Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
File: xQSRCSEw3t2EZv_VzFEFdsiU324.mft (raw, json)
Hash identifier: 0OB+jSKCfx7x9aSvdhIsc0scIMRp2FSoD00oATIX1oE=
Subject key identifier: 10:49:1B:1D:86:1F:6A:0C:DD:E3:FD:A8:38:AF:2A:06:67:D9:D5:D3
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 019A71B928371243F027FB94B5693CC45987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: jdCs0ZL0SC55THdB8buccPHazLk.roa (hash: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=)
2: xQSRCSEw3t2EZv_VzFEFdsiU324.crl (hash: 79Bg4LxGd9dLE4vANcq1BXDxVRLNY91vFoBVMylWnts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:28:37:12:43:f0:27:fb:94:b5:69:3c:c4:59:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=10491b1d861f6a0cdde3fda838af2a0667d9d5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:88:8d:9e:3c:78:ab:65:9f:8a:c3:e3:0e:
b8:e8:9e:72:a0:40:30:fe:f8:94:d5:93:79:16:a8:
eb:b9:3a:5d:19:25:a8:c8:db:3a:35:8c:60:c5:35:
e9:90:4b:6f:f7:af:73:27:a7:a5:58:52:49:a1:70:
73:28:83:8f:4b:21:b2:6c:79:a4:16:3b:ba:47:29:
c1:bf:da:f2:88:22:bc:85:26:b3:27:93:78:f4:3e:
ab:3c:dc:ab:b1:ae:4f:0f:40:c0:71:c6:65:e2:35:
24:27:df:08:88:ee:b9:85:a2:cc:1d:a0:27:1a:df:
f0:ee:5e:2e:f5:39:3c:33:ce:04:a0:f6:60:94:9c:
c1:08:78:4a:3d:10:1a:10:6e:be:c1:d3:ca:31:ec:
d4:a6:55:a6:e4:79:61:db:1a:cf:60:f9:d4:c0:d3:
a6:b8:87:4d:c9:13:73:11:07:2b:51:a4:ae:00:19:
c4:58:8c:61:7c:42:80:07:c2:a9:e7:f9:7c:1a:ad:
33:38:b6:7c:d0:d2:d8:ba:99:99:21:f4:7a:ed:e6:
6c:d9:c8:48:6e:a0:46:41:5e:c7:9b:db:7f:74:b3:
1e:df:72:44:8e:4e:47:65:09:c2:af:85:96:da:e1:
6d:55:f4:bd:c1:9b:ea:be:d6:d1:80:aa:7d:34:88:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:49:1B:1D:86:1F:6A:0C:DD:E3:FD:A8:38:AF:2A:06:67:D9:D5:D3
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:2c:a8:25:71:6c:51:75:64:53:bf:79:0a:d2:b4:82:11:
f4:89:3d:cc:90:fb:e7:75:01:4f:27:68:9c:64:23:8a:3f:27:
eb:1c:2d:01:4a:6c:2a:47:12:67:8f:53:97:5a:9c:2f:3e:1e:
ec:a6:a2:5d:dc:36:9a:f2:a2:ae:81:d5:f4:14:26:70:f1:46:
79:bc:95:27:01:d8:03:9b:ba:51:ee:63:38:9c:46:86:de:e2:
40:0e:62:61:ea:90:17:54:75:5d:54:1a:31:d2:8f:e6:00:4e:
a9:87:7b:a6:5f:e6:a2:0c:9c:fc:62:9b:5f:09:fe:8b:8c:21:
ad:2c:b7:19:84:15:24:1f:01:3a:c6:86:69:af:96:1a:37:97:
b5:76:b6:d5:33:d9:bd:d3:f5:e4:1a:f9:40:e5:df:35:32:b6:
22:46:f3:c6:4c:38:15:b9:7b:5e:ca:94:79:54:8b:1c:2f:f3:
dc:6d:0d:f3:ed:b9:32:c4:7e:b4:69:53:01:4f:a0:76:4c:61:
e6:5d:0e:31:1f:7d:34:a6:11:a6:fd:b9:7e:0b:0a:62:d1:d3:
7d:1a:79:03:96:87:52:f4:4a:7e:f0:a7:f6:22:22:11:e8:36:
54:f3:d9:35:a4:e1:4b:c9:1f:c1:dd:8f:d3:4f:5e:52:b7:a3:
1d:5a:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:00 2025 by rpki-client