Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: UMvg4xihPuLF8vZBw3KStqymLW3YiZOo1TaX1ViVTww=
Subject key identifier: 47:20:F2:9F:3A:D7:9C:7C:A3:39:92:13:5A:80:9A:D2:FE:78:C7:83
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 019A4DE1B708065CD7E268B7A94EE7582D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: PzI6reQTy+2lkl12dhI4OwpIi2iam2NJpsC8XwkFdbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b7:08:06:5c:d7:e2:68:b7:a9:4e:e7:58:2d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=4720f29f3ad79c7ca33992135a809ad2fe78c783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fc:22:65:da:8c:cb:a7:22:9d:3a:2c:9a:58:
16:f6:e0:f8:a1:5b:91:0d:b1:8a:c5:c3:94:9d:f4:
5d:7c:5b:27:74:a0:be:b0:f1:2b:34:fc:06:1e:16:
e5:2d:e1:1f:0f:fb:69:03:24:6c:58:c6:49:16:d2:
97:ae:98:01:3d:e0:e2:5c:36:94:df:7a:60:5a:75:
85:99:94:c0:a0:ff:7b:4d:ba:a7:c4:7a:35:64:ea:
d9:39:b6:2e:00:fc:63:0c:c2:b1:14:ca:1c:8c:3f:
5a:00:25:86:50:ea:56:17:51:ca:bf:2a:83:8d:9f:
9b:6f:fd:19:09:de:d1:c8:fa:43:1b:b1:14:ab:13:
0a:c0:84:13:2e:75:a4:f8:87:e9:f2:4a:c8:5c:c6:
3b:ec:a6:9e:7d:70:43:4d:72:8c:b8:10:7e:8e:4d:
52:0a:8e:95:28:45:8f:6f:2d:ec:28:da:73:50:81:
1e:c1:3e:68:63:48:70:f1:a1:5b:84:2e:90:78:4c:
4d:fe:09:81:85:09:77:14:f2:42:b1:f2:30:09:05:
e2:05:2e:5c:7b:c6:84:02:b3:7e:17:f2:3f:89:f9:
fa:56:fa:02:6d:ec:83:c6:a6:6a:fd:03:80:a3:b8:
b5:e7:d5:c2:5c:af:8d:16:a5:fd:a5:54:0b:e9:39:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:F2:9F:3A:D7:9C:7C:A3:39:92:13:5A:80:9A:D2:FE:78:C7:83
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:66:38:ca:51:bd:f8:6a:d0:a1:e8:39:b2:3d:7b:22:8c:29:
df:57:02:ba:e9:8b:88:12:26:7c:3f:f2:42:fc:be:02:93:81:
cf:0a:15:8e:d9:18:3b:3f:78:61:4a:9b:3d:30:e8:c2:ad:0d:
a1:5a:eb:33:eb:0d:f3:9b:c2:f9:e1:de:d5:4c:bb:a7:31:d0:
c4:a0:42:fa:8f:47:4e:00:f3:dc:5f:3f:16:b6:c9:ed:a9:3a:
c0:26:b1:04:93:8c:13:e1:85:22:63:ff:78:ad:80:c9:da:a2:
96:74:89:70:bb:72:53:c1:2c:db:2d:75:23:eb:03:4c:b0:37:
1e:ed:c3:c6:00:4b:f5:b7:93:5d:01:f5:fd:8c:8c:69:df:b2:
c9:d1:74:4e:ee:c1:26:c2:8e:25:68:80:3d:9a:7d:af:b9:5b:
8f:8d:f1:40:76:8d:a5:cd:85:b0:00:bd:bd:f0:9a:c4:b7:b5:
75:ef:5f:c3:c8:d5:20:a0:06:44:d5:31:08:b8:ba:e1:a1:ec:
45:7b:81:a5:e3:24:97:0d:5d:cc:e0:40:2e:23:d9:78:35:19:
f4:a1:9d:aa:0e:13:d9:64:fc:cf:71:93:ac:a2:c3:f7:71:ca:
2c:9c:8a:65:1d:31:7e:04:5a:cc:e0:94:2c:48:90:fc:ff:f5:
1c:fa:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:41 2025 by rpki-client