Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
File: xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft (raw, json)
Hash identifier: 8AuVDZLG1Do7/5gj+jah33kRHnD91EssGuDCpElvPJQ=
Subject key identifier: 33:14:18:5F:B0:69:39:89:53:A7:B3:82:01:D3:A0:7F:07:FA:ED:B9
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 019A4F6201EE6106B4EBD738F82087FB1CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 15:00:14 +0000
Manifest this update: Tue 04 Nov 2025 15:00:14 +0000
Manifest next update: Wed 05 Nov 2025 15:00:14 +0000
Files and hashes: 1: 8lw7rY_Ajlikule3WA_Zgmg5cis.roa (hash: uoCLZlitJLa4D0er3NIiIxLiXBDaARcafRxsb7h6IVY=)
2: UwWcIaqQRE1DQREqUyPP2KFZpkQ.roa (hash: HnBuQV/6MGAsdCkHVntRtFAvZeGR4LaMonjb9Ez79gg=)
3: Ymnq870-hTRbzxW7QHa4AoItEis.roa (hash: EVgp5rZ0myk3IS//+2PgncuHs2ECv2APPwVwVowLkug=)
4: xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl (hash: vxc1yh78FYmoe0L8XzJkA9w8BSWXDx66ESx+7poo9MA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:01:ee:61:06:b4:eb:d7:38:f8:20:87:fb:1c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Nov 4 15:00:14 2025 GMT
Not After : Nov 5 15:00:14 2025 GMT
Subject: CN=3314185fb069398953a7b38201d3a07f07faedb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:af:4b:5a:04:da:c9:14:e0:a7:b8:db:4a:
d0:b3:f0:01:ad:cd:45:6b:9c:95:c7:a6:42:3b:75:
4c:90:95:ad:80:79:b4:d2:96:69:0a:59:51:ef:d6:
ce:93:8d:12:b1:51:41:ce:4a:03:04:3c:3d:04:18:
df:14:d7:d2:82:c1:4f:01:de:bf:d7:6e:aa:09:bf:
c9:5f:d7:06:ab:8c:d6:06:66:67:02:c8:ea:88:7c:
2e:15:57:fa:fd:87:2f:52:c1:75:03:48:a6:49:b6:
a3:0a:b7:83:8e:7b:9c:57:18:68:ef:73:09:0d:05:
67:fa:13:18:ae:fa:db:7a:42:f5:4c:0d:85:94:e6:
67:18:70:d4:84:59:5c:f7:e4:3c:56:db:c3:ec:1a:
bd:1b:5a:85:37:53:05:c5:d5:a3:89:c5:f2:c1:f7:
27:81:52:ca:1c:a4:09:91:b4:9e:3f:71:c3:1c:4f:
4b:68:c4:6b:3d:82:0e:54:57:3e:ba:3f:5e:ba:bd:
b8:f8:e1:a4:d2:5e:fd:26:2e:8d:20:d8:98:b6:ce:
8b:b1:74:5b:a5:a3:77:28:5f:ea:e8:1c:f4:23:38:
6d:3b:10:af:93:6f:95:32:83:7b:98:dc:ad:2e:91:
e6:ad:1b:d1:f4:82:53:57:0e:36:45:a9:d7:6d:3f:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:14:18:5F:B0:69:39:89:53:A7:B3:82:01:D3:A0:7F:07:FA:ED:B9
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:50:73:53:e6:c9:a0:b6:ce:12:b8:cc:aa:81:42:70:31:2c:
06:e3:94:0e:87:46:2e:c3:df:e2:c8:e5:d8:4a:c9:84:f8:02:
0c:c7:37:ab:6f:f1:5d:22:68:ba:a8:ac:c4:1c:6a:b4:be:a7:
be:1c:35:37:4d:c0:f4:df:fa:01:4e:4e:c7:53:27:76:1d:2a:
6b:00:c9:1d:53:84:2e:e8:bc:fe:71:10:ec:2f:bf:70:a8:cf:
b8:cb:86:b4:ed:6f:cb:59:94:5c:b1:0f:12:df:93:81:36:dd:
3a:c1:2f:f0:6f:da:5c:76:59:f5:f1:3e:7f:68:cd:f6:f2:a5:
7b:66:1b:64:95:40:24:50:2b:d0:47:30:b1:c3:92:f3:d7:ed:
74:89:3a:52:45:af:e3:3a:6e:c0:28:31:96:a1:ba:5f:c6:ce:
e0:98:5b:e8:d8:22:24:38:b6:59:95:ea:e1:a4:52:a4:08:6e:
5c:31:7e:57:c1:07:2e:a2:4a:95:c2:e9:2a:2b:ab:62:4d:ff:
a5:d3:15:e7:24:14:d6:2c:12:a6:7a:c1:9b:b0:a5:12:69:cc:
d9:60:ed:21:c6:37:de:f6:c3:72:e9:ee:71:48:7a:79:7e:49:
36:4e:d2:7e:44:25:2c:78:b3:ba:7b:3b:a2:d5:0f:29:07:31:
c8:8a:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:32 2025 by rpki-client