Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier: ZuR+pu/NUVTozV+C/aDn6yf+5K/xRjZ4R37j5OmXaLk=
Subject key identifier: AB:31:11:26:FD:72:9D:AC:63:CD:5F:CE:F4:A1:F2:70:B6:F6:5E:5A
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial: 019A4DE1C171B3FFA7D2573E0887A90C9FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number: 0D26
Signing time: Tue 04 Nov 2025 08:00:32 +0000
Manifest this update: Tue 04 Nov 2025 08:00:32 +0000
Manifest next update: Wed 05 Nov 2025 08:00:32 +0000
Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=)
2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=)
3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=)
4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: YB23TIPV+QXQCkBzvYZPkdFqsZPH22DhfEd+0ilyVrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c1:71:b3:ff:a7:d2:57:3e:08:87:a9:0c:9f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
Validity
Not Before: Nov 4 08:00:32 2025 GMT
Not After : Nov 5 08:00:32 2025 GMT
Subject: CN=ab311126fd729dac63cd5fcef4a1f270b6f65e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:78:c8:45:e3:2b:03:b3:82:1c:62:56:40:
b3:31:9d:d5:76:b2:55:2a:24:01:d0:00:17:67:a6:
4c:fd:b9:e0:3e:30:4b:ca:c3:ea:9b:79:2c:eb:a4:
74:5a:d9:3d:37:ad:63:d7:41:bc:aa:ba:6d:69:74:
1c:41:0f:f6:45:28:0d:be:16:bd:61:22:5b:57:9f:
90:7b:66:a7:f6:94:d1:15:b2:22:00:15:85:ab:38:
ea:36:23:db:b9:3b:92:dc:d0:a2:72:52:9c:0b:5e:
77:14:39:9d:6d:3f:67:fb:51:6f:df:9d:7c:83:48:
15:8c:a8:82:86:b3:9f:19:be:6f:1b:cd:dd:9f:c9:
d7:a3:40:82:22:1b:c1:29:50:1d:10:67:c4:26:79:
84:f0:39:d4:d7:1f:04:8c:3f:2e:17:74:52:7a:a3:
02:c7:2b:9f:e4:5c:ba:a2:ef:07:77:65:79:aa:f3:
6c:7b:6a:a5:7d:33:a4:e6:58:39:f7:43:1f:74:98:
39:29:c3:0e:03:02:2c:3c:89:51:8f:7d:3a:b3:77:
0c:a7:8d:ac:79:96:bd:f8:40:cc:0d:d6:2b:cb:4d:
67:9c:e3:c1:e7:67:f9:da:8f:74:1a:77:78:9a:57:
e5:97:5a:92:96:b1:c1:fa:37:82:c0:31:18:56:60:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:31:11:26:FD:72:9D:AC:63:CD:5F:CE:F4:A1:F2:70:B6:F6:5E:5A
X509v3 Authority Key Identifier:
keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fc:60:30:e2:f7:f2:16:6e:71:91:b5:2c:90:e0:73:b1:a6:
53:b8:87:f3:c9:00:9d:0d:51:26:e1:c3:5d:2a:54:74:b0:0a:
77:7b:a2:f9:b6:b1:5b:f8:2a:ba:e3:d7:d2:4f:32:05:ae:24:
21:e9:ae:09:05:93:30:02:7e:61:16:f5:d0:45:ce:51:b7:e9:
75:5e:8b:82:73:49:69:ad:0b:7a:ae:ea:c4:90:be:bf:19:bc:
a5:df:da:0c:00:77:9b:45:a9:5a:03:90:57:2c:16:81:2d:f5:
c1:5e:32:63:48:b5:0d:df:c2:5b:a8:35:ac:a1:14:78:e2:27:
fe:ab:2a:b8:dc:4f:0e:1d:4e:99:c6:ea:74:1b:26:02:97:0e:
91:4d:b8:c3:34:c7:02:08:02:dd:ea:27:a2:aa:25:89:94:76:
6a:dc:b4:de:3b:41:5f:f5:59:a0:e1:6a:2e:48:05:ed:a8:10:
1a:71:88:cd:d9:aa:0d:e9:21:c0:8e:5a:ba:c8:8f:50:54:3e:
77:75:8f:cd:3e:4f:5d:f9:98:55:86:ce:90:11:48:aa:92:23:
ed:5c:dc:8a:7b:43:34:a7:0c:63:85:cb:b2:32:1d:36:4d:7d:
9f:e7:dd:3e:2b:55:e0:61:54:88:e5:61:82:d2:92:34:e0:54:
69:b6:34:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:48 2025 by rpki-client