Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
File: x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft (raw, json)
Hash identifier: CbZBxkiMJlYn9x8sQjRq8AgAbk+EJap5/tJtLJFYzU4=
Subject key identifier: E3:64:FA:6E:60:7A:CA:62:19:77:B8:56:6B:CE:76:44:EF:B7:15:AB
Authority key identifier: C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
Certificate issuer: /CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Certificate serial: 019A725C46E36A5C2A274A593232DBFDA2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
Manifest number: 87
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: f0fN8BxAGys1wxUtC0u2VgJRTl0.roa (hash: 07e26/1ojthsdFcmpuogqBJZxqHxhDaHvUP9ikqQQeg=)
2: x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl (hash: Bz8oVz3PdK5rZnE1PCqp44tQfNrbI2JbEbeZ+GCJ2cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:46:e3:6a:5c:2a:27:4a:59:32:32:db:fd:a2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=e364fa6e607aca621977b8566bce7644efb715ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:2f:71:30:84:fa:9b:a3:3a:d4:e7:ca:0c:
2c:2d:06:de:46:6c:9d:86:1a:5d:2b:71:25:84:d8:
c3:b4:a2:3b:3b:05:25:5e:df:79:f7:b7:ab:dc:cb:
1c:44:e4:e9:1a:a9:7f:96:63:06:96:bc:e9:05:4a:
2c:3d:3d:59:2c:7a:7d:10:f0:71:90:f7:02:e4:3c:
46:8f:ff:bb:01:c4:d8:17:ea:29:a8:27:61:2e:ed:
ef:18:8d:03:76:a1:ff:47:d6:77:96:22:67:de:6a:
60:64:b9:3e:61:af:43:94:41:c6:30:f0:48:c6:31:
3d:a0:40:7b:17:70:3a:4f:2c:41:02:ff:dc:04:5d:
95:25:e1:e3:d8:93:f1:78:a2:bd:cb:87:5d:34:63:
5d:a6:95:82:6e:ec:55:ef:57:fb:9d:c9:57:5e:cf:
8d:fa:54:42:0e:29:4b:e4:af:2b:1a:da:0b:87:5f:
d0:64:88:77:c6:8d:5d:ae:2a:33:42:bb:2f:62:c1:
59:e9:7e:ff:2b:c8:a4:37:40:27:ce:d7:80:22:49:
08:64:60:6a:51:fa:73:22:9d:d4:7c:1a:10:ae:09:
68:f6:b0:25:a6:af:5c:7a:56:b1:6a:b8:ec:30:dd:
d6:94:72:f4:2f:ae:db:73:12:85:63:d8:2a:12:3b:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:64:FA:6E:60:7A:CA:62:19:77:B8:56:6B:CE:76:44:EF:B7:15:AB
X509v3 Authority Key Identifier:
keyid:C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:10:58:c6:57:a1:c9:d7:6c:13:23:4d:aa:4a:61:ea:3b:8d:
e3:4e:eb:23:9a:86:43:9c:b5:ff:46:11:a5:59:da:37:6c:29:
a1:1a:26:69:cd:50:4e:9b:58:7d:ba:14:0c:78:3e:25:d7:05:
be:b1:67:09:11:b6:36:d3:25:f7:48:15:1e:2d:c8:0c:2b:bd:
0b:c1:2f:3f:3e:67:86:fb:0e:99:2d:32:35:08:dd:80:f4:4b:
d6:0b:10:4d:c7:40:00:92:73:22:b1:6c:ac:de:2d:e7:e7:f4:
fc:79:3f:a8:85:0e:b0:0a:8a:0c:c9:07:5f:d2:da:4c:32:77:
df:01:24:76:c9:bf:9f:5a:47:5c:fd:90:9c:3c:e6:76:a9:6e:
fe:e0:c5:d2:3e:d8:35:5b:b5:22:52:ee:7f:5e:bd:b3:e2:ef:
e1:18:c2:36:0d:a5:df:bc:63:84:1c:7e:df:3d:18:62:e8:7c:
5e:5a:9a:6b:20:21:58:44:37:72:ba:cc:51:e4:44:de:a1:00:
7b:39:fc:64:7a:3f:bc:5f:69:fc:d4:b4:e9:46:38:8b:7d:f0:
de:96:c6:03:fe:9c:78:5d:8c:99:34:0d:1b:0f:bd:27:e9:40:
ce:6e:9d:51:96:87:6a:d9:55:4e:cf:1e:e4:48:98:10:dd:70:
3e:16:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:36 2025 by rpki-client