Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier: k5rgKEQYxXaUQE34LLIO3Bqh3WD7xhSzmckmsm/NM70=
Subject key identifier: 60:0E:DF:AD:60:B1:7D:35:54:9D:7A:29:F3:B3:53:BE:5C:45:20:DB
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial: 019A72263AEA00F2E4EA8E059FEF84C89CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number: 1055
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=)
2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: dpwTtlj4t3t6r6QDmdu86LW85wcqcWPuONlnOZBdZEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3a:ea:00:f2:e4:ea:8e:05:9f:ef:84:c8:9c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=600edfad60b17d35549d7a29f3b353be5c4520db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:78:c8:67:e4:74:8d:e6:dd:3f:59:66:77:
5d:a7:ed:c5:c0:c1:10:f9:bd:9a:79:1c:af:66:f0:
80:78:2b:87:4e:c3:6e:36:6b:1a:1b:46:86:5c:40:
f3:03:27:54:1f:61:88:b0:72:05:2f:35:5d:32:d5:
bc:82:8a:00:51:a5:2a:25:d6:ed:ef:ae:f1:34:fa:
69:e0:6e:d5:9d:f1:fd:92:44:83:6d:82:ed:42:25:
e4:5c:4a:7b:4b:67:1d:b0:bc:21:e9:45:2f:35:eb:
55:ca:e8:6a:b2:a4:64:d4:4d:a7:73:ff:e2:65:f3:
70:12:31:50:bb:00:1c:9d:2c:9f:33:76:62:32:46:
a0:36:6a:cb:1b:78:9f:d5:32:38:aa:80:cd:4f:df:
ec:0e:e9:c7:2a:8d:07:3a:68:f6:b6:1c:3e:78:15:
ac:15:c8:85:e9:a5:de:47:bf:a7:02:a2:a6:09:05:
03:0f:9a:80:1c:e3:15:82:9f:75:32:d7:ba:e3:37:
15:ad:b6:35:b6:ad:a6:46:7d:de:75:54:32:30:ef:
48:77:37:ba:e4:e9:0b:d2:43:3d:51:1a:4d:f6:32:
f5:21:6b:bb:df:e1:12:d2:6f:e3:2e:dd:68:6e:07:
2c:0b:5b:bd:9f:d0:d5:e7:1b:44:b8:50:b8:0f:06:
0a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0E:DF:AD:60:B1:7D:35:54:9D:7A:29:F3:B3:53:BE:5C:45:20:DB
X509v3 Authority Key Identifier:
keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:26:6e:d6:27:6e:5b:b8:62:d7:7a:de:42:f2:0e:d2:94:df:
64:78:ec:f9:e3:cf:e4:6e:6b:f9:ce:f4:54:2b:2d:bc:30:dc:
2c:be:7c:51:f6:0c:2d:37:ed:a2:87:d2:d4:86:c5:8b:84:7c:
54:f0:0c:cb:4c:1f:29:21:eb:62:d3:71:44:32:85:0f:f5:04:
4d:ce:42:5c:d4:a9:d0:93:37:f5:db:b4:54:11:f5:73:d4:5b:
b0:b1:77:94:a4:6f:0a:23:e0:68:0a:49:5d:12:67:b9:23:88:
f5:0b:01:93:92:c9:65:b9:82:79:b6:91:87:f0:4a:d7:d0:bc:
f7:ed:04:f9:35:e0:42:e4:ac:95:f9:44:3b:b6:19:4f:f8:76:
ea:bd:e9:53:c4:c6:25:a6:22:ed:2b:43:49:42:b0:96:c5:b6:
ae:11:13:31:4d:65:08:e2:7c:78:60:37:cd:31:ce:52:a5:17:
f0:d9:fa:ae:cf:a4:80:16:3e:c2:00:f9:19:20:da:12:e9:d6:
93:f5:6b:ef:2a:4f:6a:c3:30:51:56:5b:7a:72:21:10:ee:4c:
6c:db:c8:73:58:f1:55:33:1e:8e:07:ae:1a:0a:b2:13:17:0f:
48:3c:22:1e:f4:3b:c0:96:8d:b8:0e:e6:29:8e:8a:53:ab:f4:
57:58:7a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:34 2025 by rpki-client