Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json)
Hash identifier: TgRdhfvl+In9dydeQDnKzABDt7zo3lIL3FllgLryrGk=
Subject key identifier: 4C:37:CA:21:B0:F6:87:7D:01:32:BC:34:84:87:7D:65:A3:33:7D:F9
Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Certificate serial: 019A70A557FA7AFC6BE0FE936462A26FC7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 02:01:15 +0000
Manifest this update: Tue 11 Nov 2025 02:01:15 +0000
Manifest next update: Wed 12 Nov 2025 02:01:15 +0000
Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=)
2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: OdeNic1XFN1HJ1Mu+AI7Av3m2+kw5+3V8xb/bCdBMY8=)
3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:57:fa:7a:fc:6b:e0:fe:93:64:62:a2:6f:c7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c
Validity
Not Before: Nov 11 02:01:15 2025 GMT
Not After : Nov 12 02:01:15 2025 GMT
Subject: CN=4c37ca21b0f6877d0132bc3484877d65a3337df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:f8:21:43:da:60:d4:47:3b:81:a8:c6:d1:
e8:db:44:a3:e6:50:70:79:a1:53:5a:b8:13:0e:04:
97:1d:a3:7a:42:99:d3:2b:20:63:71:de:8b:a1:f4:
c5:73:06:7f:61:5c:a7:14:97:4e:f2:38:9b:87:fc:
5c:a3:49:57:22:8a:e6:44:90:da:de:62:f0:81:37:
39:6e:72:62:15:cb:e3:38:23:15:e9:7a:1a:26:a2:
7c:d9:8c:b1:0f:ea:60:8e:9d:74:87:b4:0c:02:d3:
d0:82:00:f6:9b:8f:e4:a8:54:a9:0b:b0:f6:b7:0d:
ef:72:3e:05:94:eb:70:ae:f5:e6:a1:f4:5f:e2:42:
65:a8:dc:46:52:41:05:9d:fb:1c:5d:eb:7b:b7:0a:
f6:ab:a2:2b:25:31:31:58:a2:24:0b:cb:fb:0a:d3:
2a:e7:cd:87:29:8a:bc:6e:e5:35:cd:a1:63:18:aa:
ff:da:a8:99:5b:4a:6a:4f:e0:4c:60:bb:7e:49:69:
e5:ff:9e:a9:71:29:b3:0f:46:d6:2f:d4:89:b8:37:
5d:02:7e:bd:77:83:57:37:d5:18:da:89:0e:50:20:
e5:ac:a0:10:d9:3e:aa:09:ed:81:89:68:ad:ef:44:
5a:93:f1:bc:02:c4:27:99:93:ce:93:f7:dd:8d:95:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:CA:21:B0:F6:87:7D:01:32:BC:34:84:87:7D:65:A3:33:7D:F9
X509v3 Authority Key Identifier:
keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6b:cb:7a:91:3e:a1:50:56:99:ca:2d:46:bf:36:8a:67:19:
97:30:66:91:d6:90:40:89:6b:7d:be:16:a1:39:f3:75:51:8a:
e7:a0:7b:c3:4a:3a:61:ae:a0:a8:11:6e:f2:6c:5e:77:9d:d1:
58:d9:14:79:9f:3a:35:72:97:6c:b4:20:ac:b7:cf:a3:42:b6:
c0:54:ea:3d:5c:57:c1:20:61:88:f3:f1:aa:2e:ea:9d:2e:c4:
05:f2:69:56:6b:86:e7:c6:d4:70:91:7a:96:bc:03:d8:e3:7f:
30:f9:8a:54:d7:7d:08:75:ec:e7:cd:80:a2:8a:f0:a0:4b:70:
d5:5f:57:43:91:6c:d9:e1:eb:cc:dc:27:c4:50:ba:d0:57:51:
95:d9:39:27:1a:d0:b5:52:e3:2b:cd:93:ad:d5:e8:5e:2b:c6:
fb:31:17:d4:08:7e:33:61:2c:4d:21:a5:57:04:4d:d7:3a:bb:
06:ca:e7:1b:e8:13:ea:14:c7:3e:e8:4a:e1:8d:f0:05:b8:02:
1b:d0:52:ad:ee:2f:1a:78:6f:31:ee:02:81:11:7c:29:1d:88:
45:fd:e5:5c:78:28:45:16:48:0b:d4:d3:39:6e:e9:1b:fe:60:
8a:5a:8e:54:40:6b:02:6d:ed:61:f0:d7:a3:09:f2:b4:d9:b6:
e1:29:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:01 2025 by rpki-client