Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json)
Hash identifier: BKBpn7cHZtCyQpMmau4FhLhjImvJOvMHzGZIsJYGlTA=
Subject key identifier: 74:51:C3:CC:50:4C:E4:9D:11:73:E9:AC:C0:71:2D:E2:55:FE:4A:72
Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Certificate serial: 019A4E864E1F7B915CF2719609CF5A6B5224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
Manifest number: 14B8
Signing time: Tue 04 Nov 2025 11:00:15 +0000
Manifest this update: Tue 04 Nov 2025 11:00:15 +0000
Manifest next update: Wed 05 Nov 2025 11:00:15 +0000
Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: p0VI+iUKZuLM3ZaqVCHbkS8rQcix4GFzXK3/iEIbuOc=)
2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4e:1f:7b:91:5c:f2:71:96:09:cf:5a:6b:52:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca
Validity
Not Before: Nov 4 11:00:15 2025 GMT
Not After : Nov 5 11:00:15 2025 GMT
Subject: CN=7451c3cc504ce49d1173e9acc0712de255fe4a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:97:d8:f2:5d:f1:38:4c:1f:bd:48:27:bb:
37:22:a7:47:4c:f2:ac:2b:5c:97:f8:76:a1:2f:64:
b3:e1:d7:8a:bb:85:36:76:5e:13:9b:88:55:a6:6e:
35:e4:b0:05:ce:01:83:e8:ab:ff:09:4e:c7:37:47:
2c:a7:e3:9b:98:ea:8f:90:6b:03:a8:d6:2d:e4:cc:
cb:b3:13:d7:d9:4b:28:2a:11:f9:88:5a:f7:c4:4b:
90:e3:1e:b7:40:6f:cd:b4:4b:2c:df:d2:02:f7:1b:
78:d3:cc:a3:52:dc:02:c1:86:39:5d:fd:9c:92:7c:
63:ae:b4:ce:d3:43:4e:65:5e:1d:77:4c:75:a7:b2:
5f:d3:11:b8:b4:a4:d9:ad:26:2a:ca:a7:85:f8:30:
13:16:65:9c:ef:25:de:a9:4a:5d:33:e5:a8:90:0d:
29:f3:20:0b:67:f4:53:4c:e6:2a:85:b4:46:05:f2:
d7:27:97:78:d8:13:2b:93:20:dd:32:0b:4c:16:1f:
8d:bc:f2:f9:a1:77:fa:2a:83:94:57:90:77:f4:48:
94:07:1b:1a:53:77:15:cc:d0:6f:25:ce:a0:be:0b:
d7:15:a0:d4:27:d4:b0:18:0c:93:e6:3d:1c:73:06:
38:f1:8d:80:52:18:1b:c3:c0:6c:9c:d1:a7:f6:18:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:51:C3:CC:50:4C:E4:9D:11:73:E9:AC:C0:71:2D:E2:55:FE:4A:72
X509v3 Authority Key Identifier:
keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:3d:3b:1b:4e:35:00:85:9f:68:9b:31:b5:5d:20:a4:df:
a1:0c:ba:b9:ac:2d:a8:3f:68:77:a2:2a:ea:b4:50:55:52:69:
99:72:ae:3c:61:49:88:11:96:88:b2:76:65:75:d9:9f:09:49:
53:54:8c:53:f7:c7:3d:31:6d:30:30:a4:63:44:77:bf:e1:a6:
9b:af:e2:6d:7e:11:58:74:8c:99:80:7a:64:4a:a3:20:f7:2e:
c0:d6:92:7e:db:96:26:62:e7:55:70:18:3a:fb:1e:37:78:25:
c6:f2:b3:2d:2b:4a:1b:7f:0b:27:b6:22:1f:6d:bd:e4:cc:1e:
07:44:27:46:de:4d:7b:1a:6e:ab:7f:4f:09:14:57:bb:33:9b:
22:0c:dd:6b:7d:f8:65:69:76:52:53:fb:4b:39:5b:91:9f:f0:
09:8b:9e:71:4a:f3:11:3e:a9:ef:91:9c:ef:5a:24:b4:b9:55:
c7:a4:2a:c4:76:b4:f2:cf:19:35:cd:d5:64:b2:04:a2:59:1d:
4d:56:8e:06:e8:aa:ae:f5:f2:56:cd:7e:19:80:de:7c:0c:7d:
1b:76:90:7a:cf:2f:25:2b:a4:5a:cd:49:e9:25:c8:cc:a2:ca:
32:a8:79:a0:4e:30:4b:05:0f:ba:21:68:35:25:5b:2b:41:12:
26:ec:9b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:17 2025 by rpki-client