Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: dN8HYoZRH/bTyJEDm0ogjm48uDfz4zts5yDPtaKz0Ws=
Subject key identifier: A7:DD:7F:57:7B:75:6F:10:6A:2A:91:58:47:28:DC:9A:14:26:5F:47
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 019A7149B9B59C20FDB7CC82CFFEF6D158C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 1044
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: 1VsACOvC73Jyfy1IDhs2sgs6GA3zhuAbm7m/ioFwyN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b9:b5:9c:20:fd:b7:cc:82:cf:fe:f6:d1:58:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=a7dd7f577b756f106a2a91584728dc9a14265f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:79:83:f9:8a:d6:fc:3b:f1:18:09:9a:0f:2a:
ef:af:3f:17:a5:5b:50:74:72:53:e7:81:cc:a0:6c:
c9:4f:66:fd:9f:c3:41:f2:c7:de:72:28:64:dc:2a:
02:cf:27:b3:92:24:6d:d9:39:8a:e9:58:57:49:32:
d1:ea:33:24:49:40:7e:25:2c:ba:09:9e:51:75:bc:
96:27:62:94:d6:f1:92:a4:2d:30:11:5d:98:fb:19:
ba:e6:db:ab:6c:f1:1c:18:35:8a:b1:18:33:e0:f5:
91:b5:a7:96:02:ba:84:16:00:4c:c5:f1:c8:24:89:
2d:9b:cd:7f:ef:85:48:53:7a:31:38:76:17:03:35:
ac:71:3d:26:f0:de:cf:5e:9b:3b:8c:c7:89:b4:6c:
b7:04:78:89:7e:47:f6:23:ca:8d:b9:49:ae:84:78:
95:ec:fb:92:9b:42:49:6c:73:0a:43:ec:99:c2:5f:
7f:d2:47:b1:b1:b4:f4:6e:c7:aa:ec:83:c9:42:79:
e5:fb:cf:4f:29:b2:12:b4:51:1b:cb:36:03:b2:bc:
4d:16:52:9a:34:34:b7:54:5c:e1:7d:ec:3b:b9:c7:
96:b9:61:3a:02:be:be:64:bc:43:b2:2b:43:ee:51:
70:ed:2d:76:af:93:74:1f:e0:60:e2:a7:c7:d5:95:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:7F:57:7B:75:6F:10:6A:2A:91:58:47:28:DC:9A:14:26:5F:47
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:68:52:d3:78:84:2d:fe:05:23:70:2f:23:7f:5e:bb:dd:e3:
5e:f3:d8:4e:9d:1e:0f:f4:42:b1:75:1c:d6:f0:4b:db:2b:b0:
c2:f1:c3:03:e1:a1:2b:cb:7a:f5:4f:82:8c:02:8b:71:4a:ae:
39:af:47:f0:64:94:f6:32:42:26:ec:4e:b0:d1:b3:ab:fb:51:
6a:12:47:7d:3a:9e:d0:e2:d9:0f:b8:88:82:67:6e:49:e0:7a:
6e:91:68:bb:c2:e6:a3:f6:4b:db:48:90:fa:9d:97:f4:f7:74:
be:03:78:b8:6f:3f:a9:39:7a:1f:60:0b:58:a9:1b:ac:3e:36:
97:f0:85:2a:27:fe:e2:72:14:57:0f:b3:91:38:5e:5f:66:7a:
3c:3b:d8:26:70:89:71:63:60:c9:af:d4:b2:d6:4d:7a:ae:0b:
16:c8:99:53:eb:35:b6:62:ea:ff:4d:d3:98:40:b8:f1:fd:19:
61:5b:86:9d:99:ed:73:a3:d1:4d:5e:86:b2:2b:a6:75:7c:55:
a1:67:0b:72:63:88:2c:69:e8:ba:ea:8b:31:9f:b7:aa:e8:bf:
fc:fc:99:56:0b:a8:3d:36:aa:fb:c9:97:2a:c7:58:26:60:53:
88:c8:57:fa:17:3b:91:bc:e1:f3:12:3a:ac:5b:cb:ca:fc:23:
df:3a:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:35 2025 by rpki-client