Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json)
Hash identifier: NH61tTiy6Op77EPC+hfbLra3KT0kXJw6h2quPeK8Qfw=
Subject key identifier: F6:DD:13:6A:CE:66:BF:35:30:49:28:CA:71:BB:17:A1:39:2F:D2:CD
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 019A706E87D377CB4ABD53514C8CC9EF7FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
Manifest number: 01F4
Signing time: Tue 11 Nov 2025 01:01:23 +0000
Manifest this update: Tue 11 Nov 2025 01:01:23 +0000
Manifest next update: Wed 12 Nov 2025 01:01:23 +0000
Files and hashes: 1: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (hash: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=)
2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: wdzvRVe2K57jkiqbTbQZ+ZmyhhqSDcbMXbVo966QnmI=)
3: u0GrLYuACL29DiJCWcYq6HEFJlU.roa (hash: cbSwt1t630uppqdr6/nRai1LaCLEx7Kek/cW9oYpqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:87:d3:77:cb:4a:bd:53:51:4c:8c:c9:ef:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: Nov 11 01:01:23 2025 GMT
Not After : Nov 12 01:01:23 2025 GMT
Subject: CN=f6dd136ace66bf35304928ca71bb17a1392fd2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:6c:63:fd:ac:51:b7:aa:d6:00:bf:42:6a:
25:d7:88:79:da:c1:fc:a3:7b:79:f3:08:96:27:df:
5d:56:5e:82:f5:f1:92:51:06:17:d1:fc:58:f4:e2:
47:e5:74:4c:f7:90:03:fc:e4:60:a0:8a:d6:fa:56:
89:da:27:0f:69:b0:57:22:ec:0b:70:4d:38:60:6f:
d6:f3:ea:fe:66:e6:82:f6:0c:74:6d:b1:4c:b0:de:
c6:82:b1:59:a2:7d:5c:e3:9d:49:65:62:0c:1b:92:
dd:68:f7:13:0e:bf:ff:9e:d4:a1:83:03:68:52:d9:
65:fe:7c:8c:30:01:46:b3:76:7e:75:51:55:d0:0b:
36:43:27:b0:77:18:1f:3c:1f:63:ba:aa:db:86:75:
4a:3f:d0:a7:08:96:1e:aa:b8:45:ca:e0:16:8a:ed:
84:f8:ac:22:33:85:44:48:43:9d:56:0a:0d:38:4f:
d3:69:1e:83:1e:fa:86:30:1c:eb:35:92:1a:d4:c3:
e3:b0:47:59:14:41:9f:6a:2c:bc:22:9d:5f:1d:c7:
ae:fc:da:e6:ec:59:88:0b:5e:0c:02:03:b8:35:7d:
48:b0:c1:58:19:42:d8:4d:ac:4c:a6:ef:fd:dc:7e:
0e:e3:9a:d2:63:2c:de:c5:7b:55:04:d2:99:f2:b9:
c4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DD:13:6A:CE:66:BF:35:30:49:28:CA:71:BB:17:A1:39:2F:D2:CD
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fd:a3:44:6a:58:55:9f:c4:f8:da:69:cc:f2:c8:b0:29:43:
37:db:b4:ba:10:ed:6c:c6:85:9b:51:e2:c9:c0:11:14:bf:9b:
f6:a3:66:1e:36:b8:8e:3b:4a:63:04:89:8c:bc:02:83:b2:ec:
80:eb:22:f9:29:fc:34:98:f6:4d:76:cc:3f:11:f9:a5:0d:fa:
21:27:7c:c0:62:2d:be:25:1f:b9:ba:4e:d0:b3:49:d9:53:90:
6c:ec:c6:2e:b7:08:c1:64:62:74:a9:f2:7e:dc:c8:5b:64:76:
f5:5c:0b:6e:0b:cf:31:f6:b5:a0:de:e4:dc:04:9d:98:b6:43:
8d:3a:ae:e3:ab:ad:69:12:b2:7c:ca:f9:4c:57:45:15:5b:13:
ff:0a:c0:51:77:96:da:9c:c4:12:ba:9d:d2:91:da:2f:ca:28:
f8:cf:90:48:4a:b5:1a:a8:dc:88:23:5a:36:cb:2f:6a:bc:54:
78:06:c0:74:fa:f5:a4:a5:a0:ad:74:4a:00:22:d8:a2:97:bb:
44:a3:07:c0:b2:bd:7f:23:06:88:6a:d1:0d:8f:05:0d:5d:ce:
cd:8f:6b:9e:4e:52:a0:1c:79:a4:46:b8:82:f5:32:33:36:11:
24:c5:ea:07:2c:86:9d:15:47:6d:b2:62:4c:1d:65:c1:c9:85:
9d:6a:f4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:59 2025 by rpki-client