Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: SSaP0wFwGSyR3D+OJ6NCftEt+RtECoTuEnrqwMVUlZw=
Subject key identifier: 73:EB:09:27:42:76:1E:BA:09:DD:1A:2F:28:16:01:00:86:8B:40:FF
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019A4E4F8365FD0ACE52A26DD9C7D4C845DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 150E
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: ueBb6XAUF6o0wgWHrBMyAvCjDcw.roa (hash: FG2GqOv/aixTR0aGnuCtGnWbZFyWEpFgUNZYVCVmlOI=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: +ujgPhC1FWQwcwVJb+/IasIHlHjxL4mzIWJGlSjgRQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:83:65:fd:0a:ce:52:a2:6d:d9:c7:d4:c8:45:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=73eb092742761eba09dd1a2f28160100868b40ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:47:51:0e:c9:5e:cc:9e:f7:6f:28:29:24:
ce:e3:61:18:2d:bf:0e:d4:c3:e7:80:84:a2:67:03:
a6:0c:95:e3:50:13:82:6a:89:eb:a8:b0:eb:28:75:
cd:f8:c4:0c:18:ad:83:16:88:0d:b3:d8:fb:c8:80:
15:b1:47:7c:6a:62:d1:f7:6f:60:aa:41:04:1f:be:
bd:87:6f:d7:29:7e:f1:e6:5e:d8:c6:79:ec:65:29:
1c:c3:0f:8f:d2:cd:d3:e7:76:a3:a1:a4:73:30:99:
7a:53:a3:63:8f:ca:e6:58:7c:7a:37:3e:15:03:9b:
fe:be:7c:86:07:2a:aa:a7:5d:4b:4d:fd:2e:35:57:
04:c3:38:e1:b1:7c:42:2b:e1:0f:1a:56:25:c4:c4:
51:a3:ba:b3:54:a8:ad:1b:0c:2e:b2:62:41:5c:33:
60:20:83:bb:0b:95:eb:14:27:4c:64:e7:a6:6d:0f:
ae:9d:b6:da:e3:6d:0a:e8:7f:5f:3a:8b:48:04:b7:
8d:cf:fd:6d:34:42:40:34:89:ab:22:01:ca:0c:f3:
8d:09:50:76:9b:b8:3f:d4:47:e6:a8:c5:70:3e:1e:
4c:31:36:03:46:7d:3d:26:eb:b9:50:f1:2d:c9:5e:
68:99:f2:5a:4b:0d:93:0e:5b:f7:78:4c:78:63:05:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EB:09:27:42:76:1E:BA:09:DD:1A:2F:28:16:01:00:86:8B:40:FF
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:88:07:61:bd:08:4c:54:7d:7f:c9:0e:3e:06:6a:79:81:b7:
a9:ce:b7:91:11:42:b0:4a:b7:30:14:30:fc:2d:38:89:81:52:
b7:6a:a6:2f:c0:43:5c:81:31:3a:f4:29:0b:8a:19:9e:8e:b8:
85:b2:80:13:87:89:9d:d8:f1:e5:1f:8b:17:58:da:0c:c2:36:
fa:b5:e8:5d:fa:bc:e7:7d:58:81:c7:64:52:b0:fd:b5:b6:36:
95:e9:27:76:37:94:b9:1d:5b:3d:ad:18:a2:8f:f5:75:36:4a:
dd:8a:bb:9c:f7:c2:bb:5f:62:12:06:4e:46:45:b6:c1:60:29:
a9:d2:dc:d2:d5:61:cd:8f:a8:fe:a8:e6:d3:2f:0e:5d:af:23:
5d:bd:7e:83:31:e7:d4:fb:d9:f1:84:65:36:8c:87:3d:37:f8:
72:0a:f7:57:ea:86:5b:19:12:38:4e:f8:61:65:d4:2a:8c:aa:
70:f3:aa:c3:8c:d0:59:c3:51:f2:45:7a:46:df:31:6d:ec:65:
0e:8b:e0:3b:2d:a7:a0:8c:78:94:40:11:5d:42:c7:0c:1d:72:
cb:44:09:1a:b9:84:fd:25:25:8a:1b:85:33:22:87:28:92:69:
93:dc:8f:9c:65:04:a0:ec:3a:ff:9b:f4:aa:90:d2:ea:96:5f:
a4:2d:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:02 2025 by rpki-client