Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json)
Hash identifier: sR1drIqY6XDJzlJuR9MpI9RuDSe14KLz/LR9zqPR6Zo=
Subject key identifier: 93:F9:15:CA:7A:8F:12:E1:02:29:9B:FD:A0:DA:98:88:A0:0B:D2:D5
Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0
Certificate serial: 019A7293D1FC8C67333D229D7EF74AFF8E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
Manifest number: 11CC
Signing time: Tue 11 Nov 2025 11:01:21 +0000
Manifest this update: Tue 11 Nov 2025 11:01:21 +0000
Manifest next update: Wed 12 Nov 2025 11:01:21 +0000
Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: ccCtWEH5TAiHhVDDRe6rulqpejwM99cN1gxLwpRKvv0=)
2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d1:fc:8c:67:33:3d:22:9d:7e:f7:4a:ff:8e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0
Validity
Not Before: Nov 11 11:01:21 2025 GMT
Not After : Nov 12 11:01:21 2025 GMT
Subject: CN=93f915ca7a8f12e102299bfda0da9888a00bd2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:9f:28:d2:61:30:a9:dd:34:c4:f2:0d:d6:
10:85:70:4f:b4:ce:dd:fa:8d:a8:0f:4f:34:20:8e:
a4:b5:fa:79:99:99:02:73:7e:eb:5d:8f:30:0d:be:
93:6b:b6:ea:34:2b:3f:35:06:59:ea:1c:0e:32:e7:
18:9b:e7:c8:06:31:ae:24:f7:2b:51:34:6b:ed:c5:
52:7c:33:9e:6d:8a:19:fa:82:a2:09:a3:e2:e1:fb:
29:d3:d9:44:4b:73:b2:e1:84:17:60:23:8e:f5:03:
d2:b7:23:64:cf:ae:05:b0:59:e1:17:1d:6e:0c:63:
ce:b7:36:e2:89:67:76:a1:34:1a:b9:04:5d:34:b3:
c0:08:bb:ac:09:b1:27:89:73:f8:4a:97:4a:af:3e:
00:dc:28:d9:06:97:ff:6a:d2:2b:15:ed:5b:59:9a:
83:aa:08:4f:28:b1:b1:66:db:fb:c5:db:eb:9a:eb:
c6:f4:48:33:5a:34:27:83:8e:ab:34:40:8b:d0:c6:
f6:29:8f:3e:ef:05:d6:77:6c:07:60:38:e5:2a:f2:
86:30:f2:01:14:28:5b:45:a4:ad:b3:bf:91:b2:c4:
6d:52:aa:bf:b1:78:5b:d2:04:e0:33:44:ba:2f:55:
2b:43:1d:30:24:69:65:98:60:e2:42:a6:95:fd:22:
19:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:15:CA:7A:8F:12:E1:02:29:9B:FD:A0:DA:98:88:A0:0B:D2:D5
X509v3 Authority Key Identifier:
keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e0:28:5f:94:24:e4:e4:41:31:6a:84:06:ea:6d:3e:c1:d1:
fd:6d:9a:71:b5:48:1b:c5:4e:83:f1:68:4e:b6:b0:60:78:f6:
20:75:8b:2d:db:5d:ab:28:57:10:bf:94:88:1f:c2:b4:1e:29:
2d:19:c7:88:34:7f:59:8f:ef:f0:66:89:fa:60:93:d0:7d:f0:
c6:ea:28:4e:c0:20:af:36:59:1a:53:f0:5b:27:63:f0:a5:f4:
9d:72:e0:af:06:b3:ad:98:80:7a:19:93:fc:fa:15:69:3a:f9:
b8:53:c9:c7:a3:84:10:cd:af:89:10:df:ee:3d:9b:5f:0a:ae:
84:96:52:65:35:0d:5f:01:33:c0:b4:d2:a8:10:ab:0b:f5:4d:
18:b6:0b:0f:1e:3b:50:36:a3:17:83:26:c1:9a:72:db:34:d3:
54:8a:ed:a2:ca:36:4c:28:19:5a:69:3c:9a:31:40:b4:f9:95:
92:60:48:5a:cd:f3:e2:2a:c4:1b:2a:b8:07:49:18:a2:b0:d2:
9c:a3:88:2a:b1:99:0a:9f:40:0f:bf:a1:17:a2:f7:4b:de:b1:
16:be:2b:75:b1:8a:be:fb:4e:87:5a:e3:dd:ec:a3:5c:27:fc:
93:14:86:72:12:20:d5:58:5b:b3:40:61:4f:04:33:80:dd:43:
37:bd:27:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:48 2025 by rpki-client