Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier: 97aV+xFlw+eq0m90u62ayFLOk4G4IFuqMxyfTESDsbQ=
Subject key identifier: 82:07:D5:93:4F:D9:7D:FB:ED:DA:4B:31:5A:0E:52:3D:93:E8:BC:34
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 019A725CE3801326E1CBDC9051A44F5D92F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number: 133F
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: Bu2qohV5DT207In6bmDkzPkl22w.roa (hash: yQgjgxJo0jD6Zb5Cbl39m04H6+9TPpDsNpPjtFWzK98=)
2: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: HI3oIYnQYsv5HIthURvN8DV8tWtSHurInM+vxrxrndM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e3:80:13:26:e1:cb:dc:90:51:a4:4f:5d:92:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=8207d5934fd97dfbedda4b315a0e523d93e8bc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5d:45:d6:55:9c:57:64:9f:62:34:01:2d:11:
f4:fc:61:46:e2:a4:74:75:2a:c4:e4:ee:e0:be:fb:
07:4d:90:93:11:e7:bb:74:75:18:70:ca:85:09:b8:
60:da:ab:36:d1:5e:e0:b4:02:fc:86:ee:09:10:fa:
de:00:bf:aa:d5:23:b9:b8:5d:3b:87:47:1f:b9:9a:
77:5c:be:1e:ee:5c:eb:90:c9:c2:88:3f:ca:a3:87:
e5:07:96:4f:8d:dd:58:e5:b1:32:61:f9:2e:04:55:
f9:3b:a8:97:30:ee:ed:f7:be:9b:79:80:64:b2:09:
06:5d:8f:58:c6:c3:d5:37:1b:b9:a2:97:81:fa:eb:
cc:c5:f7:14:d6:37:f8:f3:b8:dc:28:d5:f0:76:b2:
24:c9:80:65:d7:98:25:49:94:70:01:de:fc:3d:e7:
c7:7d:d0:d7:db:2a:14:77:ee:d1:66:1b:79:41:fa:
67:28:6d:34:fa:f8:18:ef:24:c8:97:e8:3a:a2:73:
09:cb:7d:20:0f:1f:86:22:41:8f:b5:c6:b5:30:96:
ac:e7:2d:33:d6:6c:7b:30:19:b8:ca:78:f6:28:53:
ce:c6:8f:a9:16:10:fa:cc:f3:44:03:02:93:2a:05:
4b:4d:db:ff:bc:8d:3f:4a:34:69:84:ad:eb:93:ad:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:07:D5:93:4F:D9:7D:FB:ED:DA:4B:31:5A:0E:52:3D:93:E8:BC:34
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:74:25:97:b6:22:36:72:5c:86:74:fe:9e:51:4e:ed:34:9c:
79:a5:f6:d4:d1:7e:14:1e:d6:4d:f6:2b:8b:74:1e:05:f0:fa:
f5:19:25:c2:63:ed:2f:0c:11:26:d1:2d:c8:3d:88:5f:b5:46:
b1:49:7d:7e:8b:dc:bd:42:e3:6c:22:1d:a8:e3:fe:4d:d0:87:
70:42:15:b4:b3:74:7a:1b:d7:78:f7:cc:f9:ca:95:fd:be:11:
e2:f2:06:6b:f3:44:3b:f9:47:79:59:40:80:6a:0f:b4:69:00:
2b:65:c8:e1:05:f4:81:29:8d:2e:27:de:a1:61:76:50:79:fb:
d4:95:86:f8:07:90:59:16:db:e5:5b:99:27:17:20:11:57:bf:
e8:2b:18:d9:c8:e4:76:90:c8:55:ff:44:f6:50:a8:ac:61:31:
fc:ad:aa:3c:67:78:ae:f6:40:e5:8d:c9:a3:f5:bf:2d:d4:16:
ae:3c:aa:99:4d:3e:72:6f:3c:42:73:5e:4d:09:15:a8:43:96:
2b:7d:b9:38:4c:3d:c6:6a:d1:d3:64:8d:56:be:d4:c0:1b:ab:
b9:0c:b0:4e:a5:a5:d9:0e:af:94:be:a3:7e:9f:74:92:93:ae:
96:f2:f1:e0:9c:4a:fd:32:0f:f0:56:18:ff:0c:d4:09:93:91:
71:4c:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:16 2025 by rpki-client