Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: ChNeWRJ20rGv7scGpxeRtMkV7qL4LPp1HOqo8ps8xBQ=
Subject key identifier: 25:C2:37:B8:11:EF:4A:18:DC:E0:D6:D9:5E:7D:25:F5:96:74:F4:62
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 019A52D1A825235F8EE9AFB097A41774401F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 02F4
Signing time: Wed 05 Nov 2025 07:01:03 +0000
Manifest this update: Wed 05 Nov 2025 07:01:03 +0000
Manifest next update: Thu 06 Nov 2025 07:01:03 +0000
Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: DIrY6ntHQVypEs8KlFLkttvvQ6sRe6H3nXesGF7xVes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a8:25:23:5f:8e:e9:af:b0:97:a4:17:74:40:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Nov 5 07:01:03 2025 GMT
Not After : Nov 6 07:01:03 2025 GMT
Subject: CN=25c237b811ef4a18dce0d6d95e7d25f59674f462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:e0:f9:e6:a8:cf:17:9c:46:ae:e7:56:f9:
c1:88:51:aa:46:d0:61:e1:68:39:16:d2:42:5d:c0:
aa:9e:9b:9f:ab:f5:32:6b:01:bb:29:2b:09:ae:36:
73:28:ad:50:f9:42:0c:b9:2f:b7:ca:b6:1b:75:64:
52:b0:b4:6e:40:5d:eb:40:f0:0b:02:48:80:3d:be:
5d:37:70:94:82:20:b1:ca:17:5a:8b:36:07:ab:70:
a3:61:18:fa:58:0f:e3:09:80:17:2b:7e:08:08:16:
99:af:d5:94:cd:2e:a6:f3:a9:d4:44:1e:12:e9:59:
ff:43:0c:66:00:cf:32:70:97:26:ba:4d:a1:b7:cb:
be:c7:13:2e:86:10:42:ad:2a:65:26:9f:f2:71:49:
28:c5:42:c7:b7:d2:66:b1:99:be:c0:d1:76:9b:ba:
f1:56:15:cb:20:12:19:15:b1:e1:e5:39:78:53:51:
6e:68:68:a8:a3:00:43:00:61:fa:32:34:66:18:ae:
e9:8b:7f:99:36:51:b5:0b:71:87:52:38:87:64:25:
71:3a:f7:e5:59:2a:f7:a3:50:a0:8e:79:12:f8:ff:
fc:e2:02:64:ab:a6:3a:bc:9f:32:31:de:43:da:cd:
41:85:d1:8c:74:b6:8c:1a:0a:b5:9f:5e:90:13:18:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C2:37:B8:11:EF:4A:18:DC:E0:D6:D9:5E:7D:25:F5:96:74:F4:62
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4c:0a:ec:78:cc:9e:76:d6:ed:6d:8d:b0:94:49:26:8c:41:
39:b9:6d:3e:f7:45:81:62:2c:35:81:67:e9:f0:d6:91:57:05:
ec:8f:38:a7:f1:a8:dd:62:47:11:96:2c:fe:ae:45:02:b5:cd:
84:91:76:af:f9:fd:fa:a1:26:fd:59:8e:d3:2f:e7:42:ca:ff:
9a:af:69:e5:1b:ce:4e:71:b8:79:cc:ea:21:c7:ec:6f:56:ba:
76:20:7b:f6:7b:03:2e:41:8d:7e:2a:64:45:d6:2b:af:9f:ae:
2a:1c:8c:b0:19:9f:9f:ba:be:34:1e:35:c1:82:bd:5c:ad:6d:
14:02:b6:34:d7:d6:45:3f:56:40:de:47:db:be:1d:b9:15:d7:
db:56:e7:50:2d:66:1f:10:f8:d0:74:ba:b6:cc:21:68:d7:77:
0d:8c:9d:93:fa:08:e1:0c:f9:38:0a:a2:29:d4:ee:42:20:d9:
60:e0:45:5e:17:67:5c:d3:cf:ac:2e:2b:07:35:14:49:8e:0c:
17:50:c8:a6:39:d9:bc:6b:3b:87:a6:bc:c8:24:1b:6c:83:ed:
3b:a7:c3:97:01:ad:ce:ac:a1:34:5e:19:c4:e9:3a:c6:0e:5e:
57:20:b3:cd:8f:75:a6:ac:a2:81:07:df:13:39:8f:fe:07:2e:
59:33:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:25:06 2025 by rpki-client