Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: TEO7QvqtESH8uNFP2zfXFVkMy3OQGk6AjNV6Dy/jB6g=
Subject key identifier: E4:E6:0E:A3:F7:30:59:65:E1:2D:E6:B6:F4:71:8C:D8:9E:0E:BD:07
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019A526366C1B0D67317D05B7918226FB121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 7A
Signing time: Wed 05 Nov 2025 05:00:37 +0000
Manifest this update: Wed 05 Nov 2025 05:00:37 +0000
Manifest next update: Thu 06 Nov 2025 05:00:37 +0000
Files and hashes: 1: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: gZCguKEYfBLG11YtUosgJIx7tACbLjb5baqGZHvh4k8=)
2: fNWf8gF7iXGvViphR_N8dfoAxbs.roa (hash: aazZL/oDilKF6hXZ5Ap5LBwXM/kHZtXfME42Y75LwwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:66:c1:b0:d6:73:17:d0:5b:79:18:22:6f:b1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Nov 5 05:00:37 2025 GMT
Not After : Nov 6 05:00:37 2025 GMT
Subject: CN=e4e60ea3f7305965e12de6b6f4718cd89e0ebd07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:0b:f5:64:6d:b4:a6:81:95:02:df:ec:fb:
41:c7:12:76:f7:25:cd:96:d9:b0:e4:35:c6:da:9d:
a5:c7:4c:18:ce:dd:e6:f4:e9:c2:d5:08:f8:5c:b3:
b1:c3:fc:27:f1:70:40:05:26:ac:7b:96:c3:e0:ee:
fc:b0:64:fc:ef:a2:ad:fa:ed:d8:da:fe:48:3a:f6:
9a:74:3f:8a:21:0c:47:cd:a6:cd:fa:ed:26:12:c6:
64:dc:a3:19:7c:2f:c4:f7:7e:21:88:5c:52:55:22:
0e:6f:69:df:f8:d3:ed:05:ef:e7:2b:6b:a6:ee:b5:
32:32:9a:5c:18:9d:85:3d:f1:2c:c3:fa:e4:36:ee:
a4:9f:2b:22:87:2e:b9:c3:e8:d3:a2:6f:d1:8b:96:
44:74:ad:11:cf:06:89:10:38:2b:2d:e4:81:7e:84:
1d:68:a6:08:af:90:24:d5:d7:13:ba:5a:8f:24:7a:
91:f5:7a:0b:97:e5:74:54:b8:ab:c8:06:60:43:0d:
b9:b2:2d:44:7e:de:67:c9:c1:58:a5:e2:95:f0:3a:
1e:85:10:f5:37:37:d0:fc:dd:b4:b4:34:59:5c:1c:
bd:f0:57:6e:c8:0c:a2:b1:7a:83:a7:d3:61:39:47:
f1:82:bf:36:5b:e6:19:00:d0:89:fd:b8:ae:f7:aa:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:0E:A3:F7:30:59:65:E1:2D:E6:B6:F4:71:8C:D8:9E:0E:BD:07
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2e:34:53:e7:02:97:35:1c:64:da:c1:56:5d:a8:ea:5c:c9:
02:c1:66:36:eb:c5:81:55:52:a9:ee:4e:4b:db:be:a0:3f:88:
c6:ce:0b:65:a7:63:b5:43:43:71:22:7e:68:1c:89:b0:46:2f:
c3:f2:f9:8e:ec:5b:d9:e9:23:63:40:41:0c:d9:67:76:68:33:
57:3a:65:38:c3:07:05:cb:13:04:6d:c6:16:d4:6f:5a:49:c7:
22:90:51:04:6d:64:f7:32:55:95:47:fc:74:9a:03:8f:74:af:
67:ff:d0:13:cc:49:13:ff:f0:bc:2c:aa:ef:12:59:97:03:df:
e8:a0:9a:c5:17:31:ef:8e:59:1d:f1:87:8d:e3:0d:27:ab:96:
f8:f3:8b:9f:ca:e2:dc:33:94:9d:15:db:a2:e8:29:e8:c6:6b:
1d:9a:27:68:7c:e9:57:1c:9b:d3:27:cf:f7:4e:4a:01:b1:d1:
dc:08:c5:c5:ad:60:0a:1d:1b:17:6b:2e:50:d5:3e:dc:30:17:
14:56:16:cb:58:27:a8:4f:ba:82:a5:71:3a:d1:17:26:aa:00:
a8:36:b7:78:df:4a:a6:6d:d6:c4:31:2c:95:28:7a:72:57:c5:
7e:32:33:13:3f:34:9a:99:5d:a4:ec:bc:20:64:8c:79:3a:bb:
85:24:65:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:15 2025 by rpki-client