Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: 4bubnRjy6boUemD0TVFpUAKcrZHjDUwVLVbTdk50e9s=
Subject key identifier: AF:1E:C8:D2:1C:37:D6:0B:A3:91:EC:22:E5:79:F9:CB:8C:23:73:85
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 019A72CA7D2EB8B6DAFC2F1D499ED7203273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 1316
Signing time: Tue 11 Nov 2025 12:01:04 +0000
Manifest this update: Tue 11 Nov 2025 12:01:04 +0000
Manifest next update: Wed 12 Nov 2025 12:01:04 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: T0/hfqFKFvx+jqKweOSZ3LgIuhK4DERr42ZEKy+TeqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:7d:2e:b8:b6:da:fc:2f:1d:49:9e:d7:20:32:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Nov 11 12:01:04 2025 GMT
Not After : Nov 12 12:01:04 2025 GMT
Subject: CN=af1ec8d21c37d60ba391ec22e579f9cb8c237385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:7a:6d:1d:fe:9b:21:37:6e:31:92:da:af:
a6:65:99:12:82:17:2e:12:81:f4:17:71:c5:a4:a1:
9f:ce:c1:f5:a2:ac:a2:01:f7:ee:1f:7f:46:fb:1b:
a6:0a:18:93:0a:44:2f:23:25:88:fc:78:af:71:5f:
12:e1:64:2b:3f:e5:a4:7c:2c:25:01:d9:bd:c5:15:
1c:53:7b:ab:8c:48:19:5b:39:37:14:e2:30:d9:ef:
21:e8:8e:3e:cf:75:4c:70:3c:57:85:e0:d3:25:2c:
a3:3f:df:b8:20:9b:cc:2f:05:70:ee:cc:46:80:1d:
58:a5:37:c7:da:45:13:81:41:a3:c6:e1:02:64:53:
c7:cb:78:ae:08:4e:58:24:c1:3d:54:88:e8:05:b5:
83:79:3b:b2:1b:b7:a8:75:40:aa:8d:10:22:ff:00:
3e:72:bc:39:ed:57:e0:db:85:2a:f8:1a:4a:d2:84:
95:52:ce:47:db:2e:fe:bc:8a:71:93:8f:07:78:d3:
f1:b0:e9:15:f3:12:14:e6:ac:52:90:da:25:d1:0f:
c6:2e:98:90:22:70:21:af:2a:5c:de:d0:0b:2d:68:
df:f2:24:af:81:3c:10:86:13:27:38:4c:0a:17:46:
3c:ad:96:d8:2e:49:65:f8:4c:a5:ec:f1:90:e7:d0:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:C8:D2:1C:37:D6:0B:A3:91:EC:22:E5:79:F9:CB:8C:23:73:85
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9d:61:06:ab:d6:c8:0e:de:61:45:5e:fd:53:50:5c:9e:9b:
9f:f6:0b:0c:4d:04:2c:26:b4:c6:4f:a1:08:c3:dd:a9:a7:a6:
28:77:e9:bd:a2:6a:a4:0a:cd:93:93:7f:21:30:08:82:1c:25:
81:de:71:a4:f2:1f:25:d7:b9:60:ed:e3:51:b6:0d:31:93:8a:
40:d9:c0:78:e3:55:5c:6d:d3:46:d2:06:d4:96:b2:d5:76:1e:
6d:5e:88:6a:03:3c:b6:84:0b:01:1c:97:9e:94:c1:0e:a8:89:
2b:0d:c5:0f:32:29:6d:95:21:43:69:13:6c:a6:ce:b5:12:1b:
ab:1c:39:3d:65:7f:eb:0b:f5:e1:e7:34:4b:ce:77:83:a4:e6:
6b:ee:ee:3f:90:82:0b:12:df:ce:2d:3e:14:29:05:a5:39:a7:
b7:b4:ff:1c:46:8b:6d:11:c1:ab:70:19:2e:d7:17:a8:f0:cb:
16:2c:11:83:50:b4:51:fb:f2:57:f4:9a:5c:b8:f4:bf:81:74:
0b:38:21:09:89:32:23:21:58:f9:81:5c:df:5e:0c:9a:b0:5b:
08:de:be:6e:92:a7:7c:62:1c:36:d0:03:1c:b6:dc:eb:13:cc:
c2:e1:65:6a:3f:e8:e2:a7:dc:e9:75:01:79:de:e0:cb:5e:bb:
e4:5a:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:40 2025 by rpki-client