Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
File: X75lriPyB_ppUlX1WpB6wWCL4JQ.mft (raw, json)
Hash identifier: WMd7PhzYR6OGCJ+FeQYqDaur7LlaeQq6juMPoCwDCn4=
Subject key identifier: A9:BF:F0:33:6C:C3:76:32:58:9A:EA:C1:ED:9A:B5:62:3E:04:74:11
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 019A70DC4868C6150C096B798FB84D8DE1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
Manifest number: 1744
Signing time: Tue 11 Nov 2025 03:01:15 +0000
Manifest this update: Tue 11 Nov 2025 03:01:15 +0000
Manifest next update: Wed 12 Nov 2025 03:01:15 +0000
Files and hashes: 1: 9FUNdfnNIDDZflpkRTwpDb09HNU.roa (hash: BpM0SiFtPH/not4o5YIAAEEr6LX2KF5gaATgLFRqNII=)
2: SSI8dwqI7dLLZnkKofdbeqIpwAw.roa (hash: V8oFtPPMMVJpjeo0/zsMg1Km+/3IdAD2gZnS6mgf8pA=)
3: STf9L7OysAzVA3auf6efELGrMic.roa (hash: jJ0UrRjneJTBVHBAK5geL+DCza4MUB+Pz9cDqbQqG1Q=)
4: UATBmWHHW2WxzQOpSP-OnmiPiw0.roa (hash: om/mbZRVPg8hXXaFTnaK3rFZPZJ64+QW02960LzG76E=)
5: X75lriPyB_ppUlX1WpB6wWCL4JQ.crl (hash: +c50KoGYb1jAUcly49WnzZ0HvN+btw7iHraOxtA7UKo=)
6: ffaMH-0hGgHTMNCXX78L-h1LWAo.roa (hash: GyPeNrQVWNT93bYYebXS2jRf00/jNRqVqCrgj4gVPMY=)
7: rDF0yCBE4X8q41x2l6Nt4nfaFYs.roa (hash: xb5ZEXJ0QV1z7XXKAlC/1y6Tcd7ByFjDX9SUb7O///E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:48:68:c6:15:0c:09:6b:79:8f:b8:4d:8d:e1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Nov 11 03:01:15 2025 GMT
Not After : Nov 12 03:01:15 2025 GMT
Subject: CN=a9bff0336cc37632589aeac1ed9ab5623e047411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:23:e2:76:b3:e0:8f:24:9c:c2:36:94:cc:
f3:b6:d4:ac:61:c0:b0:c4:4f:98:5a:5a:fb:7b:6a:
80:a5:67:e9:0f:e2:2a:d2:57:14:50:db:bd:7f:0f:
8a:90:3e:f4:5d:b7:72:7e:b7:92:c8:6e:78:48:3d:
dc:20:d9:24:ef:1b:69:2e:3d:a5:1e:be:f5:59:0b:
5f:da:3f:94:e6:9d:43:96:76:84:e9:78:48:f1:bd:
7d:4c:f8:dc:a8:2d:69:e7:b9:1b:61:a6:92:17:e1:
ec:ee:26:24:c8:6f:f6:b9:42:22:8b:9d:14:89:8a:
7e:8f:e6:2f:a7:52:ea:da:1e:8b:e8:36:5d:08:d6:
6e:a3:29:06:a2:bb:10:e4:05:39:7d:c9:d8:d8:3d:
3d:d6:aa:52:94:82:8f:94:84:8f:64:10:c6:f1:d0:
8e:53:e0:5f:43:d0:a5:40:bd:bc:37:03:3e:6d:b3:
6a:dc:ef:fb:2f:d3:e5:ac:35:2a:23:f2:b3:08:04:
d0:87:03:ea:5a:09:6b:f4:59:88:7b:35:6b:15:01:
82:29:1c:5b:ae:cb:ce:67:bd:37:71:95:ee:cc:81:
62:c3:37:d6:ad:2d:4e:ac:a8:a3:9c:e3:5f:8c:8f:
cf:7c:22:28:5c:8e:fb:2a:9b:c6:49:b9:ff:a6:fc:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BF:F0:33:6C:C3:76:32:58:9A:EA:C1:ED:9A:B5:62:3E:04:74:11
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7f:c1:7c:7f:5e:44:d2:72:11:de:c4:ed:b3:5e:1d:c6:9f:
bd:6a:5d:91:ad:69:fa:be:02:7b:57:c7:68:10:87:5f:5a:38:
d4:88:d2:e9:66:f1:a7:51:2b:54:8a:ff:06:f1:e4:0a:d8:52:
8a:fd:d2:a4:48:88:63:a4:ad:d0:b4:c6:c1:be:32:74:b3:ef:
5b:71:89:1a:1e:25:60:84:24:d2:3a:87:da:01:04:af:a8:3f:
f6:f9:cd:2f:76:e3:d3:ca:30:b1:be:15:be:cf:7b:85:90:89:
a4:c4:59:eb:c7:a9:57:c1:65:23:b2:af:c7:fb:37:4f:d6:7f:
44:1b:a3:46:73:5c:d3:58:a9:6c:a6:70:52:59:f3:cd:78:41:
9b:1a:0f:22:24:d0:17:a1:7f:7d:26:6b:a9:a8:b3:40:7d:29:
35:6a:2b:f7:75:95:e9:ee:04:20:a5:1c:1e:a5:5f:4d:6c:2d:
70:ad:05:80:4e:d5:d3:86:41:91:21:06:27:f9:d7:20:da:e9:
23:bf:29:39:66:fb:fe:aa:02:dc:e3:90:8c:b6:c1:1b:a6:ad:
c4:a5:5c:83:c5:8f:a1:24:b1:8b:94:3c:27:d7:01:bb:42:86:
da:c5:c1:43:61:9a:7a:5f:75:22:bc:a9:b3:3d:f2:11:99:7d:
b4:2f:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:03 2025 by rpki-client