Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: Be8ALRnt9m7HjkYI98ttOC8iqMoZwUtJEy3kfwJs3ds=
Subject key identifier: 83:9B:39:12:58:12:E1:53:4C:60:1E:AF:21:E0:93:DF:0E:F2:5F:8C
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019A51BE6C2DEA98E906D688DF0EB9E91193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 1691
Signing time: Wed 05 Nov 2025 02:00:25 +0000
Manifest this update: Wed 05 Nov 2025 02:00:25 +0000
Manifest next update: Thu 06 Nov 2025 02:00:25 +0000
Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=)
2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: a+MulAtN5uOvVlKWINwYudSnOm6Kiv5YaD3IEvfktjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:6c:2d:ea:98:e9:06:d6:88:df:0e:b9:e9:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: Nov 5 02:00:25 2025 GMT
Not After : Nov 6 02:00:25 2025 GMT
Subject: CN=839b39125812e1534c601eaf21e093df0ef25f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:6f:04:7b:0d:0b:18:d3:a8:88:f0:ca:78:
f1:c3:73:27:65:ff:97:0e:a3:23:4c:f7:43:4c:4d:
9a:f5:b2:7f:2f:5f:ea:bc:ee:69:2e:c5:28:d4:80:
fa:80:dd:31:bd:b3:04:fe:4c:92:ed:7a:9e:73:43:
ef:31:61:d3:7c:e5:0c:25:2e:51:39:6f:a5:5c:b6:
25:02:2a:d5:ce:a3:4c:9a:74:66:4b:c3:bc:39:e7:
18:16:8f:ef:19:b1:e0:a3:c8:f1:6e:e0:f8:fd:68:
35:80:9a:7a:e7:d8:14:10:1a:3d:b2:19:e5:47:56:
48:29:b7:08:5e:bc:cf:9b:20:e4:17:13:52:80:7d:
c3:9f:45:d4:13:08:50:46:28:0f:2e:c8:99:18:8b:
63:24:ea:87:08:f4:01:1c:f0:45:ba:8a:9e:a8:60:
ec:4a:05:0e:7e:cd:d4:23:76:51:48:b5:8c:55:13:
d6:03:9c:20:f5:07:b2:82:14:70:59:62:bc:c9:28:
56:49:e4:53:49:ce:de:fe:12:9f:8e:2f:6d:b7:06:
7b:a2:0f:c7:f7:3a:29:1c:ac:be:54:35:26:ef:ca:
62:38:38:80:d0:6f:6a:5d:7d:18:5c:3b:33:08:a4:
af:34:44:ba:23:73:d4:08:17:eb:87:0f:d1:c4:55:
ee:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:39:12:58:12:E1:53:4C:60:1E:AF:21:E0:93:DF:0E:F2:5F:8C
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ff:8e:f5:11:cd:ea:62:01:05:db:0a:34:b3:a6:41:c2:b1:
52:ff:64:23:e7:02:7e:41:0b:ed:eb:06:70:c1:73:59:57:df:
eb:9c:0c:6a:8a:89:3b:30:87:01:a4:91:6a:34:50:45:61:a4:
9f:df:36:ad:d5:e0:e7:e8:e8:58:9a:93:9d:63:bc:1c:38:1a:
5b:a6:c4:df:a4:d2:e6:44:df:fd:2c:10:3a:c5:18:3d:e5:28:
53:22:e9:9c:3b:04:a1:2e:5c:c8:1a:7b:11:06:f0:dc:85:5a:
af:ba:5e:ee:98:cb:76:1b:5d:ec:86:30:5d:85:b5:02:2f:9d:
41:da:5e:aa:5d:94:83:00:0c:ee:54:d0:7c:70:32:08:5e:56:
ce:dd:12:a2:b1:8d:46:79:12:17:e7:45:54:89:9a:76:1f:32:
3e:7b:56:77:d2:2e:f0:d6:77:96:fa:ee:44:69:c2:62:9d:2b:
3f:48:16:5a:e4:cd:4e:7c:aa:c3:8a:26:e9:55:bb:07:18:ce:
ab:66:fa:12:96:cb:e9:b1:22:a8:07:a7:1f:df:9c:5e:0d:69:
67:3a:1f:da:cf:53:2c:f0:5f:90:03:61:f8:e7:b7:4c:34:f5:
6d:e1:7c:c0:07:56:9b:64:a8:bb:e8:31:86:df:77:10:98:09:
04:56:1e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:19:45 2025 by rpki-client