Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: aklxjFl10gd7AkHlXC/kEO+twYQEDd7sjZSY4Irw+rU=
Subject key identifier: 47:7A:CE:DB:88:A3:18:14:58:FD:28:31:ED:79:BE:54:CF:A7:01:B3
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019A7112C09C41B55B35D4C4A54A82016C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1427
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: NKYWlz4gwZY4JXbw2fZ-33Yiq7Q.roa (hash: 78EN8i32FjxMTLLdcIXwd9Vb1kdj7OWCE2WX2/B4rLA=)
2: VUj2jDG1P5mpu3G51mRFUhrIbU4.roa (hash: twr8z4nqYemreBGHT9Kr4AfrcVcZYqpeai7rZry08Us=)
3: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: YysPti/LKKXmS/c7qL9SrhhTwmI+Q6uERgfXWC/CeA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c0:9c:41:b5:5b:35:d4:c4:a5:4a:82:01:6c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=477acedb88a3181458fd2831ed79be54cfa701b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:ce:ef:31:6c:c3:cd:09:e6:b1:8f:88:fb:
5b:b5:12:ad:92:b6:d3:b0:af:52:12:97:6c:dc:f3:
7b:f4:7c:e1:57:49:6e:d9:4a:9a:30:a0:e7:81:aa:
bf:1c:ba:8f:62:95:91:b6:6a:b4:c7:9e:49:7d:6f:
9c:e2:1c:4f:4f:76:27:78:44:82:a5:49:14:70:81:
c5:04:c0:42:d3:5e:e2:25:ce:e0:a2:4b:48:90:82:
fd:a8:62:97:44:6d:47:2e:a2:49:c0:bb:65:29:79:
4d:84:91:ca:e5:1b:31:e5:07:96:c7:3b:95:d6:9a:
0f:c9:45:b5:8e:f9:1c:10:37:f5:b9:e6:af:b2:86:
61:56:0e:e8:44:a8:f6:58:04:12:58:c1:b6:50:f8:
ba:0e:aa:f9:a6:d8:a6:47:40:27:43:1e:6e:b7:22:
dc:47:6f:4f:4f:64:40:8c:73:d0:db:07:7e:c0:fd:
ca:ae:86:24:2a:5e:3a:66:67:41:a1:69:56:2a:26:
ae:27:5f:f0:5f:4d:ed:5f:18:94:9e:a4:f9:28:99:
8f:06:5e:10:17:99:b4:fc:b4:d5:8f:20:3e:22:f8:
04:20:37:34:ad:fa:bb:d1:d3:21:10:8a:29:4e:27:
6e:80:64:a9:82:9d:9d:e2:75:d0:58:10:3c:df:2d:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:CE:DB:88:A3:18:14:58:FD:28:31:ED:79:BE:54:CF:A7:01:B3
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bc:e5:10:0e:fa:e8:96:93:30:14:18:57:0c:a9:77:e1:19:
4c:aa:62:32:9e:53:9d:ed:5e:6a:6e:5f:61:7c:be:97:27:9c:
8c:7e:14:05:92:e5:54:ec:a2:11:cd:3f:c2:90:6b:fe:a9:b2:
8b:cc:ad:eb:85:cd:da:d2:8e:ac:39:8a:c3:c4:76:b5:98:3c:
bb:07:a3:ba:f5:87:da:6e:83:49:5d:22:e0:8b:d6:d7:fc:7f:
bf:c2:73:1a:95:0e:8a:19:ca:92:bf:07:6a:aa:dc:ae:81:4b:
b9:7c:3b:bc:60:b9:dd:d9:f9:dc:75:01:2a:9e:0a:55:52:b3:
26:9c:62:47:b0:b2:74:69:4d:0e:f4:7a:00:70:a5:74:61:e1:
bc:31:50:85:6b:85:68:ae:57:26:b9:5e:32:49:fb:27:65:48:
c7:ab:cf:c6:07:80:d8:35:c0:97:0f:b7:37:a1:1b:ad:1c:61:
ee:a3:27:96:59:65:b3:ff:60:d0:cf:82:3c:16:b3:2b:96:6d:
97:52:14:90:a1:40:72:00:e7:54:67:4e:ff:67:7d:2a:98:13:
d9:9e:27:d2:84:e6:02:36:f0:dc:64:f7:83:e4:8c:5b:ee:56:
26:0d:39:fd:d8:da:54:38:8f:39:c2:4a:70:e8:57:e2:fd:0a:
99:6d:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:23 2025 by rpki-client