Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File: x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier: sPsUqFfCYWyYWXPkiosvZ1/kmlBLcPyYcJXXSYBBxbM=
Subject key identifier: 47:66:A6:7C:AA:44:18:CD:54:72:0A:F9:B1:60:C8:4D:DE:18:00:66
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer: /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial: 019A71B7E9358EEBC4782A26B066978EED01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number: 1522
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: BmvH7Z7uqcJeleMQ8G7clQImys0.roa (hash: lHLdYcAsPsm30xzIk5bUgfaHNZnvFrDG5BK0e9ZCPyo=)
2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: p4rx2f/utKp0VhgarXmakTJ/bxyJjqehBordVvfWU5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e9:35:8e:eb:c4:78:2a:26:b0:66:97:8e:ed:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=4766a67caa4418cd54720af9b160c84dde180066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:a5:28:e1:6f:8a:91:10:6e:e9:44:b6:c1:
56:26:ba:dc:a4:23:75:02:29:25:07:35:4f:80:da:
87:e9:eb:0e:e1:aa:2b:53:df:8d:d7:bf:f6:07:5c:
f8:69:8f:55:4c:c6:34:96:33:63:ae:61:3c:5b:90:
49:92:cf:8b:0b:0c:f6:88:cc:c6:01:fe:fa:47:af:
ab:55:30:f9:cd:fb:f5:9f:fd:b6:3c:3c:0e:22:c3:
69:27:e9:9b:cd:a3:d7:d3:36:25:3b:61:03:61:9f:
5f:98:f0:a8:23:34:df:43:d6:3a:c9:ae:10:61:cf:
5e:52:13:d4:10:60:db:55:52:ea:b0:a1:70:eb:93:
aa:82:29:95:18:f3:2a:5c:43:83:8a:6d:a2:05:ba:
b1:82:96:7d:26:2a:c7:87:01:dc:ea:e7:22:21:64:
ab:c9:7c:58:ba:20:c7:ae:b4:ca:53:9c:d2:3c:73:
a0:db:05:55:eb:98:21:6c:1e:c1:9e:81:9d:8b:a9:
27:c7:d8:f6:fc:b7:fc:78:ed:ac:b7:5d:ed:9d:06:
85:57:73:6b:78:67:87:f4:69:2d:ad:bc:d6:99:b8:
3d:6b:84:0e:07:fb:31:4c:77:9f:89:8d:8c:19:c0:
c0:11:54:9f:f1:66:16:09:5a:b1:92:6d:8a:6e:fc:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:66:A6:7C:AA:44:18:CD:54:72:0A:F9:B1:60:C8:4D:DE:18:00:66
X509v3 Authority Key Identifier:
keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:29:ab:b3:97:80:ae:9d:5f:0c:ce:4e:f0:1f:f3:f3:b6:dc:
f9:6c:2c:d9:81:a4:6f:68:7c:3c:62:7a:2d:a2:d7:19:4a:4a:
b5:74:9f:2e:a3:92:39:03:90:e8:3b:1d:c7:03:88:03:b6:b4:
9d:9c:62:bc:fb:2c:07:bd:54:e9:cf:87:9b:4c:69:ea:44:af:
fc:06:d0:80:d1:53:33:5b:3f:4c:7d:17:5f:3d:92:99:53:39:
ba:14:10:eb:97:29:3b:7c:4e:6e:1e:9d:87:a0:c3:ab:c3:2e:
11:3d:32:65:3a:7d:79:af:45:cd:c9:e7:31:53:0a:07:d9:8b:
1a:3b:e4:3a:f2:00:5d:d6:34:43:a0:1e:76:b4:ab:3a:9d:17:
30:ba:4f:e3:3e:99:18:5c:b4:ee:18:a9:f7:c4:de:61:83:c7:
1d:fc:36:1d:94:c1:42:ec:58:74:da:3e:ab:3d:2d:5f:a3:6d:
6a:5d:a0:6e:a5:24:58:e0:15:0e:2d:0a:bd:b9:d7:18:e8:13:
6b:12:33:1e:ee:9c:bd:8e:10:82:ba:c0:ef:3a:90:5f:3d:3c:
ec:55:84:3e:72:2e:c7:dc:ee:88:ef:e6:94:70:05:14:13:ab:
7e:3e:97:9f:bf:2a:67:96:31:5d:01:f0:47:0f:67:4d:38:9a:
30:2e:34:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:28:40 2025 by rpki-client