Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: Z5UiLvTDHimalIO67ijktnUQ/6HOCqtPppBmTMO62fc=
Subject key identifier: 4A:FF:48:11:2E:18:5E:A8:1B:0C:4A:54:FC:84:6A:E9:AA:A9:EF:B1
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019A51875DA009819AA4BD5B1D34E5ACC495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1719
Signing time: Wed 05 Nov 2025 01:00:17 +0000
Manifest this update: Wed 05 Nov 2025 01:00:17 +0000
Manifest next update: Thu 06 Nov 2025 01:00:17 +0000
Files and hashes: 1: X3E9dkrMqWB_DIqFZdVrZbg3e_4.roa (hash: tfPHTT8XE2UFNzu3VKtqQ2wZ9tqFTwpzr3+xuc/NotQ=)
2: ggaujxDkTjz3ur815c8t-PcBT3o.roa (hash: kBi/tXIf057RjeVgxSaejXzvw/f4YkfQil/vCr+FLSM=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: MBisPjlowqzR8NV7F7uJQnL+DimP5g0jnDyPT8FILl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:5d:a0:09:81:9a:a4:bd:5b:1d:34:e5:ac:c4:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Nov 5 01:00:17 2025 GMT
Not After : Nov 6 01:00:17 2025 GMT
Subject: CN=4aff48112e185ea81b0c4a54fc846ae9aaa9efb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:48:8b:48:ce:77:50:57:78:74:94:60:87:
7f:e1:c3:c3:d8:85:c0:55:91:26:2b:82:28:0c:65:
2b:ee:5a:99:b6:eb:33:88:df:71:98:94:8f:14:94:
f9:62:5d:fb:32:3f:22:85:6d:a3:bb:79:b4:8b:a3:
62:41:7c:87:8f:6b:9a:43:48:8d:2a:d7:4b:b5:a3:
85:34:37:f0:32:8b:c0:e1:97:69:65:d0:15:f7:54:
ca:3e:32:9a:81:ec:f5:ae:de:d9:4a:dd:fd:40:41:
6e:2b:d4:ce:05:2b:00:11:98:97:86:bd:31:e9:34:
26:3c:be:5e:25:51:a1:4c:bc:ea:ad:93:e7:4e:df:
4d:e3:24:35:7c:ac:48:39:63:bc:52:ef:eb:aa:ea:
4b:42:71:95:8a:d1:83:e1:fd:ba:77:52:f2:d5:0d:
f4:09:94:f7:43:c2:7c:49:53:72:c1:4b:a5:c0:f9:
8c:90:a0:d5:51:53:b2:38:d2:e1:84:b4:bf:cf:69:
51:ba:71:70:50:38:3a:fd:4f:e4:fc:82:d3:4d:bc:
d8:5c:35:31:f8:11:b8:5a:3f:f3:f7:ea:d9:39:a3:
8b:14:84:86:7f:88:8d:8b:a4:dc:02:d4:1e:6a:9f:
40:d5:d5:6f:79:72:a8:8f:c8:b9:36:5d:a8:d4:24:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:48:11:2E:18:5E:A8:1B:0C:4A:54:FC:84:6A:E9:AA:A9:EF:B1
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f3:52:da:13:cf:5c:8a:8a:bf:75:24:dd:a1:88:5f:23:b6:
a9:cf:74:f6:4d:1a:3a:a9:83:68:bc:c4:54:a3:32:d3:b1:24:
d2:d5:e8:a3:2f:fb:b5:bc:e6:93:ab:c7:9f:d6:a8:26:69:7b:
e7:14:61:a6:38:de:71:fc:8e:6f:68:36:52:f8:23:2c:c8:5c:
6b:9b:08:58:ab:a5:91:34:9d:75:89:45:2e:28:ff:c9:cb:bd:
27:bc:19:78:4c:d5:a9:78:9d:c6:c3:ac:80:47:bb:a9:16:4f:
59:eb:d8:1c:c6:6b:74:9f:d2:dd:2c:99:be:9e:79:ad:4f:0a:
13:92:ee:aa:9b:78:09:da:08:d8:80:29:60:cd:42:61:80:b4:
df:f8:8d:30:62:3b:7a:b7:21:53:c6:25:f8:c1:b9:f3:4c:3a:
87:46:a4:bb:a9:6c:3d:59:7d:53:91:a8:4c:e5:f8:55:30:fb:
86:b5:05:4e:94:55:35:bf:71:c9:d4:49:b8:cf:ae:5b:92:56:
ec:1c:2c:31:45:eb:4d:29:31:6e:06:70:0e:dc:0a:b2:51:2c:
c6:b6:45:f6:80:84:a8:0a:33:f6:95:af:c8:68:54:82:66:05:
e3:a7:93:14:92:54:af:8c:61:d6:ff:9a:38:60:4d:8b:33:89:
a7:ed:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:26:00 2025 by rpki-client