Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
File: XGpfUrAC9ihsHV6yV7tehTNCooQ.mft (raw, json)
Hash identifier: 02SrIOmcjItrFURK8ltou7/ERZZAS+Z24coQ7k3KDbk=
Subject key identifier: DA:E8:83:C7:97:1F:1C:C0:14:38:15:B8:9A:CB:D4:72:05:10:3B:2C
Authority key identifier: 5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
Certificate issuer: /CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Certificate serial: 019A71B787A3F8D40247125A4359AB6CFA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
Manifest number: 13D2
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: XGpfUrAC9ihsHV6yV7tehTNCooQ.crl (hash: Y+TTHhMbsk2GA1oU9AiVyYl7r5XPyWt76qtr9ynuFGQ=)
2: tscq8RR5-J67nLuusgspLPatxCY.roa (hash: mhooYjP72FJexVsRBpMnu3/8vTwdVxQOmpcDiGXdBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:87:a3:f8:d4:02:47:12:5a:43:59:ab:6c:fa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6a5f52b002f6286c1d5eb257bb5e853342a284
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=dae883c7971f1cc0143815b89acbd47205103b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:1f:ff:91:5e:0e:17:89:0b:74:59:da:73:
f8:a8:04:a5:4d:cf:68:60:a0:e4:4c:be:28:f7:27:
64:14:6a:39:d6:a8:60:52:11:28:1e:d3:cf:8c:3e:
d3:54:3f:24:1f:62:15:1b:61:d1:ae:a3:c1:e4:0c:
64:a7:46:32:68:07:56:54:e1:f7:7c:e0:4a:83:f0:
e6:cc:58:5f:22:0a:18:9c:9d:13:4e:9e:33:31:21:
ac:5a:8a:25:93:88:89:2c:a3:d2:82:5d:e0:1c:ee:
54:4f:e9:81:a9:6e:29:a2:b3:54:d8:de:b0:07:ce:
57:8e:10:40:7a:c8:68:e5:0d:e3:dd:f5:07:4d:cc:
85:4a:61:4f:93:f2:8d:eb:c9:2c:c3:26:38:7b:fc:
cb:0a:5d:18:36:f4:76:a9:a6:0d:0b:92:49:1e:1a:
e6:2b:dd:e1:7e:3e:a1:1f:63:cf:02:ba:91:c0:27:
4d:38:15:da:bb:be:90:f7:5c:b8:32:c2:23:1f:42:
19:6a:64:70:46:d8:92:6b:fb:64:43:22:88:50:eb:
5b:54:80:4c:8b:3a:7e:f6:5c:23:3a:86:e3:c8:15:
ca:66:28:55:e5:eb:e7:b8:a5:14:68:3d:e0:62:71:
25:d6:2b:cd:b6:7a:c8:73:43:10:47:c5:32:9f:30:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:83:C7:97:1F:1C:C0:14:38:15:B8:9A:CB:D4:72:05:10:3B:2C
X509v3 Authority Key Identifier:
keyid:5C:6A:5F:52:B0:02:F6:28:6C:1D:5E:B2:57:BB:5E:85:33:42:A2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGpfUrAC9ihsHV6yV7tehTNCooQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b4ecb1-a0f5-4261-bcde-096c9c07ae18/1/XGpfUrAC9ihsHV6yV7tehTNCooQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d6:df:1a:4b:be:3d:9f:66:d2:12:1f:23:ec:6c:40:0a:a8:
ee:24:0b:92:50:a1:73:fc:43:aa:26:a2:36:63:a6:14:a2:e7:
5d:f3:5b:3d:97:3d:96:44:26:5c:68:e4:66:62:94:51:30:93:
f5:ee:02:1a:75:06:42:27:e8:86:0e:7c:02:9b:04:4d:f3:d8:
52:c2:f9:df:97:d1:41:26:97:58:a1:80:cf:57:8c:c6:28:5c:
a0:a6:69:77:37:ae:39:4d:0b:3c:58:84:e7:69:92:db:d7:d1:
b7:75:70:71:74:02:de:f4:c1:dc:8d:73:13:fb:9f:ae:b3:83:
91:6a:af:57:61:fa:70:fa:96:ed:50:f4:af:1a:b5:f8:bc:9d:
cd:39:6c:8b:50:cc:9b:bb:9f:a3:ed:32:e3:e8:c9:4f:2e:b5:
5a:fa:5b:c9:ed:f9:8e:92:6d:c4:a0:f3:66:18:b1:98:f4:1c:
64:92:ca:16:c7:47:27:86:7f:b8:9a:fb:7c:87:19:e0:1f:b7:
cd:d4:19:40:72:c6:b0:ca:53:07:d7:ff:78:80:1f:41:53:5b:
ce:d0:f0:94:78:f9:14:4a:51:4d:99:a8:cb:58:cd:24:13:57:
50:d0:20:5b:c0:c7:61:9a:ff:74:f9:cb:a9:c8:18:5e:4e:51:
3b:0e:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:26 2025 by rpki-client