Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: SoK3niE4VwruSozVzunrfhW6LX93AfxaYGHFbDAsW5g=
Subject key identifier: 76:FD:59:B3:8A:F9:6A:71:E1:EC:3E:C6:1A:36:49:17:FC:C4:C4:D9
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 019A5006E716E8458D7FAD98C2711D9FCAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 1304
Signing time: Tue 04 Nov 2025 18:00:20 +0000
Manifest this update: Tue 04 Nov 2025 18:00:20 +0000
Manifest next update: Wed 05 Nov 2025 18:00:20 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: HoZ87L5gqktIJGJZ5wR0XQNgD+OJ0aRG3WxriPlOsrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e7:16:e8:45:8d:7f:ad:98:c2:71:1d:9f:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Nov 4 18:00:20 2025 GMT
Not After : Nov 5 18:00:20 2025 GMT
Subject: CN=76fd59b38af96a71e1ec3ec61a364917fcc4c4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:3c:e3:1c:85:34:00:cc:ee:3c:4c:f0:b7:
62:56:30:54:ab:76:c2:45:4a:84:61:dd:11:6b:6b:
e5:2c:a9:ea:70:d2:16:b7:b1:e9:de:19:34:20:29:
7e:c7:3d:24:4e:0a:16:2c:47:6e:4f:a2:2e:4e:ef:
45:f2:5b:78:f9:29:b4:f9:0e:83:28:dd:dc:e1:47:
fe:51:d3:91:72:64:03:9e:88:45:e4:e4:cc:b0:93:
58:db:b0:82:5a:e0:22:11:58:f9:66:cb:ae:e2:43:
85:ad:00:ef:1b:81:25:77:fe:68:4a:5d:e2:43:af:
c8:75:7a:5f:40:0b:da:48:df:14:7d:be:b6:cf:e6:
fd:03:c0:d3:94:a8:40:d4:3f:f7:5c:80:97:4a:88:
cc:b4:0b:8a:3e:de:ab:b4:91:02:c3:df:99:3c:10:
67:37:37:78:74:af:41:70:95:ff:54:cd:47:c8:7d:
8f:ff:c7:25:1a:97:f9:92:54:3e:55:ac:4f:99:bc:
92:62:d7:82:18:15:f7:34:2f:f1:3f:ab:01:d8:69:
a5:4f:f2:67:cc:40:35:59:6b:83:fa:fd:9a:a1:c8:
9e:ce:66:27:ef:64:37:3a:6d:d9:52:ba:e5:02:e9:
b1:ac:63:98:4b:ad:7c:94:32:a7:a3:73:9f:e7:f4:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FD:59:B3:8A:F9:6A:71:E1:EC:3E:C6:1A:36:49:17:FC:C4:C4:D9
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a3:32:1c:86:5e:95:8e:bb:e8:f2:a5:84:e3:7c:37:b0:e7:
78:55:3c:17:47:3a:b8:51:5e:a0:fe:ee:a6:1b:a6:e4:e6:6e:
cd:70:f6:27:76:82:ec:72:b5:a5:43:bd:4e:5d:03:9d:7e:5c:
2d:34:13:e4:1e:3d:ba:db:5e:7d:2f:b6:e7:a1:be:cb:5d:29:
d5:5c:8d:0e:0f:72:7f:54:48:2f:c0:87:08:42:27:9d:ba:d0:
09:e7:c1:fb:85:ab:71:a0:a2:1f:60:31:fa:74:97:aa:10:34:
10:bc:73:3e:f1:e0:d6:72:5f:db:bb:fd:71:3b:e3:2f:3f:a9:
de:f7:3c:68:1b:7c:b0:80:39:fd:e0:98:36:ba:92:16:88:c9:
0d:26:43:77:be:74:0a:94:4d:d4:9a:bd:2b:62:a5:38:ce:96:
ab:10:18:ce:0d:e5:c1:db:66:f3:a2:ac:42:d3:1c:c8:d1:68:
58:df:a0:62:53:a7:d7:81:13:bc:2f:4a:b0:d0:84:70:a1:cb:
42:02:24:8a:8c:82:c8:ee:c3:7e:25:bd:1f:1b:13:36:f4:a1:
01:09:8b:54:7b:c0:c9:f3:dc:f7:d5:4d:d2:81:6a:62:01:a7:
7b:92:50:05:99:10:42:da:9f:ca:57:01:8e:79:00:0c:b7:f1:
12:c1:f2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:00:54 2025 by rpki-client