Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: 0r4I1jyMhD+79M3w65WFGMwEtszgzzJ1a7i0dV0hsAw=
Subject key identifier: 63:48:82:82:71:22:33:FD:78:20:32:EE:CC:8A:D1:E2:4F:19:87:1A
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019A3D254690675DC1C8F8F438642ADEB5CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1707
Signing time: Sat 01 Nov 2025 02:00:44 +0000
Manifest this update: Sat 01 Nov 2025 02:00:44 +0000
Manifest next update: Sun 02 Nov 2025 02:00:44 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: 3UoQffZyVPMKD2dkg1LhiautQGwnJ5gJB2S4IQJJ5Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:25:46:90:67:5d:c1:c8:f8:f4:38:64:2a:de:b5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Nov 1 02:00:44 2025 GMT
Not After : Nov 2 02:00:44 2025 GMT
Subject: CN=63488282712233fd782032eecc8ad1e24f19871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:eb:86:01:5b:ce:31:63:d9:52:ef:e9:ff:
77:b3:5e:58:dd:13:63:4c:22:e7:72:f9:f8:88:91:
7d:8a:8a:1d:c5:5e:82:e1:4c:d4:c8:cf:4d:94:66:
b3:20:d7:b4:3b:83:2d:10:f3:90:13:c3:26:e0:a7:
d6:0e:88:0e:15:ef:7d:9d:a4:6a:dc:1b:c7:f5:45:
ec:2b:09:26:1a:d7:fe:60:e3:6e:09:fd:67:be:49:
ea:5e:cb:a8:01:0b:07:b5:64:e8:c9:90:4b:23:47:
37:04:c9:78:c9:26:f0:e1:69:ee:d6:95:ac:0c:05:
a5:f8:63:9b:8f:aa:72:47:d5:4a:fd:66:a7:20:ba:
4d:fa:98:39:f2:8a:97:15:84:94:25:41:4d:e2:a4:
20:52:a8:0b:e5:36:16:39:ac:0b:be:2a:e8:aa:35:
87:47:28:b0:ae:ae:64:a3:13:30:42:41:a8:58:e5:
a6:22:08:14:fa:27:87:5a:db:47:70:5c:d4:5d:de:
f5:64:8a:c9:f1:fc:c4:ba:95:4e:de:d2:dd:7c:29:
8d:0c:59:8f:87:dc:05:6c:a2:30:45:41:e6:46:e5:
15:0e:aa:56:0f:4e:b7:d2:b0:6c:d3:02:5a:97:91:
5b:ae:11:9b:6f:ae:5f:b8:01:1d:22:fa:7c:9f:99:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:82:82:71:22:33:FD:78:20:32:EE:CC:8A:D1:E2:4F:19:87:1A
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:85:d0:2d:91:e9:c3:30:52:06:0c:83:79:45:f2:85:d2:8d:
bd:2f:96:ff:a3:88:63:d2:f1:ab:71:65:bf:4e:32:58:73:44:
13:a7:c7:e3:c8:22:44:61:0f:f8:59:b7:26:18:1d:16:54:93:
c3:6e:96:e8:7d:be:26:72:ad:2f:12:a0:40:3e:58:27:7a:ad:
cb:e9:2f:f1:56:d8:f3:c3:a3:dd:88:d0:9f:2d:33:80:44:8b:
17:a5:f8:94:da:d6:d4:01:61:e5:ad:9a:7c:58:43:ac:7b:17:
1d:11:d7:d4:b0:08:0a:1f:3d:25:72:b1:28:ef:39:70:ee:3c:
11:de:13:c8:47:22:52:7a:d7:3e:ce:46:fe:2b:0e:fb:59:c6:
42:b5:90:2e:c8:3c:ea:8b:85:97:e1:20:e3:52:22:53:31:e5:
9d:7a:ae:5d:47:eb:38:29:30:90:3b:9a:29:89:47:13:12:d1:
76:80:d3:b4:f1:9d:2c:e9:44:bb:81:ce:80:ce:05:14:55:f3:
76:52:4e:e2:e9:24:98:0a:e0:c1:89:8a:0d:de:fd:ac:48:e8:
48:49:60:78:41:c5:52:51:85:cb:a2:13:49:75:2b:6d:e1:a4:
2a:a9:bd:d7:78:d6:3e:f8:80:45:86:aa:3b:62:ff:80:34:f5:
61:3f:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 07:06:09 2025 by rpki-client