Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File: x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier: L1CphK3dhz1f5CWs69bF8AvxHlQlcfRlf51epoiqywU=
Subject key identifier: C1:C0:4B:72:1E:4A:0E:51:8E:80:31:45:A2:43:A0:2D:3C:DD:D9:DD
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial: 019A22C0D2B575D979DA38AA11642686A719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number: 1408
Signing time: Sun 26 Oct 2025 23:00:53 +0000
Manifest this update: Sun 26 Oct 2025 23:00:53 +0000
Manifest next update: Mon 27 Oct 2025 23:00:53 +0000
Files and hashes: 1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: MzHVPHV+zfmWggH6nUSeJVDioGKkSG0ilpQbgikZu6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:d2:b5:75:d9:79:da:38:aa:11:64:26:86:a7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Validity
Not Before: Oct 26 23:00:53 2025 GMT
Not After : Oct 27 23:00:53 2025 GMT
Subject: CN=c1c04b721e4a0e518e803145a243a02d3cddd9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:ad:a2:9e:42:5e:cf:53:ba:76:f4:dc:30:
fb:3a:35:7a:02:df:98:3f:71:50:49:d8:d8:7e:63:
dc:33:90:3e:0f:2e:34:89:aa:76:6a:a6:06:c2:dd:
18:c9:9b:bc:64:80:75:73:8a:65:ec:fd:12:0f:9d:
1d:8c:b2:b8:d2:61:70:e0:a7:bf:4f:f4:dc:73:8c:
3d:c5:bb:9d:a9:ec:0a:9b:d7:ee:a2:53:d5:f5:09:
77:c8:52:d8:2a:a2:5d:91:cf:c0:53:dd:57:a7:17:
d3:c0:01:23:8f:71:19:1f:94:a0:89:fd:d1:36:b9:
eb:85:72:37:2a:61:ad:96:8d:39:0c:77:f3:a5:03:
4e:5b:c3:b1:16:ad:bb:19:0f:bd:13:da:f7:47:a0:
d2:98:a1:2f:8f:b9:b9:96:1d:f1:e3:2c:c5:b7:6c:
b6:58:77:16:16:3e:56:11:9f:57:2a:d1:0f:da:b1:
8d:43:f1:6a:f8:02:bf:25:9a:27:5c:5f:d4:f8:f6:
2e:ab:af:cd:85:22:a4:54:78:fb:ac:cd:86:26:5e:
c3:c1:6b:6a:78:e5:33:61:cb:aa:89:c1:0e:f8:0c:
d5:0e:c7:59:2c:85:73:d5:2e:a1:95:27:49:91:9f:
c4:68:ba:ba:1e:cb:6d:a8:3d:4c:d6:8e:d8:c9:11:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C0:4B:72:1E:4A:0E:51:8E:80:31:45:A2:43:A0:2D:3C:DD:D9:DD
X509v3 Authority Key Identifier:
keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:16:28:8d:17:15:c1:f9:e4:65:8d:c8:57:c8:84:0e:9e:89:
da:93:3e:2d:bf:b2:00:37:1e:ba:b8:50:a7:57:19:82:3a:75:
06:15:34:b3:7f:0c:1d:94:05:01:08:a0:ce:1b:d8:e7:66:81:
1d:8b:b4:ec:94:f6:cf:87:57:db:c4:f4:e2:c2:d5:09:a6:98:
63:78:53:ca:bf:28:fc:d4:76:7f:2d:42:a9:f7:fa:69:a5:45:
fc:5e:9e:21:2b:7f:d5:00:1d:ee:1b:ea:e1:18:36:d0:45:9c:
5f:e1:1a:61:40:ce:2d:60:c0:09:5e:06:4e:f6:aa:39:8b:0b:
3c:ed:7b:e3:94:78:ac:4a:0a:63:e4:5b:67:21:90:ae:f1:2a:
57:6a:4f:0d:da:21:4a:b9:d1:c0:5e:8e:4d:3e:d6:67:90:00:
52:f8:dc:e9:f8:a2:55:f5:93:f6:f5:5a:9f:80:ea:1a:df:14:
38:4f:78:44:4b:37:f3:9d:2b:10:0f:5f:8b:3d:27:94:23:91:
59:9d:5a:4e:87:ea:16:32:a7:80:18:65:2e:01:37:89:11:87:
08:30:52:a2:97:db:bd:63:4d:9a:89:b8:ca:6e:ca:51:f4:9a:
ff:12:89:74:f8:91:d5:15:da:9b:8d:c3:6a:03:9b:95:b3:cd:
36:53:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:13 2025 by rpki-client