Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: aJiRV7YHOqnflzj2ePVdfm6vJrhsEC5zkOWLXju/rpk=
Subject key identifier: 8D:F1:2F:29:28:04:B9:0B:87:43:6D:A3:76:7F:43:17:A9:77:EB:8A
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019A247901E9F9289DC3D538DDE1A1E3B34C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 133F
Signing time: Mon 27 Oct 2025 07:01:41 +0000
Manifest this update: Mon 27 Oct 2025 07:01:41 +0000
Manifest next update: Tue 28 Oct 2025 07:01:41 +0000
Files and hashes: 1: ORZQ3TzlAnbqpUbLBvAypexe6yo.roa (hash: Yedmm0b14/xeLz9/IuhulJeoi6LG8nDdvf2zdmYeKsI=)
2: bHvrcJVM0y_8UrKAkmAx19ngbcE.roa (hash: 4t/UW5F2VPqOIt+6Vl0Kdb4c0JMpjSNkucxjES6YCqM=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: zENNj9ii5hyh4+wk3/5V/18f0QXSqk489pGCDe6fiqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:01:e9:f9:28:9d:c3:d5:38:dd:e1:a1:e3:b3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Oct 27 07:01:41 2025 GMT
Not After : Oct 28 07:01:41 2025 GMT
Subject: CN=8df12f292804b90b87436da3767f4317a977eb8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:41:ff:40:4b:7c:6a:cd:cc:b8:a7:9e:f8:3a:
07:3f:86:7c:a3:45:f1:06:3a:d2:d4:fc:c3:ef:2c:
a8:34:44:fd:d0:c9:db:81:85:8f:17:18:a8:f9:60:
3a:23:01:c9:ba:f2:3e:42:f1:20:f5:27:06:68:e0:
63:4b:a9:11:94:bd:08:65:0a:f0:8d:82:74:9d:4d:
0f:5e:b4:40:56:73:32:92:5b:35:88:f6:e9:e0:89:
fc:99:8f:21:e2:08:57:97:0e:75:a9:00:62:77:05:
18:6c:97:48:03:05:3b:c6:c3:65:95:89:6e:d8:5c:
f0:05:24:55:81:2b:aa:8e:0a:5f:7c:2b:09:b2:9a:
51:5a:67:3d:c2:4a:90:15:6a:37:aa:6d:09:0b:40:
66:24:fa:35:35:db:5a:26:fa:e0:4e:6e:64:8e:d0:
8e:87:c2:40:c8:bc:77:44:e9:54:35:8b:96:ad:1d:
c2:98:a1:1d:01:fb:26:e9:24:19:32:32:f1:c9:08:
36:1c:c7:28:14:9e:7c:b2:43:38:68:e7:9e:24:55:
93:85:6d:c5:c1:9b:78:63:58:f3:3a:1a:6f:09:87:
82:20:1c:a6:21:13:54:49:17:ab:04:e3:e0:96:22:
2f:67:68:22:07:6c:70:a2:63:c4:ad:8f:7b:d5:55:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:2F:29:28:04:B9:0B:87:43:6D:A3:76:7F:43:17:A9:77:EB:8A
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0a:67:bf:7d:f9:49:3f:65:a5:d3:8a:e0:1e:12:15:94:d0:
04:76:45:7f:c2:84:cf:c9:e0:c7:cc:59:3b:85:95:6b:38:bd:
55:8c:8a:1c:8d:fe:f8:37:84:84:70:d9:60:2b:80:ff:34:1d:
53:84:ac:5a:de:9c:74:3d:c2:71:d9:d2:df:98:56:35:83:5a:
e0:67:ee:cf:78:da:66:4b:bb:d3:b8:ba:2e:57:8d:e6:f2:32:
1a:e8:93:ad:dc:73:5e:9e:2f:e1:a7:d7:e1:8d:2e:4b:41:53:
10:68:51:74:14:bf:b7:66:54:8f:0a:e7:51:05:11:35:b7:50:
b2:c2:2b:bc:a7:d7:89:bd:49:eb:bd:9c:ca:cd:dd:36:b5:17:
77:50:9a:0f:25:02:0e:c7:64:db:41:ff:da:a9:cd:39:27:b1:
f0:10:03:e6:ce:3a:de:27:fb:c3:b5:7e:3a:c0:75:31:91:ea:
06:20:b7:ee:9e:85:16:aa:7a:02:ff:8f:b8:39:f3:4b:de:18:
9b:61:70:1d:00:4a:9b:40:79:9b:62:c9:d6:c5:db:c9:03:80:
53:94:3b:8a:ca:f4:68:a9:12:53:bd:58:43:14:e7:aa:80:64:
80:27:0e:fe:36:fc:d7:23:73:28:bf:9a:e5:6d:b8:ac:2e:6c:
d0:b1:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:28:44 2025 by rpki-client