Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
File: X99RbJXdbrLR2d1ODgMobBkR9uE.mft (raw, json)
Hash identifier: e9vYmb20mPJWN2KEeV5d5n6zbA4Ugy5rDSEWMowNQ40=
Subject key identifier: A8:83:31:05:26:44:08:58:D7:4C:18:31:78:0A:96:87:9F:9A:A5:FF
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 019A71136580A3397085B5CB30FFFE8F585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:27 +0000
Manifest this update: Tue 11 Nov 2025 04:01:27 +0000
Manifest next update: Wed 12 Nov 2025 04:01:27 +0000
Files and hashes: 1: X99RbJXdbrLR2d1ODgMobBkR9uE.crl (hash: /eE+EInGPYChFqm5x9ivAiTktl7zVeSJXH0nAVvz1Pc=)
2: gDWNTfdushTYGvH0YYGiHbmkEao.roa (hash: bmF6UCiNLmG9+dRjmLyfBtuEdv4BCZD7226wgKqq0bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:65:80:a3:39:70:85:b5:cb:30:ff:fe:8f:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Nov 11 04:01:27 2025 GMT
Not After : Nov 12 04:01:27 2025 GMT
Subject: CN=a883310526440858d74c1831780a96879f9aa5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:c4:0a:a3:36:64:75:fc:6a:1e:6a:75:52:
5e:4d:9e:ea:d1:cf:0d:44:28:70:04:fc:26:6e:15:
dc:79:fa:4b:8d:03:fd:ba:1e:7b:2d:4d:f6:3f:a4:
22:c7:9d:9c:1d:c3:37:59:c4:7a:07:e5:0a:16:60:
44:cd:d0:07:fb:6a:1a:1a:10:15:b7:be:bf:8a:6c:
69:10:c0:e0:41:13:b7:b1:04:0a:dc:f5:9e:80:0e:
56:b4:f6:9b:a2:5d:9d:4c:2a:98:5a:3f:6b:a4:b7:
ee:0c:d5:8a:66:3e:69:9e:74:73:06:27:fc:4b:0c:
88:b1:52:8d:dc:f3:75:c8:b2:94:41:9b:e5:b6:1f:
f8:9c:d0:46:d4:a7:e8:80:29:b4:7f:32:8d:40:db:
86:b0:0d:4f:fa:b4:13:0d:b9:1c:46:b9:6b:ba:5d:
98:cb:15:af:3c:f2:5d:78:0d:84:ba:16:40:b4:af:
b3:40:b1:30:d4:05:f7:75:00:7b:5a:46:a7:91:9f:
9d:87:b1:25:9c:c3:b5:a5:5e:53:b5:a4:ef:e2:65:
38:f8:fd:1e:4e:13:26:ad:42:77:41:a4:57:53:d9:
43:f9:eb:10:16:9f:75:79:3d:6a:91:2b:15:c5:29:
5e:86:a8:da:d8:cb:3c:1e:68:42:16:a5:3b:96:a7:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:31:05:26:44:08:58:D7:4C:18:31:78:0A:96:87:9F:9A:A5:FF
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:71:04:88:e7:e9:48:f6:1a:34:6b:79:91:14:87:58:15:26:
0b:2e:fd:a5:51:5b:db:3d:90:92:d1:97:a8:d5:ac:d0:d7:4e:
f2:06:3d:f6:ea:33:cc:cb:31:a0:49:81:5d:96:85:a2:6b:37:
5b:42:4b:79:b8:6f:6a:07:01:6a:e3:0d:4c:20:1a:b6:70:7e:
25:32:6e:c3:3d:d8:ac:32:e4:f4:d2:b0:cc:63:7b:7b:fd:45:
47:48:fd:6c:61:13:a9:fd:69:e7:a7:2e:e3:62:11:12:bb:c1:
11:61:14:c6:5a:ec:f9:ff:39:fb:75:eb:66:e1:d2:f4:7d:5f:
57:5c:e4:a0:fd:a3:53:27:f4:6c:68:15:71:4b:74:c4:b0:f9:
b3:b8:35:2c:44:08:9d:9b:46:f7:60:9b:06:aa:d6:82:41:fc:
db:52:50:28:be:71:ea:6c:e8:01:61:32:94:d8:b5:47:ac:aa:
b1:ea:e1:7e:f9:39:84:5c:69:62:74:77:40:52:e1:e2:13:63:
73:80:8e:60:bd:6f:7a:0c:35:c3:e5:e3:ce:6e:52:12:0a:00:
70:20:19:e4:90:2e:e7:76:f9:26:a5:ee:9f:77:21:2c:78:aa:
ba:06:51:3c:7c:68:77:a4:7a:28:6d:58:82:dd:b3:75:01:55:
d3:dc:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:48 2025 by rpki-client