Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: xOHmuISil5HIMjTcktJApWTtCDA4k91Z/S7AyeEXjX8=
Subject key identifier: C5:FC:5B:69:43:30:6B:D8:4F:20:18:38:69:4B:82:75:6E:3C:1C:BF
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 019A4EF52D32C8B3553C22819913F150B8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:21 +0000
Manifest this update: Tue 04 Nov 2025 13:01:21 +0000
Manifest next update: Wed 05 Nov 2025 13:01:21 +0000
Files and hashes: 1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=)
2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=)
3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=)
4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: CoC+d3Zba3Zp7jw5iMz8eE4ASDJ4SwAE6PmFh4DlyiI=)
5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=)
6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2d:32:c8:b3:55:3c:22:81:99:13:f1:50:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Nov 4 13:01:21 2025 GMT
Not After : Nov 5 13:01:21 2025 GMT
Subject: CN=c5fc5b6943306bd84f201838694b82756e3c1cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:d1:99:af:3a:69:09:8d:38:df:ac:6d:5a:
dd:cd:a8:fa:6c:a5:91:bc:6d:1d:08:d0:4c:10:ff:
e4:a1:16:0d:c7:5f:ba:ce:c0:8e:7f:13:e0:70:74:
53:06:9f:2c:4f:8a:4e:e8:47:b0:b1:a9:75:28:ab:
53:78:4f:51:ae:a5:3f:42:f7:f0:b9:ae:c1:3b:8f:
d4:9a:bb:53:0d:89:b9:ad:3a:ce:7f:14:13:e8:df:
f2:5c:3e:51:17:a4:a6:6d:49:7e:8e:06:51:45:6a:
da:59:ff:d6:a3:e1:1d:15:21:1e:be:4d:03:03:6d:
f6:06:64:c1:70:c8:0c:26:36:65:39:b5:fa:de:b7:
c8:42:5a:7d:80:7c:e7:a7:39:3b:50:01:1b:a6:c7:
ab:0e:a5:a8:53:a9:78:76:43:01:77:1c:6d:62:1d:
a7:53:c9:b9:5b:99:e5:f3:35:55:20:ca:40:9e:50:
66:e4:4a:63:df:e4:09:99:43:9d:17:1b:98:80:d1:
6b:6f:4d:a1:19:7e:50:e4:c8:15:66:f8:e9:7a:10:
2a:fc:93:78:34:96:58:63:4a:02:41:0b:22:a1:bb:
d3:3e:73:79:49:4a:2b:73:3e:65:da:d1:d0:94:33:
5d:8b:59:a3:37:5e:9f:f2:f8:aa:f4:dd:c2:a3:72:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FC:5B:69:43:30:6B:D8:4F:20:18:38:69:4B:82:75:6E:3C:1C:BF
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:24:02:3b:95:7a:11:49:0e:32:13:d3:7d:e3:a7:71:f1:
13:44:a7:c3:82:9b:3a:3c:ff:b2:e9:39:3e:ae:58:02:54:5b:
fe:9c:71:2b:c8:b8:e1:2b:dc:d8:9e:99:40:f3:65:3b:16:85:
0f:aa:02:00:2d:06:c1:45:5f:63:40:39:31:79:6e:8b:6a:24:
f1:1e:bc:21:19:6d:c9:89:3e:67:f4:20:45:fa:70:3d:53:81:
c7:61:59:50:9c:cc:40:3e:4b:b8:27:ab:16:ce:3c:8c:0a:0e:
44:47:5a:9a:f4:ec:89:79:4f:d6:8d:96:6b:00:31:9d:1f:97:
88:19:75:2a:ac:47:ad:09:ff:de:5e:e8:bc:70:a6:08:04:ad:
3d:c9:9b:78:d1:6b:65:f9:df:48:cc:85:36:03:fb:bb:0a:dc:
e9:42:0c:40:dd:ac:71:b6:0a:41:88:32:d9:e7:c5:d1:6d:a3:
c8:cc:dc:e0:6b:b2:e2:72:03:1d:20:bc:46:97:6a:3c:3b:a6:
71:07:ae:25:52:aa:6f:aa:2d:bc:99:e7:2e:70:bb:86:7a:6c:
bd:ca:1e:8d:01:6d:43:9a:1a:08:7d:7e:44:0a:58:de:4b:84:
46:36:0e:14:ba:84:43:bc:52:32:60:1a:1d:a7:7a:b9:0f:fa:
95:ee:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:49 2025 by rpki-client