Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: hsQqk7ggy6WuXJKqDmM3syZ9X7x77usiuNZwE4i4v5M=
Subject key identifier: 6C:A0:0D:0D:95:5D:92:CF:B0:C6:DF:1D:EC:84:E7:1A:1D:97:F2:50
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 019A4EF442C89FDB9DFCD6A8B1AFCFA6ACA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1737
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=)
4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=)
6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: TMC2INdHK595wqYLzvwp3g5TZOvYQ4EbQzYwjTFL05w=)
7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:42:c8:9f:db:9d:fc:d6:a8:b1:af:cf:a6:ac:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=6ca00d0d955d92cfb0c6df1dec84e71a1d97f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:f7:46:b1:ae:4f:94:fe:6e:a1:b0:2d:a2:
ed:b9:71:a2:49:aa:4a:da:bd:7a:98:aa:c8:c4:27:
89:22:4e:4f:65:78:32:08:86:cd:c0:96:10:a2:84:
99:5d:9d:af:8f:ba:99:55:d0:8a:03:fd:af:9e:dc:
8d:ae:30:bd:0a:57:66:65:e6:cd:aa:3c:40:9b:f6:
5d:d0:b9:7b:6a:e7:21:32:41:6e:e3:a5:0f:6e:86:
6a:66:3b:83:77:3d:2c:73:20:69:38:af:ab:f2:6f:
ad:2a:fc:ca:18:67:70:a3:71:05:79:fe:79:a5:c8:
12:61:60:a6:9f:2a:62:f7:cd:9d:cf:17:87:77:90:
10:03:85:57:25:3c:55:30:d6:16:38:cf:4e:2a:a9:
95:e2:c5:33:64:25:6f:be:53:f0:4c:18:b9:f8:02:
e5:ab:4b:06:a0:42:bd:13:74:71:be:40:43:a1:4c:
a7:e8:00:bd:44:6c:eb:a6:02:05:4a:63:c6:db:0a:
4a:0e:a1:9d:63:7b:40:7e:e3:cd:11:96:58:85:6a:
9f:67:b2:6c:f3:cc:82:3a:35:05:86:68:ef:67:db:
b6:bb:28:00:12:35:d3:56:60:ba:82:8e:c3:45:32:
f5:66:b7:67:0f:c6:ca:47:57:38:2c:79:a3:f4:24:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A0:0D:0D:95:5D:92:CF:B0:C6:DF:1D:EC:84:E7:1A:1D:97:F2:50
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:04:0d:a6:54:42:05:34:b2:79:f1:d0:10:1a:75:38:63:ef:
37:7d:63:3d:c8:45:9f:5a:5c:69:48:0f:1d:c0:10:01:f3:9c:
43:40:1a:92:a7:e7:a4:bd:15:5b:f7:49:24:2b:24:0a:bf:54:
df:fc:70:7f:ae:20:c6:6c:a7:aa:af:a8:cb:3a:55:d2:34:f4:
8e:22:bd:4d:a0:4c:7d:b4:61:3b:12:56:d6:07:6b:9b:79:1b:
e9:80:01:24:20:fa:33:1c:85:eb:fd:7b:59:f6:2d:70:6c:96:
ab:54:dd:76:c5:02:29:79:1d:74:47:c5:7b:c6:68:0c:d4:d9:
92:a3:f8:47:99:d0:39:75:9e:19:ad:79:a4:28:57:c1:7c:88:
19:a6:ae:2e:35:ec:30:82:a0:5f:1b:4f:4e:0e:7b:d1:58:1a:
78:d3:b3:e3:7f:fe:42:b7:b8:75:42:4e:af:88:98:3e:cd:1e:
38:92:38:6a:c3:7b:d0:ab:96:64:c4:86:f7:7f:02:86:a2:a9:
40:bd:0a:7e:a7:ce:4d:9d:6b:9b:81:e3:28:09:c8:96:03:80:
6a:15:c1:83:c4:5a:16:4c:d9:da:81:4b:8b:98:57:e9:06:ec:
a6:45:01:e0:8a:5f:18:8b:e4:66:59:96:bc:1c:03:e3:9b:fc:
58:b2:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:22:57 2025 by rpki-client