Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: MWd84LlnmBpw1BXVa/C9f1vONLUi+ImN1wWOnrG8cpQ=
Subject key identifier: 23:45:9D:7A:C1:05:F0:6B:BC:1F:BF:48:9A:8E:9F:0C:FF:99:FE:3B
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019A714A107D3EF71FAF2035EB8D151C315A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 8A
Signing time: Tue 11 Nov 2025 05:01:10 +0000
Manifest this update: Tue 11 Nov 2025 05:01:10 +0000
Manifest next update: Wed 12 Nov 2025 05:01:10 +0000
Files and hashes: 1: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: q6pNrNYP32ybHfptGAtfSrL1sYcTGkTtIvjCkTEMwXo=)
2: fNWf8gF7iXGvViphR_N8dfoAxbs.roa (hash: aazZL/oDilKF6hXZ5Ap5LBwXM/kHZtXfME42Y75LwwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:10:7d:3e:f7:1f:af:20:35:eb:8d:15:1c:31:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Nov 11 05:01:10 2025 GMT
Not After : Nov 12 05:01:10 2025 GMT
Subject: CN=23459d7ac105f06bbc1fbf489a8e9f0cff99fe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:4d:23:64:33:42:87:16:38:b6:c2:13:c3:
73:f2:e6:16:6e:d3:b8:a4:56:29:8b:79:a1:57:78:
5b:60:c9:d9:2c:32:4b:59:72:9a:0b:ec:08:54:0f:
5b:a6:40:1a:3c:64:83:ad:59:9c:48:5d:ec:66:5e:
3e:22:2c:1e:91:08:9c:cd:e1:e1:21:20:0e:89:3d:
e4:b7:88:c8:f2:b0:d3:3b:84:d9:da:95:8e:ea:49:
28:96:24:25:1e:ed:25:2f:6f:a6:fd:48:c1:12:04:
f3:d9:85:a7:6d:84:26:c0:e7:97:f8:44:0d:37:9e:
b7:9f:89:b0:b7:f5:9d:19:76:a5:b5:46:fe:fa:5d:
94:cc:3c:16:b5:65:87:a4:e2:99:2d:e0:12:df:d9:
6e:31:bf:39:d4:d4:de:47:3b:f2:fb:5a:b5:70:be:
fb:50:5d:ac:aa:68:cc:5c:1e:da:27:a7:4e:d9:8f:
b4:13:80:91:db:b1:4d:27:8b:6c:72:e5:2d:86:02:
89:23:06:ca:b3:c8:c0:60:83:fb:1d:f8:41:95:cb:
7a:bd:a7:80:64:f2:98:5a:be:03:1a:fc:db:c2:aa:
6e:e8:c6:f8:65:4c:71:38:cf:70:cc:20:69:c4:dd:
62:6b:2d:65:1a:14:01:a2:2c:9b:ee:d5:7b:92:73:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:9D:7A:C1:05:F0:6B:BC:1F:BF:48:9A:8E:9F:0C:FF:99:FE:3B
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:02:50:b1:fd:9d:c5:0d:6b:da:61:96:11:bb:89:53:e4:ac:
54:eb:c3:81:90:f8:9d:70:ab:68:05:32:51:29:03:66:6e:cc:
fe:3c:2d:4b:94:41:d5:b9:3c:89:23:f9:8b:a1:2c:79:28:aa:
b1:8a:3e:82:ab:d5:a5:d6:9b:22:60:8f:8f:97:23:f2:20:65:
5f:82:ee:18:7c:31:cf:93:83:70:67:75:0b:46:21:ab:29:4d:
bd:d7:a3:df:6e:e4:09:31:e4:b1:ae:32:87:b0:8a:66:8d:fe:
e8:0a:57:8b:7f:ad:8c:eb:13:2e:39:b0:e2:ad:aa:30:cd:9a:
8c:e2:c5:c8:2d:29:2d:3b:b5:e4:39:f9:18:ab:ba:73:27:5c:
2e:fc:ad:13:3a:25:49:c3:d8:5e:1a:52:24:89:90:53:69:36:
5e:b5:27:7b:df:2e:77:c4:02:07:1d:9b:ba:95:f6:30:04:1e:
d6:af:6b:ff:03:cb:c2:69:85:da:3d:ea:f7:8e:c0:76:72:a5:
53:30:13:f0:30:1d:79:92:bf:f5:47:ba:18:92:f3:ec:dc:4f:
a1:90:70:c2:3c:28:ab:bc:1d:93:8f:c9:82:7d:8f:0f:69:8f:
81:63:a6:0f:c9:a6:d6:9f:75:9b:bb:94:07:d6:1e:6f:e6:9a:
8d:07:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:25:00 2025 by rpki-client