Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json)
Hash identifier: 5eoNHCPzAopP1IlCfLbqzCdy1N47LRzD/pE2TuJWA30=
Subject key identifier: 34:94:40:D6:8E:C5:A5:DC:1E:02:32:BB:6B:FC:78:3B:EC:46:C2:B7
Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d
Certificate serial: 019A70A52C616973D15BB2EA2058FCC1EE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 02:01:04 +0000
Manifest this update: Tue 11 Nov 2025 02:01:04 +0000
Manifest next update: Wed 12 Nov 2025 02:01:04 +0000
Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=)
2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: 6rDQMIqycBIx9UcR7mW0/pZJ77bS9pENAjT/ogqjMmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:2c:61:69:73:d1:5b:b2:ea:20:58:fc:c1:ee:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d
Validity
Not Before: Nov 11 02:01:04 2025 GMT
Not After : Nov 12 02:01:04 2025 GMT
Subject: CN=349440d68ec5a5dc1e0232bb6bfc783bec46c2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a2:88:88:f7:1d:17:fc:13:f0:ca:68:6f:49:
f3:ed:7e:b5:d4:ff:5c:5f:51:c0:b5:35:4c:7a:43:
f4:94:63:11:ff:b8:5b:d4:18:b7:6e:9a:66:36:41:
a9:7d:c9:9d:cc:4b:c3:aa:19:ce:6b:0c:98:8a:59:
0b:aa:03:1b:15:59:8a:9b:05:d6:65:e7:b6:9a:44:
e4:94:4f:14:c7:89:00:94:a1:18:92:d7:71:2f:fd:
75:3b:8d:52:7b:a5:67:d1:1a:22:bf:93:e6:cb:5c:
37:4a:ae:21:21:90:72:e7:a1:39:12:88:99:dd:39:
01:ff:f5:51:db:cc:d3:ae:6a:f9:8d:33:4b:81:c5:
6a:d2:5d:d9:7a:dc:8d:22:a8:99:06:73:d2:ed:11:
0f:1d:e3:e8:7b:1b:ab:dc:79:95:e9:6a:44:df:47:
8d:bd:42:ae:d1:17:91:a2:90:74:f9:19:26:b1:b4:
1a:53:8a:a7:19:c8:10:eb:f0:41:de:51:97:3b:11:
fa:92:08:57:f5:f9:18:e9:e4:b0:1c:d5:4a:f6:43:
ae:8e:2e:d4:ab:de:87:6d:dc:38:be:1d:cc:64:2d:
c2:e0:11:08:34:ee:e8:f6:21:8f:6f:9e:82:fd:55:
81:d4:80:4e:f2:ac:a4:86:7b:6a:91:34:23:ac:66:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:40:D6:8E:C5:A5:DC:1E:02:32:BB:6B:FC:78:3B:EC:46:C2:B7
X509v3 Authority Key Identifier:
keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:07:c8:3a:f9:ff:93:3f:3d:42:f9:cc:0e:47:92:fa:ca:
09:e1:03:d3:73:db:13:cf:28:e9:d0:c6:8a:8f:ae:b9:0a:76:
d5:8b:d5:88:d7:4d:ce:f1:ea:cd:f5:bc:54:77:a3:c0:6a:0a:
19:53:9a:0d:6a:d3:b9:78:07:ee:fc:30:00:98:94:b5:db:bc:
d8:03:96:45:1d:da:1c:c0:3b:53:65:9a:4b:8f:33:85:7d:d3:
c8:86:1b:2a:29:f0:e4:af:35:bf:2c:8d:cb:34:ae:6c:3b:34:
b4:60:a8:89:99:cb:74:38:27:85:05:14:07:3b:13:65:00:6b:
8f:12:3d:3f:ff:73:e8:64:1c:26:64:ca:ca:47:a9:6e:b3:a5:
f6:ff:e1:91:f5:18:7b:a8:06:56:e3:2e:6b:03:1f:08:7d:6e:
a4:d8:aa:de:ce:2b:a9:63:f2:b2:35:cd:6b:6e:60:fa:1e:83:
4c:b8:1a:65:eb:2b:09:d9:8d:25:2c:ec:59:42:4c:a0:9d:e9:
ba:66:bc:6e:8e:bd:62:db:00:a7:4e:3e:a6:8e:5d:ba:d0:bc:
3c:3f:86:69:88:b1:5e:b2:bb:44:a0:f8:57:ae:fe:5e:c0:52:
76:31:46:b9:8e:67:20:8f:c0:ea:0a:df:db:aa:9e:dd:56:ab:
d2:c5:b2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:39 2025 by rpki-client