Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: h/gmPeStmRxz+pEFqS0rQifEqdVD/Dpdkz/NqTqZO/M=
Subject key identifier: 52:9B:B0:54:7E:16:29:F7:14:CC:55:46:7C:AB:14:DC:1C:4E:5F:AD
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019A4EF55BDEC70F74DF7EDE146D95C5E678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 09D7
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: lS3Fs8J8auWVFYMik0QC9xX6DKmaD++o/AaoUwov41c=)
3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5b:de:c7:0f:74:df:7e:de:14:6d:95:c5:e6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=529bb0547e1629f714cc55467cab14dc1c4e5fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:73:0f:52:1c:f5:58:67:32:2c:32:71:7b:
69:69:6b:fe:18:ea:93:d8:e9:fd:9f:fe:01:be:83:
97:0e:2e:03:25:c5:d6:50:79:47:14:a4:ad:65:d2:
11:bb:c6:bc:d0:19:36:1d:5e:1d:f2:3e:89:79:e7:
49:8e:1c:52:f4:1d:ea:79:72:e0:a6:8b:ee:63:c5:
64:4f:48:27:ca:a2:dd:93:8f:f6:03:be:3d:60:b9:
c2:7b:5f:00:82:4f:7a:4c:46:c7:0c:58:57:be:63:
62:4f:cd:e7:cf:3d:27:c5:9a:7b:f5:38:14:81:47:
80:e8:13:62:00:fe:16:cd:b3:0b:97:6d:a1:4e:e4:
8e:5c:a9:56:b6:0e:90:0d:8e:c5:3b:5e:ac:85:36:
aa:d0:77:c4:49:95:c3:91:d4:57:2b:2a:3d:de:62:
2f:be:e8:93:4c:ee:b6:d6:0b:04:6a:d0:8d:1c:5f:
ca:d9:29:db:08:21:fb:c7:b9:6c:d2:c5:eb:1b:b2:
dc:b9:89:e6:0e:f3:e0:0c:10:49:fd:0f:66:ca:de:
c6:c6:6d:f8:c4:2b:f8:1a:1e:22:b2:58:96:01:5f:
a7:14:26:89:bf:e0:c0:b8:41:c6:11:69:d5:56:03:
e1:e9:dc:1d:2c:ae:fc:64:af:a5:27:2b:ce:58:fe:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:B0:54:7E:16:29:F7:14:CC:55:46:7C:AB:14:DC:1C:4E:5F:AD
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:a4:ad:37:7a:93:22:40:67:c9:10:ef:52:e7:0a:65:c3:
21:b8:3c:50:4c:53:9a:13:9f:e2:18:1d:03:47:6d:7c:6c:90:
c0:12:d5:43:03:5f:c1:eb:19:b4:37:1d:ab:b4:a3:35:8f:97:
56:f8:e1:4e:80:44:a9:dc:ab:49:85:d5:ea:87:a4:bf:36:86:
69:73:3b:08:a7:cc:39:d0:f1:92:4c:0b:d5:69:89:c8:7a:aa:
cc:0f:df:34:bf:d0:65:68:11:43:91:76:f5:fc:5d:a4:8d:77:
19:29:c6:5b:9f:ff:cf:e8:dd:c3:3f:87:bd:73:62:d2:f2:28:
5d:81:66:0c:b7:d4:ae:91:9d:a5:df:9b:e5:dc:cf:4d:96:bc:
fe:1d:38:5a:26:37:b1:ce:1c:60:3c:39:fd:dc:4f:ef:1b:8b:
fc:a0:f6:73:27:78:fe:1c:80:c7:f0:fd:3a:de:36:6e:8a:dc:
56:d2:97:54:06:64:84:ac:5e:72:9a:7c:78:31:23:6e:e3:9a:
a4:e7:32:a7:16:ab:a3:e7:6e:16:2a:ba:8b:cd:c2:e2:29:76:
57:4c:62:48:d6:82:6a:6e:7e:ba:ba:14:a5:a8:8b:7d:65:45:
98:c2:98:20:d1:87:05:bf:f5:18:0c:cb:49:7c:d5:b8:c7:76:
55:17:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:49 2025 by rpki-client