Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File: Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier: 8FAd1J+ITeEl1c+hHklxKvla8iCiuBYR0MWPKXzgdE0=
Subject key identifier: 2F:37:A1:E1:5F:F8:BE:C8:61:54:F5:BE:0C:DD:B1:A3:E6:B2:99:3A
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer: /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial: 019A71809C223F1A016B5DADF05484ABA515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number: 0F50
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: PCViN5XjjWy3uXa6yVs2Quk_6To.roa (hash: Aquofks2bcfd5azy6+IqavH7O37I4bc+/mKKyjG/YPU=)
2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: pvupWCx9yyExoENWoPifX2IA7MhOA1xIIHqw7+87PSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9c:22:3f:1a:01:6b:5d:ad:f0:54:84:ab:a5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=2f37a1e15ff8bec86154f5be0cddb1a3e6b2993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:0e:af:4b:ab:46:6b:ac:f8:20:77:d2:5f:
4c:b0:62:56:3c:0d:3e:a9:62:de:68:6c:59:c7:bb:
18:af:0a:3a:76:08:d7:aa:f1:71:1f:47:ed:e9:86:
4c:36:2f:fa:57:8c:77:4c:bd:df:ee:4f:e5:0f:e7:
a2:8b:f4:a6:f8:ce:ae:18:90:92:c1:28:60:8e:df:
46:57:a8:f2:c6:10:ea:65:81:48:3f:34:80:29:b6:
11:8e:be:19:d3:19:15:7e:e5:83:96:da:cf:69:a0:
67:5c:45:32:23:da:62:b0:d7:fb:66:b9:a8:64:ac:
2b:55:7a:17:fc:d3:28:4a:4c:e9:71:80:45:68:d4:
81:95:8c:ab:e3:45:f3:8e:31:88:db:e8:94:0e:05:
74:6c:20:48:24:15:6a:b9:15:1d:3d:17:ec:55:50:
98:d4:0f:e7:db:ca:09:e1:3f:dc:75:1b:80:3f:c9:
3b:85:ac:fd:22:16:54:98:20:68:c5:88:79:7a:11:
59:30:46:92:d6:11:c0:6a:7e:d2:38:d3:b8:00:24:
1a:a4:7c:c4:99:c8:48:34:f6:71:05:bc:0a:cd:fc:
3f:82:47:79:79:ed:dc:f1:e6:1d:81:e4:f6:83:d7:
9b:d2:32:fb:aa:0a:6a:f8:72:9c:6c:ad:1d:00:1f:
2c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:A1:E1:5F:F8:BE:C8:61:54:F5:BE:0C:DD:B1:A3:E6:B2:99:3A
X509v3 Authority Key Identifier:
keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4f:9f:ad:ee:a0:66:d8:5c:12:c2:d1:d6:2c:f8:a4:5a:78:
0f:81:7f:60:35:c3:c6:18:e1:7e:b2:33:bb:1b:b3:12:6d:6c:
05:be:26:fe:3f:49:a6:f3:ff:5f:c3:8c:03:00:83:da:94:bc:
c8:26:24:e3:19:5b:3b:8e:72:82:20:97:3e:57:c4:86:8c:dd:
10:9f:9b:21:ed:c3:4d:0d:7d:89:ee:e1:ad:d0:10:d7:77:e5:
a8:f7:f4:d9:0b:9e:6b:8b:84:0f:fc:80:22:79:7b:02:b5:99:
15:b8:e0:54:20:00:0a:72:97:c0:6b:38:eb:24:63:3d:d1:ee:
73:68:10:74:a2:c5:ae:31:d9:12:5e:13:50:7b:cc:72:10:fe:
cf:df:8e:10:b4:9c:e1:90:a8:a7:03:43:89:3c:d9:26:5e:3f:
71:f4:f0:e8:fd:68:70:54:18:94:97:4e:c9:a1:a3:43:14:85:
3c:67:73:19:1d:e5:82:c9:59:dd:1f:a2:db:84:04:03:1f:35:
9b:f5:f6:f3:31:e5:66:57:24:21:b9:eb:87:17:69:3f:5f:e9:
27:4d:6e:a4:06:aa:27:b5:25:9e:a1:6b:17:a0:a4:c7:20:ed:
14:1f:a9:c5:6d:08:40:9f:13:44:6d:95:eb:35:86:24:60:f1:
dd:28:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:04 2025 by rpki-client