Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: 9KRLmm/mvZTAVTIGuQIFFrwct+oDDpIqloRnpwfMtDc=
Subject key identifier: BE:07:CB:64:5A:BE:B6:90:AE:28:DE:CE:BE:2A:27:6D:81:16:43:DC
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019A53ACC279A89404C1B3B9C6784D1295F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 04A8
Signing time: Wed 05 Nov 2025 11:00:22 +0000
Manifest this update: Wed 05 Nov 2025 11:00:22 +0000
Manifest next update: Thu 06 Nov 2025 11:00:22 +0000
Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=)
2: 3MrTzqXRqi4qw3h6oaqykX6J0kU.roa (hash: +ClOERLFY4P0cwxaW/Im6eS4rQN8CdS+8xi58ep6Alk=)
3: 4is7oarlUlE_cBHOgTitgHxyrkc.roa (hash: qZVlByTSh1XFAvIhseY4HhxihXTQeYS+WUxMcII1cZU=)
4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: 0buIfm4mgD+IfUy3g3ysh///NH07sdjxN1KKcnru66o=)
5: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:c2:79:a8:94:04:c1:b3:b9:c6:78:4d:12:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Nov 5 11:00:22 2025 GMT
Not After : Nov 6 11:00:22 2025 GMT
Subject: CN=be07cb645abeb690ae28decebe2a276d811643dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:56:98:ba:d1:8c:42:2d:4a:3e:17:4e:21:
38:5e:6e:6b:0f:3e:5b:af:09:c5:63:04:24:be:f1:
b9:ec:27:8d:01:ce:06:51:95:d9:92:6e:28:bd:60:
03:44:ee:ae:d1:9c:a4:ec:7c:0c:6b:ce:8e:e7:59:
95:9b:a3:b1:5e:a4:c1:f3:7d:25:47:8a:47:b6:60:
73:ee:0f:26:84:a7:95:4f:7a:20:bf:69:39:66:74:
8a:d2:cc:01:28:e9:e5:50:e5:89:22:99:91:39:a7:
4e:e4:98:f3:b8:cb:b0:88:cf:1c:c0:15:96:ab:ca:
06:3c:31:55:a6:5b:72:90:30:50:32:8c:09:5b:be:
07:28:1e:60:26:3e:23:e2:90:fd:26:29:52:d6:c9:
bf:9f:3a:2f:19:46:9a:52:37:f6:b0:4f:28:28:24:
37:e7:84:4a:b3:01:60:0a:f5:a3:c1:34:e3:03:89:
b3:8a:70:db:ec:77:4c:5a:46:d8:39:4f:ce:f0:e7:
73:f4:af:d0:00:11:b5:59:62:89:17:00:9e:8c:d6:
6d:65:4b:34:a3:74:b1:d5:29:52:99:18:48:5f:cb:
68:a3:91:55:b2:0a:fc:06:fd:e3:3b:d8:e9:d9:6e:
cd:fe:d4:f1:4d:ca:57:c1:7b:93:dc:a7:62:5e:78:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:CB:64:5A:BE:B6:90:AE:28:DE:CE:BE:2A:27:6D:81:16:43:DC
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:52:0b:f4:aa:f1:7a:6a:37:2f:59:85:74:59:07:01:fa:61:
8b:82:ba:22:43:8e:4b:d6:e4:dd:60:26:a7:3e:e4:de:56:2c:
c4:9b:ca:55:a4:c0:c6:72:e1:e3:10:d5:37:69:cb:06:b1:07:
5e:f2:36:38:f9:71:94:22:d7:27:85:8e:e3:c4:ab:dd:8d:b6:
35:49:93:d7:c9:2c:25:bb:88:17:16:e5:e7:39:06:5b:d4:ed:
a5:13:79:d3:ff:68:f5:4e:19:08:4f:38:7e:bc:30:b7:54:6a:
27:e0:d5:f0:e8:32:a1:4d:66:38:af:e3:fb:74:dd:a1:37:8a:
84:e7:3e:c3:65:b3:12:9d:0c:87:9e:98:f1:4d:c2:0f:5f:32:
4a:a1:9d:01:ed:f7:09:22:79:83:81:b9:ef:16:fe:1b:cd:d4:
1a:7b:f0:60:15:e0:ac:df:7d:f8:41:83:4f:09:cc:0b:70:62:
a7:32:0f:40:77:e3:93:35:c5:f4:f2:ef:bf:82:5a:c4:c5:00:
1c:98:9b:89:47:a6:5b:3a:6b:4f:51:67:4f:07:51:93:68:cb:
29:1b:42:f6:fe:3e:70:30:0c:f3:35:a0:44:b5:25:0c:44:aa:
42:7b:60:bc:4a:91:e3:09:e8:4b:18:f0:d2:99:9e:14:db:b5:
c8:ed:ef:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:30 2025 by rpki-client