Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: VMv2V7mWD5quFXOylEvbtT1Onlf7HX1Ble2lXieF3go=
Subject key identifier: D3:7D:81:BE:3E:B8:BE:40:1A:C5:64:49:70:28:6A:A6:C8:C6:2C:29
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 019A7112B5812E87CD020E7051CA91125D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1736
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: lMt+yAP1CxShANUwiOwphsb8boZ7RUBemnaUppby1JI=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b5:81:2e:87:cd:02:0e:70:51:ca:91:12:5d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=d37d81be3eb8be401ac5644970286aa6c8c62c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:f9:f1:f5:2e:50:7b:0b:2a:b9:56:01:98:
9b:a7:d2:88:86:13:0a:cc:dc:c6:f5:72:88:76:a9:
05:fe:27:72:57:ce:51:ad:a6:ae:05:ba:e8:dd:dc:
72:67:22:4e:ff:cd:24:ae:24:3f:99:af:50:e0:5c:
26:f7:d8:e8:71:5b:f5:b3:84:87:63:be:b1:a2:6b:
02:8d:22:99:13:91:da:5f:8c:9d:1a:0c:43:8f:bc:
97:fb:93:70:28:b2:e8:3e:a2:2b:4f:02:9e:24:7a:
cc:61:4d:f5:f2:80:3f:a7:ae:9e:e3:77:40:57:46:
38:5b:dc:db:33:17:2a:3e:3d:64:0c:10:53:f9:a3:
67:46:4f:47:66:8f:fa:b6:61:2d:f7:0d:86:40:82:
e8:30:90:43:94:5c:e5:55:47:c5:86:2a:4e:a9:06:
37:c4:8e:9f:52:4a:85:3e:32:ed:8a:a0:4b:30:e4:
7a:68:d9:40:bb:52:01:76:87:58:e3:b8:c3:b9:11:
d2:37:3b:09:9f:a7:dd:d0:ec:a2:7e:53:4c:10:5d:
a0:d4:f4:d5:e0:2a:b3:04:ff:09:54:09:ee:0b:e2:
a9:46:49:5a:90:04:bd:d3:b5:be:9f:6b:22:d2:76:
44:06:0f:31:fd:8d:de:57:5b:aa:a6:a2:ee:21:0b:
d9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:81:BE:3E:B8:BE:40:1A:C5:64:49:70:28:6A:A6:C8:C6:2C:29
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:90:3b:fd:f1:43:19:be:d2:fd:10:ca:6b:ad:39:ed:08:
48:40:c0:11:00:6a:7a:c0:be:97:75:9e:2a:85:29:c2:ef:6c:
97:69:79:88:6a:e6:92:d3:46:8e:b5:04:c5:6f:bf:7a:b6:6a:
8a:eb:da:f4:ed:49:80:37:87:9b:2a:cd:71:ff:11:06:56:37:
47:86:2e:b8:8e:b6:ef:29:1e:0a:f1:2c:8d:53:52:6b:f5:cb:
2d:d2:d3:c3:15:25:9d:0a:50:cd:89:73:8b:c7:5c:55:e3:5b:
5d:90:de:b1:31:8f:e8:72:1f:7c:ac:89:dc:c2:af:39:09:93:
5d:f5:e7:ab:72:a3:ea:26:47:ec:9b:da:02:3f:6f:ab:96:f7:
99:24:d7:01:63:bf:f0:c2:e3:f3:62:e0:56:b0:f7:bc:b4:e1:
6a:1c:cb:cf:38:29:d0:67:aa:dd:6e:32:65:e7:d9:f4:b9:7c:
a3:02:9d:38:36:0d:c0:81:5e:ae:15:11:e8:49:6f:f8:63:40:
a2:5a:8b:94:82:f1:a9:0b:d3:f6:64:a7:55:16:26:06:69:25:
42:55:9a:a0:d9:dc:11:12:81:ea:8c:86:61:f7:fa:a9:60:ea:
4d:f2:80:41:8d:1d:41:be:9d:48:bb:ec:c4:98:d0:3b:40:ce:
90:42:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:49 2025 by rpki-client