Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
File: x0at2Nr-mfan14fUR5VFpkb23tg.mft (raw, json)
Hash identifier: goBg1vnnDZAhjbuPiTfl30ocmRJMkirPa9dwUt75hpo=
Subject key identifier: 7A:C6:B8:3B:6C:C1:12:4B:EC:A4:1F:2B:F4:EB:8B:8B:63:53:A4:AB
Authority key identifier: C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
Certificate issuer: /CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Certificate serial: 019A70A59CC64AC0395B4C9FC339E2C9C8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:33 +0000
Manifest this update: Tue 11 Nov 2025 02:01:33 +0000
Manifest next update: Wed 12 Nov 2025 02:01:33 +0000
Files and hashes: 1: 5ew0AHvlVZKk-XGMQ-7_VQCyPko.roa (hash: r01XfwbxbtnFEz4LgMmHMoPfMeBX2hjKhEb9/b2NI+4=)
2: x0at2Nr-mfan14fUR5VFpkb23tg.crl (hash: mW1bGYEvCHf9lQm5PSGqYmR1sslDC/qOHKaxFltOXNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:9c:c6:4a:c0:39:5b:4c:9f:c3:39:e2:c9:c8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c746add8dafe99f6a7d787d4479545a646f6ded8
Validity
Not Before: Nov 11 02:01:33 2025 GMT
Not After : Nov 12 02:01:33 2025 GMT
Subject: CN=7ac6b83b6cc1124beca41f2bf4eb8b8b6353a4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:8b:c3:f1:29:8d:7d:9f:44:d4:6b:fc:d2:
66:7d:d3:b6:15:ec:69:1f:d4:36:0b:5e:1e:42:f1:
c4:44:07:db:4f:9a:83:26:4a:69:e0:8b:bc:17:b4:
a8:86:83:02:9c:a3:49:8b:98:60:49:df:0d:cd:8c:
aa:77:d3:42:da:18:fe:9d:f8:48:a4:86:b4:f9:40:
3f:64:41:ce:2d:cb:13:91:52:6a:90:ce:1e:6c:f2:
cc:83:b6:2f:8f:10:d0:dc:a2:d0:b8:f5:ac:df:b5:
dd:ef:32:9d:ba:2f:84:90:18:8f:e2:d6:71:8e:94:
71:1a:4d:6b:08:d2:83:37:25:52:ba:6a:18:93:ac:
c3:20:ae:aa:78:f1:ab:1c:8e:06:11:4e:59:71:aa:
2a:e9:93:f6:a5:a5:ab:e4:ac:89:8b:f7:68:31:dc:
74:ea:c1:2d:6c:49:21:05:a8:14:ff:e8:b8:81:3b:
68:33:a8:58:75:f6:79:d1:9d:50:f1:1c:67:f5:80:
77:a2:8c:45:13:ef:4f:7e:16:bc:45:89:71:ea:86:
5d:46:6f:11:e6:e1:4b:9f:5b:3f:44:8a:63:1f:29:
cb:e3:9c:03:37:89:e4:e5:99:95:00:fb:32:cd:ea:
c8:ee:9f:a0:c2:36:0b:d1:87:57:fd:0f:3e:86:ad:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:B8:3B:6C:C1:12:4B:EC:A4:1F:2B:F4:EB:8B:8B:63:53:A4:AB
X509v3 Authority Key Identifier:
keyid:C7:46:AD:D8:DA:FE:99:F6:A7:D7:87:D4:47:95:45:A6:46:F6:DE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0at2Nr-mfan14fUR5VFpkb23tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/372aaf-5062-4147-877b-7cbfe737a827/1/x0at2Nr-mfan14fUR5VFpkb23tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:10:80:ef:4e:15:3e:62:d1:7c:cc:2c:8b:06:cf:84:77:bd:
2a:dc:ef:26:85:d4:64:c2:bc:dc:39:1d:9d:c7:d2:a5:a7:33:
76:85:f5:22:d9:69:46:0f:0f:11:05:a8:7a:22:24:5a:f4:61:
d5:3a:13:25:44:55:b9:cb:61:99:fa:2a:2f:25:8f:08:cd:c6:
71:2a:0a:ca:d1:53:b6:ad:dd:89:6b:87:6c:8e:ae:45:3f:b7:
92:44:fe:9e:e0:78:2d:c3:5f:63:54:cb:4d:a0:6b:d0:36:49:
37:f0:e8:20:c6:f6:1a:7a:6b:9c:6a:0f:44:b1:ee:03:29:ff:
f3:8b:fd:2f:94:b2:95:43:ff:86:8d:9a:23:d1:11:6d:1b:18:
19:22:f3:69:35:c7:d4:24:8a:61:dd:8b:94:27:05:be:49:3d:
ae:26:24:28:e4:60:b9:f6:3a:cb:19:d6:ce:8c:18:a3:fa:22:
d6:52:07:51:fb:7e:9b:0d:2e:8d:d8:08:b2:bf:22:c7:29:27:
be:ad:90:e9:d8:21:4f:0b:86:66:cf:f1:c5:ea:6a:bb:7c:13:
74:2a:f1:ab:e9:5b:4c:d2:bc:ea:75:e5:bd:07:07:ab:68:b8:
21:9d:7b:69:4e:56:86:dd:96:e4:cc:b1:bd:85:23:65:01:8e:
fb:bc:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:54 2025 by rpki-client