Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
File: XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft (raw, json)
Hash identifier: snWWmXxlJ8pxlV785KVRAfrSlWynlB7EyEH5dNWwleE=
Subject key identifier: 68:B5:77:4D:D7:F5:5D:67:A1:3C:7C:73:BD:52:BC:60:FF:D5:1A:DE
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Certificate issuer: /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial: 019A725CCAAFAC78CE4CE25008C71086331F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
Manifest number: 01F2
Signing time: Tue 11 Nov 2025 10:01:14 +0000
Manifest this update: Tue 11 Nov 2025 10:01:14 +0000
Manifest next update: Wed 12 Nov 2025 10:01:14 +0000
Files and hashes: 1: 3uPLM02UL2awUH-Kuoh6brdmF8Q.roa (hash: 7YTaX8xKCH2MetKx49NBdkYFZn8uvSI3o4szPzVZP/w=)
2: XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl (hash: PtamEuM/Tc07jOc+B4yDsvfDK+zSbXPvkWGWKuN+enI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ca:af:ac:78:ce:4c:e2:50:08:c7:10:86:33:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Validity
Not Before: Nov 11 10:01:14 2025 GMT
Not After : Nov 12 10:01:14 2025 GMT
Subject: CN=68b5774dd7f55d67a13c7c73bd52bc60ffd51ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:73:4f:40:f0:ae:31:9f:15:15:67:07:0c:
47:45:ac:64:75:ad:d2:09:ee:5b:58:0e:c5:08:98:
2f:2e:67:aa:99:97:87:89:28:56:66:37:b1:81:a4:
36:6d:99:5f:7c:05:a2:d9:85:be:dc:9e:f5:0e:e5:
38:f3:2b:54:cd:44:e4:01:14:ee:9b:65:5d:61:7d:
2f:c2:16:07:2f:4f:d3:5c:9d:fc:9f:df:c7:c1:8b:
a9:7b:86:c3:0d:cf:07:94:57:41:c9:63:f7:19:24:
97:86:05:90:66:91:bf:64:96:8c:43:68:87:09:b7:
5f:69:bd:71:bb:2b:e3:11:56:42:83:03:72:43:32:
ed:e4:95:ba:35:c2:4a:00:db:02:1f:54:2c:59:96:
01:7c:2b:97:dd:02:76:d2:44:5b:03:f2:a6:51:8e:
d7:eb:6f:3e:a0:96:dd:d8:fa:5d:c6:2f:b6:94:5a:
58:a6:2f:93:16:93:0d:31:e8:21:81:ca:e7:2f:d3:
82:2c:4f:14:5a:43:05:7f:29:67:8a:d7:b0:48:de:
e2:bc:45:17:57:5a:1c:21:74:92:3f:b2:13:56:7b:
62:e5:17:6a:8f:7e:fa:b5:e4:b0:1c:97:69:b1:85:
1c:0b:2e:00:1b:86:0c:c9:7a:df:7a:15:d9:4f:52:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:77:4D:D7:F5:5D:67:A1:3C:7C:73:BD:52:BC:60:FF:D5:1A:DE
X509v3 Authority Key Identifier:
keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8c:00:cd:52:73:34:46:a4:d7:a8:a1:ce:6d:ff:22:06:ad:
d0:e4:a2:3d:bb:13:53:45:1f:2b:95:c5:1e:90:0c:ee:4e:69:
34:c2:b2:7d:c7:d8:eb:c0:51:03:52:36:3f:35:05:03:20:e7:
ac:6a:02:23:77:5e:00:f3:08:92:64:2b:a9:8a:d6:34:8b:ab:
10:61:e0:7c:48:f9:d4:dc:39:45:66:99:2b:e6:a8:29:74:8d:
82:a0:0a:66:bc:d5:64:cc:81:25:0e:3c:c8:aa:45:51:73:b0:
7d:18:bf:b7:ba:37:a0:67:ac:d4:97:f8:ae:96:a6:ec:bf:6d:
6c:94:0f:4a:87:b0:2e:58:d5:52:83:5c:fe:d0:8b:e8:1c:b6:
17:79:57:21:5e:f5:4f:38:cd:10:dc:02:52:64:47:dc:04:21:
08:f5:04:03:2b:11:da:1b:fe:7f:2e:99:dd:da:39:36:eb:be:
6c:16:3b:c5:32:a5:f9:47:47:97:5b:34:c2:a0:8c:e3:7d:ae:
2b:a8:db:e6:21:69:c0:b4:db:5f:b9:68:10:cd:cd:d5:ec:95:
3c:bb:28:89:b1:98:a7:3f:31:6e:fe:51:9c:12:04:2a:3c:fe:
97:8c:ce:bd:79:0d:6f:4e:e6:01:12:90:c3:17:cc:7d:00:6e:
71:51:4e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:09 2025 by rpki-client