Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: VBdqdBBa5fyCu0CEhp5bXHWeUL5GkcF8Fh0vpHTFAHk=
Subject key identifier: C6:5F:A7:B1:19:91:79:D3:4E:12:83:4E:CA:4A:BD:2E:22:AC:C6:02
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019A41DDF0D9F0095AC7D5B81E5FBC1BDB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1706
Signing time: Sun 02 Nov 2025 00:00:55 +0000
Manifest this update: Sun 02 Nov 2025 00:00:55 +0000
Manifest next update: Mon 03 Nov 2025 00:00:55 +0000
Files and hashes: 1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=)
2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=)
3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: JTglxCU/ollOrD01UsfHwpbc9spfhBlID8zdpBHgZC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:dd:f0:d9:f0:09:5a:c7:d5:b8:1e:5f:bc:1b:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Nov 2 00:00:55 2025 GMT
Not After : Nov 3 00:00:55 2025 GMT
Subject: CN=c65fa7b1199179d34e12834eca4abd2e22acc602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:53:ec:6f:68:68:5e:b7:b3:78:ec:cb:2c:
2b:a5:61:cf:55:81:15:75:6d:0a:3a:e0:0c:ae:50:
b2:39:b3:9c:74:ac:f8:77:ef:83:19:b7:85:53:a9:
30:b3:cf:5e:d0:de:bf:09:20:af:ca:53:39:4a:d7:
67:86:b3:b3:50:a4:db:16:a4:85:a1:7f:d2:b3:a1:
ec:e9:6d:ec:ac:4e:1b:b6:02:f9:e4:f2:fd:00:b6:
9f:0d:d6:20:1b:83:0c:af:1e:3f:4f:f6:40:f4:96:
b3:9c:3a:56:0a:89:d4:39:25:0e:88:f7:36:64:69:
ef:10:87:c1:5a:3a:9a:cf:42:7a:75:a1:d9:50:4a:
59:5a:5c:ec:17:da:0f:c7:32:d7:2f:6c:3d:be:96:
67:9a:71:13:da:7e:06:a3:9c:b2:87:d2:bb:fd:b0:
13:fa:0e:a1:42:79:60:a5:26:c5:cd:c3:99:05:6b:
78:4d:34:1b:f3:24:84:58:a5:e9:3f:7c:22:43:85:
20:32:9f:7d:41:39:f8:44:24:e9:bf:af:c0:e1:05:
38:40:5a:75:b0:a0:b1:90:c5:71:f6:5b:9b:b8:67:
c0:3e:5f:24:89:89:d0:91:bf:05:8b:5f:f5:d5:20:
6e:1c:be:99:9b:7e:9e:6b:40:75:64:92:5c:c2:3a:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5F:A7:B1:19:91:79:D3:4E:12:83:4E:CA:4A:BD:2E:22:AC:C6:02
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6d:b1:c9:46:3c:d0:14:af:b6:0a:82:6f:c3:01:89:d0:1b:
ae:84:be:f7:b7:b8:95:6d:b2:57:0e:1a:a0:22:bc:e4:2c:39:
1b:cc:66:0a:07:7c:c4:4e:8e:b8:af:41:c5:ee:db:4b:b6:7e:
30:87:83:45:be:c9:62:5c:4d:3c:ad:6d:47:8f:20:e6:5d:8e:
23:9f:59:3a:2f:14:6a:9d:66:1d:f2:30:24:44:b5:6b:38:5b:
a8:11:29:03:cf:86:73:21:4d:70:c3:18:11:c0:53:36:bd:ea:
32:a7:07:5d:81:20:d1:72:ff:8c:8c:1d:54:63:8f:71:31:71:
96:53:d7:4f:fa:8f:9d:b1:26:a6:5c:14:1e:ea:46:18:46:2d:
03:ed:02:42:12:40:b0:a9:ec:e4:2d:3d:c9:9e:68:54:d7:64:
97:d7:92:37:0e:64:6b:4b:38:65:91:d0:bd:bb:5f:74:60:dc:
69:ce:cf:2e:32:21:45:31:f2:f5:31:cf:02:16:34:6b:c6:f8:
0d:02:07:85:07:ea:c3:d0:db:8f:a9:6e:8e:cc:3e:24:eb:57:
7e:54:60:0b:5a:2a:aa:20:8b:8d:a2:f6:cf:1f:84:0a:d9:ed:
61:54:fd:c1:a7:bf:c2:95:98:29:12:36:2c:c1:07:98:8a:e6:
df:47:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 09:35:01 2025 by rpki-client