Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
File: xCl41TJpj7IIQPlCsCR8Acj1eLI.mft (raw, json)
Hash identifier: ipMu3SaYFHTncOdB3sDPhIAcAL2Zv9OjB9ljS63Qvxg=
Subject key identifier: 9F:CA:DA:72:44:2C:6F:58:28:8C:07:88:46:0D:84:32:A7:83:BD:8C
Authority key identifier: C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
Certificate issuer: /CN=c42978d532698fb20840f942b0247c01c8f578b2
Certificate serial: 019A722647ED71BE6E1288B7B5DE5740E858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
Manifest number: 140D
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: sUz3CUFPMP6K6odB4EEfathIrJc.roa (hash: 1ZdcoiC8lHKCzYuENUSvIoHg+7T85+kAy12nWc2yMX0=)
2: xCl41TJpj7IIQPlCsCR8Acj1eLI.crl (hash: /3CPrr62U/DIZmKxVxp5//mZ9mpWntf2iTGaUYUATLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:47:ed:71:be:6e:12:88:b7:b5:de:57:40:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42978d532698fb20840f942b0247c01c8f578b2
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=9fcada72442c6f58288c0788460d8432a783bd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:9a:5a:89:d6:14:de:bf:be:5e:fe:a7:0d:
c5:de:c6:f2:1a:4a:df:fe:ce:c5:08:25:9e:73:f7:
3b:53:72:c1:52:5f:1a:78:04:b4:2c:ad:5f:1c:00:
fd:a0:9d:70:55:a6:e1:e5:73:87:f1:76:14:02:fb:
13:42:92:de:f1:e0:46:79:a4:6e:74:c4:7b:27:ea:
82:c5:fe:26:9a:17:a5:0d:a0:eb:29:2d:55:af:dc:
b3:22:b5:92:27:8e:6c:0e:3f:4f:68:d6:f7:0b:16:
52:63:9c:b3:48:1f:25:7e:79:26:fd:fc:8a:42:8e:
ed:a1:d1:6e:82:c6:19:28:84:23:6e:0e:bf:74:13:
03:9b:a5:82:05:10:5e:85:16:f2:87:b6:63:7d:80:
64:e1:17:6f:be:c6:93:2b:4e:9f:44:2d:8c:0b:14:
cc:b4:ac:81:80:7c:c4:d6:30:e3:38:8b:94:2a:0c:
4a:17:d2:27:c0:62:7f:98:fe:6f:35:0b:27:5d:c2:
40:ae:8b:55:34:d6:e4:f8:e3:89:94:2b:de:7e:4d:
e1:d3:81:73:69:5b:fa:25:d3:50:b7:da:ea:21:bc:
e0:d4:a2:9f:50:47:88:3c:d1:75:d9:f2:69:41:66:
4a:f2:4e:ee:fa:b2:a9:b9:ca:1e:8c:23:6b:e0:42:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CA:DA:72:44:2C:6F:58:28:8C:07:88:46:0D:84:32:A7:83:BD:8C
X509v3 Authority Key Identifier:
keyid:C4:29:78:D5:32:69:8F:B2:08:40:F9:42:B0:24:7C:01:C8:F5:78:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCl41TJpj7IIQPlCsCR8Acj1eLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/edd7af-2ff0-45dc-b14b-77d516be7a87/1/xCl41TJpj7IIQPlCsCR8Acj1eLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6a:5a:06:47:ca:eb:17:1d:d8:cd:97:ce:72:34:e1:bf:77:
d2:46:29:52:a4:a5:1c:19:5f:55:d5:50:4a:95:3e:68:ca:c0:
b9:d2:9f:96:bc:3e:1f:0b:ab:37:70:c5:4b:73:25:7e:ff:8e:
71:8a:9b:df:55:3a:9a:d3:8e:b8:f2:97:b6:ef:60:38:04:80:
85:4a:e7:93:27:bd:c7:92:f3:de:52:36:24:cb:27:d2:93:3a:
da:e3:a5:00:bc:f4:5d:b0:a9:00:52:f1:3f:5d:79:88:64:2f:
df:e6:00:6b:ae:2e:cc:7e:4e:ca:fd:04:17:83:c2:d9:9b:9f:
53:0a:23:b2:ba:aa:75:c1:21:6d:aa:fd:6e:5a:83:2a:b8:de:
f4:91:70:13:2e:9d:a8:f3:fe:b3:c0:3b:d7:22:50:f5:a0:c2:
34:4c:75:ff:b4:7f:f5:d1:5b:63:07:c7:5b:e6:bc:01:c3:33:
e5:92:00:76:31:a8:54:06:96:ae:04:b6:85:eb:5e:7d:97:4c:
4e:9e:08:e4:ac:71:2d:a6:07:fb:da:20:9f:45:8e:34:61:83:
8a:f9:e4:e3:26:df:59:e1:35:55:1e:c8:ed:00:2b:f0:7c:6c:
f6:67:b2:d7:75:b0:1a:30:67:d2:8b:a3:59:f7:f8:5b:5f:a9:
3c:8e:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:12 2025 by rpki-client