Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft (raw, json)
Hash identifier: Tzh514A84UGp+K7B9k+eZmjRSfChTamQQXJlGiOrF6M=
Subject key identifier: 7D:D0:9F:8B:5C:51:0C:06:73:56:A3:7B:8C:4D:F8:D7:34:2D:D7:78
Authority key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Certificate issuer: /CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Certificate serial: 019A4EF50EFA45CA0C93F9C1B6CFEFF14844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:01:14 +0000
Manifest this update: Tue 04 Nov 2025 13:01:14 +0000
Manifest next update: Wed 05 Nov 2025 13:01:14 +0000
Files and hashes: 1: Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl (hash: XycSC4EvDCwFgwnae/DhlpRsjbZTaUjHzi5TDY9BZU4=)
2: dOe2C3PomUnQ6xc35HptdqNgMBQ.roa (hash: Xuv+aCcr1f8IKITCeJK5u15I1LDGKs+9hvrLxQLOxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0e:fa:45:ca:0c:93:f9:c1:b6:cf:ef:f1:48:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Validity
Not Before: Nov 4 13:01:14 2025 GMT
Not After : Nov 5 13:01:14 2025 GMT
Subject: CN=7dd09f8b5c510c067356a37b8c4df8d7342dd778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:de:7f:b6:2e:63:78:c2:86:45:7d:34:f3:
f4:0c:6e:ea:f6:1a:0a:85:95:41:20:74:0f:e3:57:
26:82:e8:d5:7c:fa:6c:11:c5:9e:10:8c:3b:3e:a3:
e3:26:d2:a4:eb:7f:29:43:6d:65:0f:d9:7c:94:db:
b3:db:8f:24:31:87:bd:19:48:7b:39:56:e8:2b:06:
32:43:c0:38:7e:bc:9f:a3:d2:4b:d5:58:33:91:ee:
26:84:fa:eb:7e:b4:54:76:f6:3d:71:8e:53:07:ca:
0b:5d:4f:08:2a:3b:07:10:36:b2:cf:f7:d8:6e:e4:
65:5d:ad:50:2b:39:39:d8:56:33:a8:22:c7:c3:e1:
70:cd:c5:2c:fe:66:1c:94:34:18:f2:ed:03:52:34:
14:96:fe:df:7e:70:af:43:e6:b9:9b:62:9e:6f:8e:
4d:d8:71:12:d1:30:13:98:b6:d9:05:2e:35:27:b4:
3a:46:16:64:bd:d7:8a:fc:98:61:70:14:22:a6:96:
90:73:e5:99:58:23:7e:79:d5:f3:7c:24:0b:eb:8c:
10:d4:28:69:29:f9:e4:b3:47:98:8a:c9:84:45:b6:
d4:4a:cb:82:92:eb:88:93:4c:2f:6e:82:ad:0e:97:
e4:d3:07:60:ee:76:db:bb:4c:08:28:03:1c:de:9d:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D0:9F:8B:5C:51:0C:06:73:56:A3:7B:8C:4D:F8:D7:34:2D:D7:78
X509v3 Authority Key Identifier:
keyid:5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:58:4b:bc:93:c4:b6:ca:f1:f8:87:d5:9e:c5:34:ad:16:3a:
18:48:a1:5a:11:9d:a5:8a:33:81:55:8a:74:01:20:86:32:71:
3a:6b:d7:e1:72:aa:55:ed:49:f3:dc:32:69:ce:18:96:f7:37:
5a:4d:5e:4e:7a:59:c0:8d:d1:d3:70:f7:be:d8:fe:54:27:89:
14:94:0f:69:50:37:31:0b:d8:e3:4d:54:27:8d:79:e2:42:11:
5f:f1:3b:a4:cd:8e:e7:6f:eb:c9:61:79:a1:8b:47:ed:ef:20:
0d:e1:c4:00:d0:87:a3:c9:8c:ac:2b:79:64:6e:a0:58:d7:94:
fc:65:3d:ac:bc:fe:7f:78:dd:f7:d2:aa:66:91:97:cc:9e:90:
63:c6:7e:05:9f:bb:3f:f9:72:03:08:5d:eb:26:d3:9a:5d:73:
62:a0:b6:33:6d:96:9c:c8:11:07:4d:13:2c:44:23:3c:99:69:
ce:73:43:ec:67:e8:f2:1c:74:05:85:0a:2e:ef:42:dc:d0:71:
21:78:6c:ec:3c:34:e2:dc:00:aa:84:70:70:cf:b2:2b:b2:2d:
82:06:67:dd:85:1f:b9:c6:f9:67:b6:0e:c6:a0:28:db:20:9e:
a2:64:c8:fa:a7:9f:97:63:4a:2e:f7:68:48:61:cc:0a:1f:b8:
c2:6c:60:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:36 2025 by rpki-client