7E1885960E92AC5DCA7707A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 10EE
Signing time: Tue 04 Nov 2025 08:00:22 +0000
Manifest this update: Tue 04 Nov 2025 08:00:22 +0000
Manifest next update: Wed 05 Nov 2025 08:00:22 +0000
Files and hashes: 1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: 9qV6yBcAFJOdIgN28iOWt0z3UNr0kseuEzKPv26OREA=)
2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9a:d7:e1:88:59:60:e9:2a:c5:dc:a7:70:7a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Nov 4 08:00:22 2025 GMT
Not After : Nov 5 08:00:22 2025 GMT
Subject: CN=6b7fb9799a06e910e4cd0598ce642eb8a2607e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c3:54:70:11:b7:27:a3:e3:83:ec:8c:4b:98:
8b:8d:e2:00:9e:6c:94:a3:a8:09:67:5b:ef:1f:3e:
a0:ad:de:db:fe:c9:fc:dd:40:f2:2c:04:a4:fc:0e:
d0:65:1a:c3:d7:8f:0f:58:0a:fc:22:dc:00:5d:95:
66:97:09:72:89:6a:45:35:7c:69:7b:ea:4c:da:ee:
59:a7:3c:64:c3:33:ea:83:9c:8d:36:15:bb:da:1b:
e9:eb:a1:a4:28:1f:42:8e:62:ef:21:41:ee:05:61:
25:c4:96:e1:4b:a8:41:20:f8:f1:5e:b9:94:55:4c:
c2:d7:58:1c:b3:cc:11:bd:b8:bd:1f:cd:e9:c5:72:
9c:d0:e3:1b:1e:de:ad:12:8b:5b:d2:ce:86:a2:8f:
70:11:4b:a7:2f:48:d5:bf:22:79:a2:ef:23:1a:dd:
1a:f9:17:10:1e:d9:96:69:6d:96:8a:48:21:70:e7:
c6:94:e1:ae:06:8e:9b:77:5a:87:1c:f1:39:79:1d:
61:fc:bc:a1:c0:a1:e0:df:44:e0:82:8b:2b:91:1b:
95:0f:58:69:07:5d:f6:a8:07:f9:73:4c:ac:c1:fa:
20:46:9d:e8:64:64:6f:19:14:90:9f:38:55:42:d0:
6a:70:b9:fc:c4:e5:fa:a2:01:1e:1a:97:4b:36:55:
18:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7F:B9:79:9A:06:E9:10:E4:CD:05:98:CE:64:2E:B8:A2:60:7E:60
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ba:ec:63:6f:49:40:79:44:a4:69:73:56:7f:1b:72:39:3a:
34:19:b4:75:d8:f1:55:70:70:82:cc:20:d4:14:67:2a:7f:d5:
77:d2:eb:65:c0:76:6a:b4:6f:ef:bd:46:52:01:42:b5:10:09:
53:db:72:47:53:89:cc:fc:ef:48:08:af:e9:22:19:de:d6:4d:
7c:26:77:ab:a9:06:df:3d:c9:87:73:40:c3:bc:b6:d6:e2:20:
22:c4:27:10:3b:9f:39:0e:6e:77:14:30:ec:4b:fd:9f:f2:5b:
e0:dd:67:61:09:74:52:5b:c5:3c:68:36:72:e9:0f:b2:dd:61:
10:0b:10:13:02:08:cf:61:c8:36:60:39:8d:84:4c:30:9d:42:
47:fa:ac:ec:ee:62:38:05:8b:3e:39:4d:ba:72:06:ca:63:69:
a8:4c:09:65:b4:c5:61:38:c4:d8:68:25:84:33:2e:62:c5:ac:
f5:c8:a2:59:1e:85:e2:d3:88:96:7b:c6:f0:2c:3b:c2:0c:51:
bc:99:0f:e1:92:65:f5:44:e7:f8:6a:55:57:bf:34:33:df:28:
15:6d:ee:83:12:61:db:78:27:1a:d8:95:5b:8a:31:8b:81:c6:
c0:56:a0:68:6b:4a:e2:1d:b4:bd:13:36:81:36:28:d3:33:17:
92:98:89:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:48 2025 by rpki-client