Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: ZfaqhaycH6CeyIZHJKseIGBY192FcQpjzC0lsiVQ9Tw=
Subject key identifier: 7A:5F:D4:AA:95:E9:8A:F8:71:03:03:EF:DB:27:B8:9B:D2:58:33:76
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019A4D7468712A8536EDF670A4ABE891DE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 1561
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: jJ3m37E37kfbU4NnRp2+R95UoC1G+bBVFBVGeaaarcM=)
2: zUVgbIXYeTGVKXvGEymmIIswak0.roa (hash: byi69vgfiULR5t5etKbYt0ap14VdTPxIUc5JBAXpbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:68:71:2a:85:36:ed:f6:70:a4:ab:e8:91:de:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=7a5fd4aa95e98af8710303efdb27b89bd2583376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:62:8f:17:cb:3e:b1:ef:0d:21:e3:e1:7e:
08:2e:b2:e4:6c:82:da:d9:f1:74:17:d3:f7:2e:4b:
a6:97:ea:58:32:31:a2:df:66:bd:27:11:d7:b7:81:
3a:d0:66:67:d1:b9:c1:8e:99:ce:fa:ab:38:61:02:
7f:e7:05:a6:3b:2e:69:53:a0:6e:a3:e5:c3:ae:b9:
7d:70:ea:b8:64:af:da:47:58:ce:ee:c4:f5:2e:61:
1d:97:a9:21:66:05:93:74:40:9d:29:07:d3:82:b9:
25:cc:12:19:66:d0:86:04:5c:c4:f2:d9:d7:a1:02:
57:5d:55:af:ac:4e:b2:65:d4:cc:7d:60:69:6b:43:
91:ab:95:1a:d3:e4:24:e4:d3:3f:04:f4:e5:12:36:
7f:c0:17:ed:99:8d:10:60:6b:d8:25:fb:23:d5:59:
fa:2e:9a:cc:45:2c:88:21:bc:34:e3:db:62:cb:ba:
f2:23:48:17:36:aa:40:59:32:ce:60:bb:76:41:4e:
5b:0d:07:2c:01:2f:7d:9f:11:f6:ff:ed:d1:07:67:
ee:78:15:3d:89:95:6c:7b:bd:85:64:63:f3:ee:0e:
65:bf:92:f1:17:16:c6:b9:03:83:a2:d0:c0:0b:60:
41:c5:37:e1:91:07:dc:7f:d5:d3:60:f3:3c:7f:58:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5F:D4:AA:95:E9:8A:F8:71:03:03:EF:DB:27:B8:9B:D2:58:33:76
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:95:07:a9:19:9c:d0:34:6b:f7:2c:ea:7c:09:de:7a:8e:71:
c8:06:88:1b:64:73:2b:3e:85:29:90:98:fd:03:87:72:ce:c4:
be:77:21:02:0d:7b:48:6c:73:b5:2c:e8:88:8a:0d:cf:55:11:
a7:65:c6:7b:ea:94:e2:22:f5:87:57:f7:dd:a4:a0:61:10:1f:
47:58:44:f4:78:b4:b3:f7:f7:2c:59:e7:80:ce:2f:54:f6:de:
67:d6:9a:51:25:61:8a:25:5b:0a:76:a1:ac:5d:24:aa:9f:ed:
5d:42:8b:74:65:8b:19:d6:5b:aa:7a:ee:5c:77:29:b9:11:af:
03:b2:0c:c4:57:f3:0b:cb:4a:92:b3:90:a8:03:29:88:b1:c6:
7e:d5:3d:95:3c:94:bb:5b:30:86:d9:7a:7a:6b:8d:40:04:3c:
bd:5c:37:a8:7f:d2:14:0a:43:d3:e8:80:af:27:fe:3f:1e:7e:
79:2e:8f:9f:8f:5d:c6:c4:1e:a7:73:b4:f7:ef:4e:51:06:85:
ec:be:7f:bc:98:dd:5a:d2:66:f2:ab:b4:42:84:2d:9c:95:f4:
56:bd:52:1e:f2:95:aa:5c:4d:be:91:37:26:aa:5a:1e:67:ac:
82:7d:8c:11:fa:e3:84:d7:ce:ff:52:fc:19:bf:b8:b0:21:d5:
06:0d:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:48 2025 by rpki-client