Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: 3eYHIfMTIAXLls1VIe+FgdxpPLuNR6DCtj3P3ZjqwMU=
Subject key identifier: 00:BD:71:4C:4E:15:AF:A5:8A:5B:DA:A6:BB:3D:8E:A5:AF:C9:73:E5
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019A71B877A90224B609A219369E7559AAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=)
2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: PatxeGE7avCaWDmr4KgCp/EeMJ4Lk+7RNbOcTafdDL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:77:a9:02:24:b6:09:a2:19:36:9e:75:59:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=00bd714c4e15afa58a5bdaa6bb3d8ea5afc973e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:5d:17:a1:4b:f9:73:a7:69:69:25:25:c6:
ba:f1:b5:ab:89:50:a8:a0:a2:4b:97:63:1b:d4:51:
0f:f8:b3:66:a4:f2:ed:5e:6c:e8:af:84:be:be:fe:
03:ab:a4:0c:18:8d:2a:c1:13:1e:14:03:1f:4f:d0:
f3:17:c7:38:95:f4:f6:d6:8a:af:6a:1d:8e:35:0b:
3d:4f:5e:c5:19:56:19:a8:c4:e7:6a:b7:3d:e5:f9:
d6:e0:24:58:e5:a8:63:e6:0a:cb:f4:e2:cb:94:e3:
07:0b:6f:60:de:33:df:4c:3d:ef:87:34:b2:e8:f3:
ed:23:d7:94:51:5b:05:17:f9:7f:39:18:bb:7f:cf:
72:15:07:ca:57:aa:8f:4b:36:f9:b3:3a:1f:97:f0:
03:23:83:00:d7:31:2c:74:9e:0d:23:94:8b:8a:82:
73:07:a6:ce:13:0b:75:f6:d5:1e:12:e8:62:e0:1f:
cc:4e:5e:ee:58:48:d3:cb:aa:dd:60:0e:8b:dc:62:
26:d1:03:e1:49:73:af:9e:aa:92:0a:5c:47:8a:2c:
3d:ec:3c:99:11:13:4b:16:ff:f3:df:c6:4b:15:77:
0b:07:fd:c9:39:a8:5b:2d:c5:92:f4:b0:3a:99:56:
7c:dd:73:53:b6:18:41:47:af:9a:ce:dc:14:a2:81:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BD:71:4C:4E:15:AF:A5:8A:5B:DA:A6:BB:3D:8E:A5:AF:C9:73:E5
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:68:9e:eb:88:1a:1d:80:b3:e1:a2:a4:89:4b:7b:6d:06:b9:
03:62:c9:83:fb:e6:9e:d9:a1:2f:ea:16:7f:84:c7:d8:11:22:
e5:bc:99:81:a7:30:62:33:2c:c4:d6:b1:9a:c8:cd:9c:2b:8f:
87:ac:f3:1f:13:63:55:c7:32:10:29:4a:cd:08:7b:90:5b:56:
84:c9:4c:a8:ca:9b:a3:2a:2f:b3:96:8a:8a:64:cf:df:32:5d:
75:95:65:d4:6c:77:ac:4d:fb:cc:11:05:1a:54:a3:31:4b:dc:
04:1f:35:5b:7e:b9:fd:60:d6:09:40:b6:96:c4:95:37:7d:54:
57:3c:c0:eb:cf:ba:fa:9c:ba:c8:fa:a2:71:76:08:81:51:5d:
8e:e8:bf:bb:70:9d:45:e3:69:c5:3a:a8:eb:9d:81:c2:85:32:
3a:15:75:83:40:c7:c7:3e:c2:fb:99:26:49:fa:2e:55:98:79:
8e:c5:59:93:06:c9:8e:d7:45:ae:62:5c:b3:8f:e6:2e:4d:7d:
b8:5b:a0:39:cb:2d:ef:24:c7:50:c3:76:54:d7:e4:93:94:af:
ef:e1:01:4d:1a:6c:a7:3c:09:dc:7d:ed:03:fc:af:60:a3:18:
94:69:18:3f:4b:0b:4c:b0:f9:99:46:23:55:fe:c1:0f:07:65:
68:c6:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:17 2025 by rpki-client