Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier: JOIeyOzquBT+maEoO7jy/ilx1Fm5TFVDPZsdQq/nJGQ=
Subject key identifier: D1:B7:A5:D0:48:DD:42:C5:14:06:4B:90:36:8F:60:17:F6:80:0A:F1
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial: 019A526344655232D47B4A70DCFF176E71A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number: 153D
Signing time: Wed 05 Nov 2025 05:00:28 +0000
Manifest this update: Wed 05 Nov 2025 05:00:28 +0000
Manifest next update: Thu 06 Nov 2025 05:00:28 +0000
Files and hashes: 1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: S1A0yDhXQpq3i6r99Jn+sXmwb8bb1xXTLR1hafSjd4o=)
2: CNq9H2OXEp4278EAIur7EjhdgiM.roa (hash: ezaoiiM4UlLTR0sbj1Fr7oZom9N7jm9fEV33MK67n/k=)
3: avwTDwXgj-XueUI8wn-hyOkB-tU.roa (hash: IktCfn+eBAhnVRfOZR4afgek+KYNeXmLk7tpJfljPc4=)
4: ei-lhbSyA6LHM30pnoTc676sVOk.roa (hash: BJvZcqOLIL3sVAhna5EPTZoiTPtvfxYPfeKNrqGIDHA=)
5: leLbvZk-ZLOHTx35H1teEVZvq_w.roa (hash: CF/SxDg4bOjmx2R5usAUeBgqRx+iarFbP3We+RdFgrY=)
6: uF3Ipp-IOmC2QxpujNdolHkmlLw.roa (hash: hlYEypQIjtWjQMSDZuN9bDWHcqbDbwOnFZm/mrxdTfU=)
7: vTpbvCLw317pUWZPp8_hDkh88VE.roa (hash: Xc88zcdf1KorCO6RA2gqcBm66DJNRYMneNP18O1Fg04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:44:65:52:32:d4:7b:4a:70:dc:ff:17:6e:71:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
Validity
Not Before: Nov 5 05:00:28 2025 GMT
Not After : Nov 6 05:00:28 2025 GMT
Subject: CN=d1b7a5d048dd42c514064b90368f6017f6800af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:7d:89:71:29:a6:df:77:5d:f2:0e:b7:3c:
46:18:03:54:80:c5:a9:fe:2c:33:c0:8e:a5:93:49:
ef:24:04:ab:dd:d5:67:bf:3f:78:75:40:d5:e5:f9:
d8:1b:74:62:49:b0:06:f6:16:68:c7:64:1a:05:52:
ae:82:5e:d0:e7:3c:38:42:2c:40:00:c2:be:b9:86:
0a:49:0c:52:97:88:10:da:f3:45:2d:2e:cc:0b:03:
6f:91:df:71:72:39:5e:5b:39:aa:d1:59:15:0c:30:
98:26:3a:45:4d:8e:58:d7:ed:1e:a9:e5:4e:fe:e7:
e6:08:1e:19:99:aa:a9:6d:9b:4c:55:cc:8b:05:e5:
5b:eb:a8:ec:24:d2:dd:b4:30:af:fd:b5:6b:ba:ef:
73:01:28:ae:83:61:bd:f3:08:1f:81:bc:bf:7c:4d:
d1:99:49:a2:20:99:5b:db:10:b0:ce:28:65:e9:cb:
9c:d6:e3:e7:96:ec:71:40:a7:6a:f2:46:60:2d:51:
06:91:f5:62:3c:ca:26:82:36:63:da:97:14:75:7d:
ce:1a:e1:c5:0e:c6:d9:7f:6e:7c:a7:20:ae:45:4a:
57:31:c9:c2:47:10:1b:35:33:2c:4b:5b:c4:4e:5d:
62:d8:7d:4f:7d:24:71:85:9e:bd:8b:5c:32:4d:ce:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:A5:D0:48:DD:42:C5:14:06:4B:90:36:8F:60:17:F6:80:0A:F1
X509v3 Authority Key Identifier:
keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:6d:b9:77:a8:40:ee:81:b2:0d:4c:7b:67:75:35:24:60:
c3:54:22:1e:31:fa:d0:1c:25:40:7f:57:bc:ee:a3:6f:26:ae:
eb:1b:3b:97:93:64:5a:e0:62:1e:c8:88:b0:15:cf:a4:fd:a8:
c7:35:3f:55:45:88:58:46:4b:de:1a:b6:e4:bc:99:08:59:d8:
9c:71:be:8e:04:8e:f2:2f:9b:84:94:8a:b9:6a:e1:d1:ca:a6:
90:80:67:0d:84:11:96:1d:cd:33:fa:4d:64:14:b2:14:3f:4a:
3e:36:d8:d1:3e:0a:a1:c3:8b:2b:d2:b6:bc:fd:a4:d4:c4:f9:
53:50:ee:ab:f3:3d:1d:87:b0:a1:09:0e:c9:a4:99:62:99:e6:
d9:ff:57:91:9d:ab:fd:52:65:0e:1a:16:66:15:aa:99:ed:18:
db:93:1d:da:2f:f9:38:60:0e:4b:f1:92:03:a6:15:33:ae:f2:
d9:61:f3:48:3e:49:de:cd:b4:f6:2d:5c:eb:1a:c1:86:e3:b9:
f2:54:b0:d5:93:1e:4c:a8:68:1e:72:12:f8:fa:44:99:5a:19:
95:44:81:f3:02:f8:71:2a:2f:4b:8f:21:d9:c8:26:72:36:88:
b9:92:ec:22:b2:4d:94:ef:7e:62:cb:b4:5c:bd:0e:c9:12:07:
0d:32:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:46:00 2025 by rpki-client