Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json)
Hash identifier: R6d2zgRabP3geSuxD+SBLiHbyg/iSDMq94mScLpaxQI=
Subject key identifier: F7:E6:65:25:DC:96:6D:30:55:68:C7:95:E2:4D:E6:07:3D:82:9E:5D
Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Certificate serial: 019A714A074A742CC1E47BFBCE09A7FA85E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
Manifest number: 07AE
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: jqnltVVTTrQSmwdbYfgQiD2LLtoyUYxgRF5tI4WQEYI=)
2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:07:4a:74:2c:c1:e4:7b:fb:ce:09:a7:fa:85:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=f7e66525dc966d305568c795e24de6073d829e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:b1:54:43:e1:dd:dd:b3:91:a1:f6:7a:d7:
82:27:7b:92:51:97:4a:2f:d6:25:8c:49:79:64:cd:
80:52:fa:cf:50:7a:f0:62:30:6e:83:a0:2a:f6:56:
bb:af:99:bb:b4:24:f8:d8:c8:0e:33:ff:a1:55:ed:
4f:b7:d0:ec:2b:97:7c:5e:a7:33:b9:0e:a3:50:56:
fa:03:02:78:9e:d3:b5:bb:13:2b:a0:54:c8:15:60:
2a:ea:76:3c:db:07:33:6e:7b:ae:4d:c5:6e:5f:ff:
1b:bf:3e:c9:03:cc:13:9e:ae:50:d0:0e:27:11:4c:
a5:71:49:7f:6f:54:f4:df:87:c1:49:f0:ad:91:bd:
46:ab:9c:cb:04:82:99:65:20:e4:ea:76:3c:3f:3c:
65:f9:9d:1e:bd:65:ee:c0:bd:da:ac:70:c5:f3:2f:
8b:a9:f8:b6:d9:e6:59:5e:e1:1a:57:b2:5c:e7:78:
51:d0:a7:7a:18:25:f9:1d:de:41:b9:e2:60:84:6e:
48:64:b7:c5:58:4c:47:98:87:b6:bb:7d:44:fb:95:
b8:26:90:67:b2:d5:49:d8:7e:09:66:d3:76:c4:89:
33:55:5d:eb:82:8c:87:db:e8:b4:f4:3a:5b:2b:09:
ad:96:59:d4:8d:3e:7c:57:23:68:78:71:96:d2:41:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:65:25:DC:96:6D:30:55:68:C7:95:E2:4D:E6:07:3D:82:9E:5D
X509v3 Authority Key Identifier:
keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:5e:d1:5c:77:04:45:a3:25:4e:6d:33:38:1f:7b:91:a2:
44:93:15:70:71:82:a9:58:7a:ab:56:74:23:ca:f1:4c:23:4b:
e0:01:f7:89:81:e4:6f:ee:40:4a:35:5d:23:d3:70:8a:d2:90:
14:b5:85:8a:a8:0a:c8:0d:54:39:c7:83:34:5a:ce:b2:1b:44:
11:7d:95:e7:5d:d2:c6:a2:2c:62:51:a8:6b:21:b6:e0:50:a6:
b0:06:ee:2f:9b:5b:9a:1b:d3:4a:4e:e5:c9:cd:cf:7d:5a:8f:
e5:52:c6:60:71:5b:86:ab:cf:4e:24:56:08:86:10:e2:da:9f:
51:0f:07:d8:81:11:f3:a1:56:67:a9:2d:b1:17:8b:fc:a7:b3:
ef:b3:b7:f8:e0:1c:45:69:17:ca:6f:7c:5f:f2:47:18:98:51:
41:c5:33:25:4f:a8:5e:9f:0f:40:b9:f7:13:80:8f:b7:09:9e:
d7:27:70:e2:03:64:43:c3:92:64:b0:38:d1:f2:c4:a4:d5:79:
54:bf:37:d7:bb:2e:7e:cd:26:40:cb:ff:e5:6a:0e:4e:e5:9e:
8b:c0:8e:e1:51:ae:27:45:1e:ff:1d:ee:4c:9a:5e:90:46:05:
1e:a0:0a:6b:fa:e2:f0:de:f3:06:cc:2a:7a:75:86:01:86:d8:
7f:a4:0d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:46 2025 by rpki-client