Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: jht5MZrkTZMIcmwbHhVX4BnRzjJMAZOLw0by8riHKj0=
Subject key identifier: 31:89:0A:AC:6B:41:12:53:F1:57:99:FA:1B:6B:2B:42:A9:9A:99:9F
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019A4FD006ACF534AA8A1754CDD2B74F64EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 04A6
Signing time: Tue 04 Nov 2025 17:00:24 +0000
Manifest this update: Tue 04 Nov 2025 17:00:24 +0000
Manifest next update: Wed 05 Nov 2025 17:00:24 +0000
Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=)
2: 3MrTzqXRqi4qw3h6oaqykX6J0kU.roa (hash: +ClOERLFY4P0cwxaW/Im6eS4rQN8CdS+8xi58ep6Alk=)
3: 4is7oarlUlE_cBHOgTitgHxyrkc.roa (hash: qZVlByTSh1XFAvIhseY4HhxihXTQeYS+WUxMcII1cZU=)
4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: dLOaxhcx8ZrUWzNzweBIWq+Vq9w6eTvLau9+Kix1O6g=)
5: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:06:ac:f5:34:aa:8a:17:54:cd:d2:b7:4f:64:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Nov 4 17:00:24 2025 GMT
Not After : Nov 5 17:00:24 2025 GMT
Subject: CN=31890aac6b411253f15799fa1b6b2b42a99a999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:a3:e5:be:86:cb:36:4e:7d:99:9b:0c:47:
5a:31:ab:05:31:f2:29:8d:f7:a7:ee:4d:a5:12:99:
a5:78:d9:2a:9f:98:69:28:d8:57:fc:e9:c8:13:f0:
f5:0a:c2:e6:ab:64:ca:6f:f4:ec:5e:91:ac:08:92:
81:98:f1:3c:cf:1f:a5:7a:25:f1:6a:7e:6b:b9:f0:
05:b9:9b:30:ab:c7:ed:52:b5:bd:34:93:1d:75:db:
83:b5:d2:43:1f:be:aa:55:0f:49:ec:57:86:4b:ae:
6e:42:9a:df:ce:f4:99:4e:a5:fc:ce:48:60:5f:fd:
8f:5e:93:2e:15:df:bf:8a:9c:6a:44:b3:94:bf:b3:
f8:25:41:db:99:40:c3:d2:96:01:48:f0:7b:9a:05:
0a:ad:7a:49:9c:28:80:d1:ed:15:4c:d5:95:20:46:
e0:ce:2b:2d:16:d8:11:7a:bd:54:aa:3f:3a:78:e8:
b9:d8:e2:1d:82:34:62:10:7d:e0:d4:eb:19:50:cd:
4e:a5:4d:dc:b9:08:3b:de:d5:f9:e6:dc:c8:d5:15:
77:1d:ab:c3:e3:6f:5e:b7:f8:09:4b:87:e4:1e:92:
bd:a6:3b:de:23:9d:54:b9:8c:5d:67:16:b9:1b:81:
2d:fa:5a:7f:6a:cf:83:11:dd:82:3c:7b:82:37:37:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:89:0A:AC:6B:41:12:53:F1:57:99:FA:1B:6B:2B:42:A9:9A:99:9F
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:7f:f4:d4:2b:38:21:46:86:4d:45:bc:f4:de:70:ee:70:
d8:0b:f4:d9:04:60:ac:59:7b:19:7b:b9:60:54:60:f1:ba:2c:
37:f9:4c:bc:12:e2:3d:b5:2c:ba:27:58:0e:9c:f0:8a:35:c6:
43:86:e1:2f:50:bb:7a:93:74:df:d7:d5:5d:33:d1:25:2b:a4:
ae:01:25:25:7f:e3:8d:72:a2:d3:23:56:23:96:72:ab:22:b5:
4b:20:4a:65:f7:4e:9d:ed:0d:cc:97:52:26:f4:5c:f6:9b:ab:
bc:bf:f1:6a:0c:a4:2a:cb:18:f1:86:6a:1c:2e:fa:b3:5f:e8:
cd:c4:5b:9a:9f:57:c2:ee:e4:2c:29:40:24:7c:56:db:af:b6:
bc:27:86:d8:2e:4e:73:5c:5e:40:3a:9e:19:90:a0:a5:75:19:
03:7a:a0:27:ab:0d:a8:d2:9d:16:6d:b2:af:b5:78:f2:2f:7e:
fc:c1:54:bc:14:46:f1:aa:04:0b:87:b7:27:a6:27:fe:eb:77:
44:ea:d6:cd:69:46:6a:15:82:14:76:86:44:d9:84:ee:d7:d3:
01:06:0d:58:74:df:43:04:52:4d:73:ff:61:ec:36:1e:36:93:
0b:f3:58:85:33:66:33:eb:c2:82:e0:7f:97:3e:d9:13:63:26:
1d:38:13:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:58 2025 by rpki-client