Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json)
Hash identifier: i3dmrKHUYopaM412BFAnAENXUydx7Qh5tc9/fVfz9NU=
Subject key identifier: 2F:A1:A5:9E:51:79:35:D2:0B:10:D8:ED:5E:66:BC:6B:4B:FD:FF:25
Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Certificate serial: 019A5119D600380666FE72727127C54A7E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
Manifest number: 0EA8
Signing time: Tue 04 Nov 2025 23:00:38 +0000
Manifest this update: Tue 04 Nov 2025 23:00:38 +0000
Manifest next update: Wed 05 Nov 2025 23:00:38 +0000
Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=)
2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: /lVr2SFh/vj6/jUuYawmQqjM+JjqJp0+IsfvDHwrvWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:d6:00:38:06:66:fe:72:72:71:27:c5:4a:7e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377
Validity
Not Before: Nov 4 23:00:38 2025 GMT
Not After : Nov 5 23:00:38 2025 GMT
Subject: CN=2fa1a59e517935d20b10d8ed5e66bc6b4bfdff25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:c8:75:5d:20:2a:85:50:ec:5d:21:40:87:
45:50:47:3c:8b:54:f7:1c:60:dd:39:52:10:e9:20:
d4:2b:73:f7:14:78:4b:6a:53:62:7b:96:91:3e:84:
65:0c:47:e6:d4:26:7b:90:c7:06:3f:fe:f4:c6:ca:
cd:04:17:7a:ad:16:c7:c5:70:a9:3e:01:91:cf:c2:
7d:7b:b4:f1:53:6b:01:f1:4f:86:76:53:c6:51:4d:
0a:9f:38:7c:c6:81:7a:82:09:69:bd:44:eb:76:fe:
60:99:61:5f:5c:61:48:9c:6d:fb:89:73:32:1e:33:
e0:5b:76:1d:5c:63:1a:07:d7:68:52:53:be:92:ab:
7c:b5:13:b2:55:46:25:a6:4e:a6:68:e8:d3:c9:c1:
c4:fa:ef:f9:fa:1a:73:60:26:b9:7e:ae:e3:77:d9:
db:e5:78:7c:db:e8:bc:b0:f2:39:21:74:07:d8:8f:
6b:71:43:98:a2:65:02:f7:6e:1d:9b:b1:61:82:c9:
bd:d3:44:5e:60:ac:ac:48:f9:7b:cd:2e:38:60:aa:
6e:60:c3:9a:c7:62:19:17:a5:9c:f6:40:f4:14:4d:
e5:c0:b7:2e:59:d2:f6:65:76:28:39:7e:ef:a6:24:
3c:bf:74:76:3e:45:24:86:e0:1d:db:ff:7c:2b:8a:
d5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A1:A5:9E:51:79:35:D2:0B:10:D8:ED:5E:66:BC:6B:4B:FD:FF:25
X509v3 Authority Key Identifier:
keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ae:a0:58:6e:20:1d:31:05:de:a4:6b:f2:a1:03:fe:0a:05:
bd:2b:c4:cc:0b:c9:10:42:5a:65:cd:12:e1:9f:55:95:74:22:
41:ad:6b:4d:9f:4c:e7:ac:cb:c8:a4:b5:6a:dc:cc:31:03:4f:
fe:13:1b:3f:ea:8d:58:e9:b1:27:3a:ba:ee:cc:cb:9a:a5:93:
f5:18:72:fd:f7:d3:b9:a7:71:02:55:a8:47:5e:4f:69:63:3c:
14:55:a0:16:a5:00:9b:86:8e:85:02:df:0a:71:68:c8:d7:b8:
a4:fd:d6:83:ac:a0:f6:1f:ee:45:b2:18:eb:14:00:86:ed:e1:
04:ab:a9:c1:df:be:9f:0e:f1:5c:76:3e:fc:22:a5:8c:dd:9d:
cb:f8:d1:1a:d6:6f:63:94:ba:91:d2:b3:25:76:f5:b4:8b:10:
a5:1e:e4:a8:68:45:12:2b:c9:08:95:79:78:3a:9c:52:e4:73:
81:ea:6d:33:38:93:4a:41:38:10:ce:73:2a:35:a9:1f:53:8c:
96:98:da:f2:51:9f:aa:a0:65:6a:5b:fc:f8:b1:8a:3e:38:b7:
a1:3d:b8:78:06:49:1c:4d:90:d1:57:f9:98:fd:ed:63:2d:16:
ef:2a:c0:d4:a0:d2:ac:b1:23:86:c2:8f:ad:ca:1e:8e:bf:13:
c7:3c:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:07:11 2025 by rpki-client