Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: H8c5LN6WoLDNYhCw+VqjPpdjKRpSxtrEJNguCF3af0E=
Subject key identifier: 90:1F:BC:BE:9B:2A:DA:0D:99:54:76:B0:95:6F:F0:D3:72:E3:82:4A
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019A42828987699147C91182B9C7035320BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1709
Signing time: Sun 02 Nov 2025 03:00:42 +0000
Manifest this update: Sun 02 Nov 2025 03:00:42 +0000
Manifest next update: Mon 03 Nov 2025 03:00:42 +0000
Files and hashes: 1: K9i5BAZ6MzcgF9CzcPcItueT7VY.roa (hash: SAFMofRuJhJyuX+kxWxAf3VBKLBtrOMj73WD80i1Rgo=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: KIao5fRAWWEK9ym1htiiPRdIMB9P/waETbaiei2+zaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 21:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:42:82:89:87:69:91:47:c9:11:82:b9:c7:03:53:20:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Nov 2 03:00:42 2025 GMT
Not After : Nov 3 03:00:42 2025 GMT
Subject: CN=901fbcbe9b2ada0d995476b0956ff0d372e3824a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:f0:2f:d3:41:1d:53:f5:6e:70:6c:08:bf:
87:ac:c4:30:5f:87:85:96:23:00:c6:2e:a5:b8:23:
ef:f6:db:91:68:42:22:5a:3f:fe:57:5e:35:6f:d3:
9c:e1:00:5e:c0:95:c4:49:db:0e:f9:c0:28:5a:dd:
a4:ba:32:85:38:5d:15:8b:e5:e3:8b:aa:32:43:80:
ad:ae:ae:7c:bd:15:29:26:e4:d9:58:27:23:52:1b:
2f:b2:b4:3a:c6:d2:f5:cc:b1:5a:0c:cf:eb:c3:77:
27:91:69:0a:4b:8c:6d:57:b4:f6:df:6a:c2:09:9f:
3e:f4:4d:c0:f4:5e:78:ce:69:d7:1c:17:2e:f2:b3:
fc:ee:b3:44:a2:88:4c:05:8a:93:22:9b:2d:55:a1:
04:94:5a:a3:80:08:f0:b6:c8:de:6e:cb:ee:e0:ff:
bf:e9:4c:09:e1:f4:88:1e:5f:ef:19:d8:99:e0:f2:
29:91:7f:fe:b9:ad:e5:cd:cf:83:ba:7f:9b:aa:ba:
b8:db:d0:6b:3a:17:ba:14:3d:67:ff:c0:29:c1:c7:
11:7f:0b:77:7d:e4:35:0a:ea:df:9e:46:ab:9b:31:
90:32:ee:27:bc:4b:0e:1f:af:39:50:a1:f6:3d:8c:
c0:c1:31:b1:cf:79:29:4c:6e:00:25:d7:24:9a:5e:
a7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1F:BC:BE:9B:2A:DA:0D:99:54:76:B0:95:6F:F0:D3:72:E3:82:4A
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:32:c2:cc:51:91:09:92:a6:1a:a0:d7:44:aa:a5:cb:f8:
b5:62:d0:f3:6e:7c:c5:5c:82:ba:75:1e:20:59:8f:19:5d:f8:
7a:06:dc:26:18:07:fa:6a:b7:39:5c:c5:3d:f8:55:5f:18:c0:
c4:51:03:ae:71:ff:1b:3e:b3:57:02:17:d4:60:5e:a8:9f:ef:
b9:ff:15:0d:be:61:42:96:12:fd:3b:00:48:00:54:52:26:74:
d4:ac:0a:23:1a:34:dd:fd:9c:8b:24:fd:f9:81:cb:be:97:37:
30:b7:f8:e6:41:11:d4:7f:98:cb:58:eb:56:16:ce:dc:a8:8d:
6c:a9:ba:67:9c:be:aa:cc:87:0c:37:a8:64:56:73:4c:c9:43:
8e:03:41:1c:76:3d:f7:00:93:dd:4c:01:b2:52:6b:f4:c8:5f:
f3:d2:12:90:8b:ee:56:8e:ae:73:b8:2d:d2:0b:42:cb:ca:83:
66:64:c1:63:00:e3:1a:97:55:da:ce:1f:97:7c:cd:cc:74:9c:
0f:bc:57:68:a4:b9:2b:be:e3:0b:91:94:38:5c:83:f4:00:d3:
71:66:00:25:fa:eb:98:1f:2d:4f:bb:58:a5:c0:e3:19:81:d3:
6f:63:00:df:8f:42:f4:ab:ac:47:d7:24:14:41:92:8b:9a:97:
45:30:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 05:49:37 2025 by rpki-client