Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier: 3tAQRYTBxW63Ye0LSxv07S9SQDu49+VV6qwp2vbAv8g=
Subject key identifier: 01:1B:E3:B5:70:DF:88:60:04:DB:0E:EC:2C:49:92:03:D7:99:8A:D0
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 019A71B7E4B951FC5294E34725F49E7AAE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:08 +0000
Manifest this update: Tue 11 Nov 2025 07:01:08 +0000
Manifest next update: Wed 12 Nov 2025 07:01:08 +0000
Files and hashes: 1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=)
2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: VnSzwBiQ5pU4IpBcTZ+hFyRKwXKAs1j9w7Wb3Sx49MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e4:b9:51:fc:52:94:e3:47:25:f4:9e:7a:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Nov 11 07:01:08 2025 GMT
Not After : Nov 12 07:01:08 2025 GMT
Subject: CN=011be3b570df886004db0eec2c499203d7998ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8c:3a:d8:25:7b:20:01:2a:34:75:8a:3e:f1:
64:2b:13:ae:80:cc:5e:87:8f:93:30:1d:c0:17:99:
a6:87:7c:5b:76:62:2a:f3:f1:98:9d:a6:00:62:cc:
74:e5:83:69:be:3a:92:62:34:e6:84:2f:6f:a6:d5:
42:39:15:83:b6:2c:b4:c2:9b:5d:63:65:2a:3a:be:
f4:36:51:40:ca:73:10:b1:b4:87:7c:81:a0:9f:93:
6c:e6:ee:ec:99:d4:2d:a7:9e:3c:83:dd:5b:76:55:
bf:f5:5c:a5:ff:88:c5:b2:ba:29:10:48:c9:f7:31:
5c:7e:29:38:18:32:ad:61:43:ae:68:0e:db:5e:b2:
aa:2e:7d:b5:e2:8a:c5:6d:8c:9b:73:94:50:d1:ed:
7d:ea:a9:b5:5f:ad:87:52:a2:ef:83:b3:f5:e5:78:
54:a0:3d:9c:73:28:ea:75:bc:04:a3:98:91:d6:55:
f1:34:f6:da:9f:9f:b5:99:52:02:a2:c5:41:45:10:
ed:55:40:df:4e:91:88:4a:e8:98:f7:96:46:6d:34:
ad:4d:b4:68:70:e1:05:3b:f0:6c:62:21:fc:81:39:
26:9f:67:78:3a:a1:6b:e9:2b:82:69:01:ed:94:68:
f2:75:3f:07:ba:bd:ac:67:a3:60:9c:09:f8:3d:46:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:E3:B5:70:DF:88:60:04:DB:0E:EC:2C:49:92:03:D7:99:8A:D0
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8e:3f:00:78:a1:bd:81:1d:6f:3b:e6:a0:55:05:c0:f7:79:
af:9b:07:97:9b:db:0a:9a:fd:5d:90:30:0c:32:08:b2:68:39:
9a:be:a2:1f:9a:3f:8c:69:5f:44:ce:80:6c:3e:af:70:c6:9b:
6a:65:8b:9c:ca:af:1d:2f:39:58:32:88:b3:86:cc:93:22:4b:
cf:88:d8:52:1a:71:f5:fe:0b:c8:95:fe:c8:e4:35:04:68:eb:
dd:7f:c5:14:cb:65:d2:58:d0:e0:44:63:5a:34:d9:e0:c8:80:
a1:4d:04:8a:74:da:cc:0d:c9:e8:9c:53:fa:48:2a:fc:6e:62:
b0:f3:4a:9a:c3:34:0c:a3:86:4d:05:2b:8f:33:e6:aa:fe:d7:
71:02:67:36:d5:d2:02:e9:18:dc:58:85:d9:e9:0c:d5:2c:4b:
6c:2b:12:b4:08:0b:76:ec:bf:59:5b:0d:cb:b2:6e:c7:ae:f0:
11:ea:2b:12:eb:2f:c0:f5:4f:f7:6e:3e:ed:d9:e9:82:78:14:
17:38:90:42:23:9d:1e:37:30:a9:74:de:85:b2:28:86:a0:a1:
7c:22:0d:c7:98:21:5a:c1:7a:0d:7f:40:9d:9b:83:94:c8:ce:
e6:a8:9f:82:be:e6:e0:da:26:28:bc:1d:ce:81:af:1c:c7:0b:
6b:73:62:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client