Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: PDn0M6fD26ZylGqKREU4oc7K46divQIhu3ipBUXb9t0=
Subject key identifier: F3:13:8C:28:A9:A7:50:22:3C:E9:C2:60:1F:05:7C:B5:DB:E5:9A:A6
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 019A0592B0642DE5F28E8B10DA4C893A5BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1711
Signing time: Tue 21 Oct 2025 07:01:30 +0000
Manifest this update: Tue 21 Oct 2025 07:01:30 +0000
Manifest next update: Wed 22 Oct 2025 07:01:30 +0000
Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=)
2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=)
3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=)
4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=)
5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=)
6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: ijyiUq4XWF9FGFt7IOglGxIU1T+McKwlC+lFKsJug7o=)
7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=)
8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:b0:64:2d:e5:f2:8e:8b:10:da:4c:89:3a:5b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Oct 21 07:01:30 2025 GMT
Not After : Oct 22 07:01:30 2025 GMT
Subject: CN=f3138c28a9a750223ce9c2601f057cb5dbe59aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:ba:48:1d:67:83:3e:cf:09:b6:24:69:67:
18:d4:f3:e8:4e:d6:c9:4b:be:37:86:4d:f6:3a:4f:
4e:ff:a5:6d:33:32:59:55:47:d7:83:e4:be:fa:63:
b0:dd:2d:de:6f:ca:81:60:a6:92:5c:e7:bf:6b:b1:
81:d7:88:0d:1b:42:f7:7a:e7:16:be:b0:ca:47:7a:
15:58:e3:f8:f6:8b:88:a2:77:f7:fc:08:0b:38:7b:
de:85:1d:8e:c1:bd:06:b7:8d:7d:9e:2c:31:35:2e:
8c:16:14:5d:69:fb:a9:37:28:df:7d:c3:71:10:05:
06:e7:dd:d4:0a:ca:e6:1f:86:6d:4d:25:19:f4:aa:
55:15:f6:ee:1a:dc:e6:69:09:be:80:45:6b:f0:f2:
de:c3:db:c1:73:fc:30:ec:0a:70:20:e2:8b:ac:1f:
48:39:2f:03:e7:1c:82:54:8c:63:3a:6a:8a:f9:02:
72:3c:b4:8f:0a:26:1d:cf:45:2c:7d:74:0d:fd:b5:
d7:f8:a1:5b:d6:d9:c0:33:2c:5e:0f:cf:86:5a:eb:
9e:2c:3c:91:ea:f7:32:d3:e9:03:83:8e:f3:d8:64:
7a:9d:07:cd:4f:aa:46:3c:a8:58:29:9c:6b:62:5d:
07:c6:c0:9b:8b:17:2b:06:3e:d7:c0:1e:7b:7a:5a:
83:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:8C:28:A9:A7:50:22:3C:E9:C2:60:1F:05:7C:B5:DB:E5:9A:A6
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8e:2c:71:ca:f7:77:5e:03:b2:15:6f:90:30:e7:de:c4:6c:
26:b9:60:e6:0a:b9:06:ba:84:77:9a:20:3c:64:0b:1f:3b:c9:
e9:6f:f7:ac:6c:78:b3:6d:25:22:e2:18:da:f7:82:55:5b:a1:
5f:d8:d2:9e:cf:cd:ba:3a:cf:66:a4:ef:70:25:5b:9e:23:62:
c5:1a:28:ab:01:35:31:50:02:05:c6:36:9d:6c:4c:16:f6:dc:
ce:8f:0d:24:9c:cd:2f:a3:00:54:10:eb:00:50:b4:4f:2e:57:
1a:88:b3:1d:11:20:22:d6:5a:0b:1f:88:49:89:ab:58:68:3e:
20:a7:43:4e:47:6b:48:77:ae:ab:df:84:e4:5c:02:0e:ba:90:
13:66:d0:8e:7c:af:ef:d7:cd:95:91:1a:80:d6:55:26:6a:29:
34:9d:66:fb:59:e4:5a:c4:6d:ee:07:c8:b3:85:fb:af:f2:0b:
6d:c3:ef:7f:58:cd:7f:66:c7:6c:04:f5:31:43:22:0a:11:1a:
e3:ad:c9:db:c9:a5:76:6a:be:31:80:c5:e4:12:0f:e4:48:43:
0e:0b:5c:f9:bc:3b:6f:72:14:7f:9d:94:2e:bb:8a:b2:0d:f1:
89:91:cf:f3:91:24:3d:d2:3d:8d:ec:15:8f:64:45:21:cf:a6:
30:12:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:54:29 2025 by rpki-client