Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
File: Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft (raw, json)
Hash identifier: TRuJ6pjNAdSfWZiVL8l6Byt1JdDouctDiMCpaLP9zyA=
Subject key identifier: C2:CD:26:1A:9A:76:E8:C0:4B:9B:2B:71:17:6B:9A:6C:0D:CC:C7:61
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 019A70A541608EC6370C5CC26671E9AFBF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
Manifest number: 1100
Signing time: Tue 11 Nov 2025 02:01:09 +0000
Manifest this update: Tue 11 Nov 2025 02:01:09 +0000
Manifest next update: Wed 12 Nov 2025 02:01:09 +0000
Files and hashes: 1: Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl (hash: GqryU2zcg+pxvm/qKr2D8kRhWOkrp72FQ6GCRcKabw8=)
2: wonoA_cs_njK19k2rpw4egFrSTU.roa (hash: ng5AEw7xNqDcHFkEECYFEyho12TTUkJenLRXIkEgt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:41:60:8e:c6:37:0c:5c:c2:66:71:e9:af:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Nov 11 02:01:09 2025 GMT
Not After : Nov 12 02:01:09 2025 GMT
Subject: CN=c2cd261a9a76e8c04b9b2b71176b9a6c0dccc761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:af:2c:07:c6:86:e7:e8:81:99:16:95:4d:
b2:3d:b9:0e:be:05:9c:86:b5:31:f5:ba:e2:ec:4e:
e0:11:46:68:cb:45:89:26:38:13:01:8b:c7:bc:78:
fd:73:8b:00:22:3d:2a:be:2d:da:d9:01:d1:0a:57:
d9:91:c4:ae:d5:76:48:ce:3c:87:38:d9:ef:af:ed:
05:82:5e:ee:f4:cb:75:40:0d:52:6b:a2:8a:03:80:
d7:ef:a7:c3:13:f9:99:d8:ca:b9:f6:dc:99:cb:23:
89:e2:34:ac:77:26:0e:44:5e:2c:d3:bb:dd:09:67:
52:0f:17:20:95:63:55:1a:c7:13:f1:36:eb:c0:2f:
c1:22:c6:43:74:a2:94:63:12:5e:19:95:0e:31:b7:
4c:fa:51:61:8b:9b:4e:9b:fe:ee:5c:00:57:c7:e6:
7d:66:d2:12:b7:05:57:5c:8e:ea:01:1e:d4:85:3d:
d6:c7:2e:23:e3:66:1c:18:23:55:3c:25:cb:94:0c:
73:93:bf:1c:7c:5a:7a:1d:ec:1b:f8:0e:6b:67:62:
5e:c0:a7:cf:70:26:9e:b0:10:73:f8:93:12:73:fe:
e0:9f:38:df:bc:7c:82:8e:0d:8a:6f:4d:ac:c5:5c:
61:5d:9a:e0:d7:af:c1:aa:f3:3c:1c:87:08:79:69:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CD:26:1A:9A:76:E8:C0:4B:9B:2B:71:17:6B:9A:6C:0D:CC:C7:61
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d5:e2:8c:ac:6d:12:a6:cc:3e:3d:fe:7c:66:8d:75:ff:fc:
e8:1e:5b:be:8a:76:ad:42:ed:7f:bd:ca:d6:88:e8:e9:49:5a:
0f:e9:bf:1b:a3:0b:b9:37:5d:5b:e9:04:a1:d4:02:f7:e2:a6:
13:e6:9f:26:2e:41:0d:10:ed:08:0c:ec:e4:92:b7:3d:23:d8:
d3:a6:78:1d:cf:db:c0:fb:35:96:ac:f7:ef:66:f3:a7:31:45:
65:c5:6b:7e:a8:21:74:cd:c8:a3:b4:71:23:b0:a0:84:c3:de:
62:b0:2d:b4:75:22:6d:9c:9b:ef:47:c1:28:1e:43:64:68:09:
b8:af:9d:b3:8a:f2:67:1f:65:ce:ba:a8:e3:4f:fc:60:3a:40:
23:25:15:af:7e:bd:33:c4:67:c9:55:a5:67:05:01:2c:1b:03:
fd:9e:83:02:b1:6e:9a:31:10:de:f7:d5:65:05:f0:00:fd:fe:
0c:a4:6e:fc:63:be:92:4f:4a:d3:df:81:c9:64:82:76:24:fb:
1c:34:99:dd:5b:47:21:c4:70:d9:f6:e8:a3:b5:f1:95:0c:b1:
af:cf:21:fb:f7:f4:0b:cf:d2:c9:81:a5:30:46:42:5d:3d:a4:
a2:df:a8:ca:ce:33:13:83:21:0f:c3:e5:c7:6e:f9:54:a0:2b:
31:12:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client