Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
File: x0HESpzVjhJWkGY32TXDGQ9_6xo.mft (raw, json)
Hash identifier: ynQTuOtfMo6nGCGdbIRSxJo7Db+DApa9q1L3BW1JKSg=
Subject key identifier: 46:C1:F1:E5:11:62:70:B8:AD:62:2D:F1:10:E0:21:4E:25:37:7D:D1
Authority key identifier: C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
Certificate issuer: /CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Certificate serial: 019A7149CEE6A464C488761BF9A7CEF52819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
Manifest number: 14C0
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: qptSZ2XpOAOxaz7moTgQi3lsLeM.roa (hash: KtrtO/sBSgHAN1gAhTfDKw+KYUTZI/b5RNJ8EjfK/UU=)
2: x0HESpzVjhJWkGY32TXDGQ9_6xo.crl (hash: jCJ7Xw5oihPwKWH3P6bLOt/GtPnm/DdKOZ1LuysRMRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ce:e6:a4:64:c4:88:76:1b:f9:a7:ce:f5:28:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c741c44a9cd58e1256906637d935c3190f7feb1a
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=46c1f1e5116270b8ad622df110e0214e25377dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:7f:83:8a:ab:40:21:07:7d:ac:ae:ac:b1:
ec:d0:ef:0f:cb:fa:31:f5:e1:29:b1:fd:2f:99:7e:
a6:2a:7a:2b:e1:78:20:12:45:98:42:b8:34:ac:04:
49:fb:86:1d:97:8d:43:f6:10:d4:5d:ac:43:cd:23:
26:da:03:74:88:f1:d3:3f:b5:2e:d7:c2:b8:3b:88:
76:89:d1:41:f1:28:26:02:cb:14:90:13:e9:eb:fe:
f2:75:71:6f:32:cd:59:31:d6:b5:2d:6d:95:73:aa:
0a:71:a3:38:05:2d:64:01:fd:38:38:30:f3:03:97:
50:5f:b2:9c:ad:b8:b4:c7:3c:24:da:40:da:01:5b:
a8:9a:48:63:77:72:2f:b0:8e:45:dc:7a:71:f1:22:
08:c7:ab:a9:d6:3f:c2:df:ed:bd:5c:bd:e5:0e:68:
91:b4:a6:b5:62:06:91:a8:c4:c7:e7:74:af:ea:43:
b3:aa:fb:c7:b8:f4:3f:48:76:0c:36:87:89:93:47:
4f:3f:7f:7d:ce:b2:c0:2e:8d:e4:81:fd:fd:18:09:
ab:ac:a4:44:0e:73:5d:38:4a:97:81:0b:18:02:ad:
f9:20:32:6c:f6:51:90:30:b3:3c:2f:ae:4b:ff:48:
ea:2a:ec:41:bf:18:e0:94:28:26:f4:a7:84:56:5d:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C1:F1:E5:11:62:70:B8:AD:62:2D:F1:10:E0:21:4E:25:37:7D:D1
X509v3 Authority Key Identifier:
keyid:C7:41:C4:4A:9C:D5:8E:12:56:90:66:37:D9:35:C3:19:0F:7F:EB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0HESpzVjhJWkGY32TXDGQ9_6xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1ebcb2-4ef0-42ff-81b5-9b17def9c233/1/x0HESpzVjhJWkGY32TXDGQ9_6xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:35:09:13:fb:74:52:8c:65:4b:6f:7f:62:60:5e:df:08:78:
0e:b0:f1:34:53:c3:2a:01:32:01:73:4f:dd:96:0c:12:15:ec:
a4:a8:06:c1:9e:13:34:6c:ef:b0:7c:81:1c:28:13:50:fa:ed:
e1:42:2e:e2:2f:11:b4:76:e4:7f:ec:f4:b3:d5:f2:41:54:36:
6c:5f:b6:d1:33:2e:7b:ec:44:b6:cd:72:09:ef:27:dc:87:24:
2e:3a:ad:3c:04:37:05:80:68:49:c6:99:c7:b6:34:7d:eb:84:
12:a3:a2:08:e9:a8:ac:8e:18:8d:ed:a6:45:64:33:cd:c4:b6:
f5:1d:63:7f:c2:e2:22:69:7d:0e:d6:a0:8f:aa:ea:09:18:a5:
d4:e9:c6:97:57:f5:75:d0:98:86:fc:b3:9f:28:91:01:5b:93:
2a:0b:90:63:34:f7:90:69:b8:54:42:00:51:24:ed:6c:08:43:
29:c5:c2:9a:71:1d:8b:cf:be:5b:c4:0e:a7:09:cc:ed:db:a7:
83:97:ec:0f:ce:89:5a:3e:fc:f3:5d:9f:63:9b:f1:27:54:97:
e0:b5:f9:6d:62:43:29:f9:ac:2a:59:4b:24:b5:2d:12:bb:8c:
a3:03:54:8c:33:d1:cd:60:9f:dc:ad:9f:3a:3e:ee:31:cc:89:
e4:5a:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:19 2025 by rpki-client