Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: fSMpVMk2NxP+wDd9p30w6Ywh/MgS9AmnX3+xNn41Hj0=
Subject key identifier: 43:5C:85:10:BB:B8:F2:7E:4B:84:22:06:66:13:65:3C:AA:24:F4:CD
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 019A71EE748FC47D1C2F62E07110142A051B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 0545
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: YWlOIJ+3ui4Lo0VEDHHAUeJ4dgutoyTGYoJp5gUfrvs=)
2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:74:8f:c4:7d:1c:2f:62:e0:71:10:14:2a:05:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=435c8510bbb8f27e4b8422066613653caa24f4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:6e:74:f7:29:46:ca:fd:33:70:03:bc:2e:
0f:bd:96:7e:af:0d:06:df:75:e0:c2:56:d7:c7:35:
9b:de:22:8f:49:b4:d9:68:40:51:50:d3:f3:22:75:
1d:ba:07:21:ba:59:3b:7d:d3:65:3e:3b:fb:29:96:
53:09:a1:5f:42:f3:54:54:bd:28:a7:27:5d:c1:4c:
b9:8b:1a:1d:d7:1a:56:23:77:1c:fe:dc:9e:12:f8:
d4:49:bc:ca:35:95:a5:00:fa:11:a9:11:c7:ce:11:
38:e4:72:b7:a2:0f:f0:5a:44:ef:18:f2:3f:3a:81:
85:f7:69:2b:d2:94:6e:4c:64:5e:8b:91:8c:0c:d4:
71:e6:f5:94:1b:2f:36:97:8a:18:30:df:c8:49:c5:
37:e2:c2:d2:a8:d9:89:0e:bd:d7:16:6f:87:09:fe:
cc:1d:e4:e5:de:2e:14:c3:1c:17:3c:ca:0f:40:a5:
0d:b0:11:e7:5f:6c:ae:cf:bd:5b:b1:5a:50:fd:5d:
19:5f:3e:86:11:e4:0b:14:cb:a5:49:b6:4b:01:95:
84:cf:5d:28:60:ca:00:87:01:29:df:c8:c1:f4:9f:
40:a3:1f:31:9c:8a:c9:d2:2e:03:27:84:50:41:92:
ed:15:0c:16:b0:af:77:70:7b:a7:7a:ba:48:52:60:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:85:10:BB:B8:F2:7E:4B:84:22:06:66:13:65:3C:AA:24:F4:CD
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:a0:53:27:ff:b1:69:e4:1a:97:a3:6f:36:7a:e9:88:b4:
fc:5d:95:92:e3:1f:df:f3:8b:85:23:06:eb:99:cd:75:56:5e:
b1:b3:8e:c3:ed:c1:23:c0:59:bf:66:1d:cd:7d:3e:3e:3d:3c:
16:88:14:0a:a0:a3:a7:9e:8b:a5:8d:2f:5a:11:96:0d:78:0f:
7a:33:81:87:3d:59:96:0e:5d:93:6a:9a:e1:96:bb:39:fa:0f:
34:b0:de:9c:8c:34:55:f0:5f:77:73:26:c0:be:dd:a1:3a:9c:
f7:94:dd:0c:ec:43:20:5b:39:3e:bc:ce:7d:31:84:21:38:e9:
a0:58:5a:14:18:89:b8:77:ca:12:32:82:b3:f1:ba:7d:3c:42:
22:90:15:dd:fd:e5:cb:cf:d7:96:a6:d1:dc:44:bf:73:df:6b:
eb:26:6f:ab:3b:e3:97:2f:65:0c:5c:9b:02:77:b0:a8:4b:bb:
72:3d:c6:0b:ac:a3:c8:74:d6:b5:a2:ff:ae:62:71:4e:fb:7c:
d8:4a:a7:a7:02:cf:30:cc:b9:f3:fa:fb:e9:3a:f0:71:a6:b1:
01:2a:89:a2:22:4f:1e:e4:50:00:a6:fa:b7:56:3a:a2:6c:7f:
c8:ac:32:6d:5f:4d:84:f9:08:78:c6:4d:8d:98:f7:dd:c7:d8:
9b:ad:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:51:35 2025 by rpki-client