Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json)
Hash identifier: EPeZjdKRLnYwxvW8YSVhgEJ64FKaUysxiMXLs3nYmck=
Subject key identifier: 88:39:C6:33:FA:63:3B:1C:35:2F:D1:3B:7C:F4:4D:A5:80:ED:BE:D2
Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Certificate serial: 019A7112CFD3660E1D8B7AA187B6243690F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
Manifest number: 1459
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=)
2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: K09g9Qt0/pmyIYTTK9xcYtp0fuo3PAdY5EHZ2pzLRKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cf:d3:66:0e:1d:8b:7a:a1:87:b6:24:36:90:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=8839c633fa633b1c352fd13b7cf44da580edbed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:85:24:68:7e:ce:d2:08:c7:e2:1d:e3:01:
f5:02:a0:b5:92:cd:f0:fa:d5:01:95:2f:c1:05:39:
b4:85:47:04:d0:af:4d:1c:d7:41:da:7f:1d:c9:22:
4d:3c:a2:71:28:73:17:7a:fc:76:57:e6:3c:96:aa:
3a:42:ff:9b:03:80:87:be:71:55:07:b8:a2:ee:84:
8d:0c:ef:80:0a:ae:88:7b:7f:4e:04:99:78:52:d3:
e8:ad:f7:5d:1b:33:45:27:96:2e:56:0c:c9:6f:3d:
7e:91:e2:4e:31:4b:4c:41:e8:71:e0:67:13:54:4b:
f5:b1:53:7f:5f:05:26:10:60:07:1d:0c:0f:6b:eb:
50:b4:e8:e2:68:18:20:47:d6:27:03:29:30:b9:fa:
5c:98:64:1b:b0:23:b3:17:61:c5:f6:0a:25:ae:fa:
8d:6e:3c:6b:f6:1c:49:24:00:b1:13:ad:0f:54:99:
32:c9:b5:3e:a9:4d:3a:6a:5a:98:c6:38:6a:fc:74:
78:86:a6:1f:81:16:1b:52:bd:52:a7:f5:d8:c5:57:
79:2f:15:d9:c2:ba:ea:af:e9:78:36:05:f9:fb:b6:
62:b2:1d:fb:21:e3:e9:1a:8a:08:bd:6f:29:9c:73:
4a:79:01:57:a3:1d:00:d2:2e:72:0f:f3:8d:8b:3d:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:39:C6:33:FA:63:3B:1C:35:2F:D1:3B:7C:F4:4D:A5:80:ED:BE:D2
X509v3 Authority Key Identifier:
keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d1:67:89:91:c4:54:de:2b:96:f6:70:1c:78:fd:c0:2d:bc:
04:c6:e1:7e:79:22:e0:81:0c:da:39:bf:98:9e:c4:21:f7:28:
e9:c4:96:0b:da:c9:df:24:9c:d1:41:b6:d3:d3:d7:bb:9d:dc:
82:1d:15:91:4f:92:80:31:bc:dd:d1:10:88:fc:f2:47:c4:a4:
83:5e:79:e1:5e:d5:d7:f2:04:ce:cf:99:36:16:75:15:a0:c0:
45:a9:d2:73:8d:4f:4c:1c:a9:90:da:ac:db:08:c2:b1:05:7d:
81:04:f0:1f:0f:a0:ee:02:43:85:37:0a:5b:3e:b9:58:20:3a:
7b:db:9e:a8:78:1f:f9:35:c2:46:9e:4a:6c:35:30:6c:7d:bc:
61:ea:c6:00:c7:a3:70:78:ff:b9:f4:b7:36:ff:24:6c:ee:96:
bc:39:94:4e:cf:d1:de:51:0e:60:b1:bc:43:82:bc:38:06:c3:
f4:59:94:b6:0a:06:02:da:3a:91:13:48:fb:d0:16:39:f8:e7:
09:70:90:4e:93:44:00:9c:c1:7a:66:28:8a:2d:ec:a2:7a:85:
1b:db:a4:6f:a8:57:3d:7e:96:29:e2:2b:0e:a3:fc:ea:f6:0f:
45:06:cb:6b:86:49:93:ad:14:80:0c:6b:d1:93:ca:b6:5d:48:
43:2e:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:50 2025 by rpki-client