Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: IwAnLSjTPbtnep1hhsFxq0Xjlk8GTohUZ21BbXynLhY=
Subject key identifier: F3:B0:B3:A7:75:7A:16:EA:1F:94:97:0E:85:3B:CF:FF:A7:91:F4:2B
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 019A50E2C291A4C06432A73DC5BE2AC64D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 13C1
Signing time: Tue 04 Nov 2025 22:00:29 +0000
Manifest this update: Tue 04 Nov 2025 22:00:29 +0000
Manifest next update: Wed 05 Nov 2025 22:00:29 +0000
Files and hashes: 1: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: HL/87FpPhHxwBVmF9q0U95mhtmx+LiZJF4AvYOybLYo=)
2: tscq8RR5-J67nLuusgspLPatxCY.roa (hash: mhooYjP72FJexVsRBpMnu3/8vTwdVxQOmpcDiGXdBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:c2:91:a4:c0:64:32:a7:3d:c5:be:2a:c6:4d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Nov 4 22:00:29 2025 GMT
Not After : Nov 5 22:00:29 2025 GMT
Subject: CN=f3b0b3a7757a16ea1f94970e853bcfffa791f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:c7:54:c4:bd:21:dd:a7:b8:45:0a:54:87:
fa:4f:52:67:c8:27:7d:f4:82:fd:17:1e:b0:2b:52:
20:30:dd:8f:fa:51:f1:a5:d6:7d:b4:87:7f:85:73:
7d:43:65:32:9d:fe:9d:61:98:4e:bc:45:c5:ec:26:
00:a2:16:28:a2:f5:cd:06:74:81:07:27:e6:be:9c:
5f:6c:b6:6b:8b:7a:01:8d:4b:1a:cd:ad:36:15:67:
c3:ba:82:3b:bc:03:12:d6:35:00:3d:bc:14:5f:0d:
e7:5b:b3:65:8c:39:86:71:76:4f:e0:df:f4:00:02:
e0:3a:3b:f7:0f:80:11:3a:ea:0b:10:f6:f4:da:ea:
3d:45:d9:6c:3d:7d:1c:e2:dd:9e:c1:81:c1:a9:4d:
e8:88:15:92:c4:da:ec:57:2c:3f:06:8d:e6:21:50:
e3:04:c9:ef:e6:38:5c:0e:60:20:46:f7:a4:a3:3b:
06:e6:61:4a:07:0a:14:47:2f:63:73:47:63:35:82:
1e:0c:af:15:70:eb:d1:f2:31:c8:da:32:de:6c:17:
1b:43:d5:28:cd:9e:4c:fd:9c:32:9e:7d:93:94:0e:
e9:2e:59:af:c0:aa:40:32:fd:05:21:f4:b3:fe:c4:
d0:cc:03:2f:61:dc:b3:21:ea:f9:30:3f:a2:68:83:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B0:B3:A7:75:7A:16:EA:1F:94:97:0E:85:3B:CF:FF:A7:91:F4:2B
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:3d:80:a8:8b:81:96:3f:71:c9:24:88:06:51:fc:65:eb:
ec:e4:b6:ee:3e:80:48:30:8a:49:99:58:d1:78:5b:71:f7:8c:
ab:bb:98:9d:66:f9:23:64:23:21:03:3a:3c:f6:cb:5e:f9:05:
ce:90:04:eb:32:a6:82:69:34:01:ac:7f:88:77:57:dc:3e:b1:
2f:06:76:ed:99:9f:9c:6c:22:ab:48:5a:5a:57:b2:0b:88:8b:
c3:39:b5:44:22:93:68:4d:2b:97:0e:9f:61:36:2f:fc:9a:26:
ef:1e:1d:97:0a:a3:c3:b7:1f:b5:df:24:40:d2:07:82:2e:19:
b7:4e:b6:71:8a:13:19:73:ee:7f:49:9f:d0:6e:c7:7f:9d:43:
e4:cb:ba:4a:b4:7d:b9:28:d8:c7:76:67:e9:7c:49:e7:35:78:
44:36:71:44:a9:db:41:27:7c:34:53:8c:0b:69:e1:9f:2e:55:
9f:52:0e:06:35:b7:f5:ce:14:0e:a9:eb:a2:3d:80:da:fe:12:
dc:ff:69:16:6a:c0:33:1f:47:b8:d2:bd:ef:d2:11:4b:16:ec:
6e:43:bc:26:08:bd:0a:4d:55:bd:ec:60:c9:80:17:6e:c8:9b:
dc:ed:41:4f:50:00:bb:87:85:f6:8a:ad:5a:1e:af:2e:d6:91:
41:5d:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:16 2025 by rpki-client