Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json)
Hash identifier: 4VVDV+pVt0ub4UBmsiE03imNjyLaiSetD3H9lNlqjT0=
Subject key identifier: 98:68:2B:FB:93:CF:B3:2B:F5:10:7F:D9:92:0F:D7:D7:9B:0F:18:07
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 019A7225ACB2BEFBEC59B5397078CDB5C4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 09:01:02 +0000
Manifest this update: Tue 11 Nov 2025 09:01:02 +0000
Manifest next update: Wed 12 Nov 2025 09:01:02 +0000
Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=)
2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: R0SnJsgHbPYyLP2KhDmfYVOLcootWtZUkv0d9OtB5AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ac:b2:be:fb:ec:59:b5:39:70:78:cd:b5:c4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Nov 11 09:01:02 2025 GMT
Not After : Nov 12 09:01:02 2025 GMT
Subject: CN=98682bfb93cfb32bf5107fd9920fd7d79b0f1807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:c4:0b:7a:8d:41:39:57:1e:4d:ea:fa:b0:
4f:a6:1f:1f:13:ac:0b:89:66:1c:d4:a8:b5:8c:4b:
d0:90:2c:e6:22:06:04:d7:12:54:db:54:aa:46:3c:
2d:06:b5:b9:bf:1c:f7:02:b2:68:19:81:47:0a:42:
6d:50:37:23:7b:a4:c7:ea:53:93:84:48:3e:d9:4c:
43:0f:60:ac:b9:eb:c2:b1:0d:a1:3d:76:a2:68:9c:
18:74:4b:3d:ff:85:aa:a5:ea:59:41:ab:5d:2d:23:
f0:eb:5c:67:42:30:07:a1:2f:b1:24:28:bc:5b:cc:
70:e3:8e:ba:b6:c0:fe:9a:44:98:6e:6b:99:19:14:
1b:d6:a4:82:e9:8b:47:d5:31:8a:9e:b1:c1:16:21:
73:40:56:4e:35:6f:db:ca:00:43:59:4d:a9:98:8b:
9b:82:28:59:97:9d:c2:6a:9b:9d:21:ab:65:b8:4e:
f8:e1:eb:e3:78:ef:1d:36:34:c6:8e:93:50:d1:b8:
a9:82:f1:0f:8b:44:07:68:ae:bf:b8:0b:87:3a:b6:
24:38:44:08:cb:5a:e6:87:71:1e:f4:86:6b:38:4c:
41:63:f9:37:51:4d:5f:b4:9f:db:d8:7b:e2:96:71:
b7:b7:9e:70:fa:3b:df:d5:11:9a:a2:1c:33:b6:5e:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:68:2B:FB:93:CF:B3:2B:F5:10:7F:D9:92:0F:D7:D7:9B:0F:18:07
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:45:07:ba:05:dd:c1:2c:61:34:b8:67:2e:dc:ae:3a:11:ac:
b2:3b:48:96:4b:24:f8:c5:51:1a:9e:0c:96:3a:77:f1:5a:d5:
96:cf:03:cb:ca:db:6e:c0:46:96:42:32:ab:d4:5d:d5:ba:8c:
3d:d2:f1:d6:fa:af:5c:2b:80:8d:61:a4:3e:8e:ac:35:dd:bc:
62:18:85:e8:ec:a3:32:10:aa:70:df:18:be:85:14:5e:20:c6:
4f:ca:f8:36:42:7f:a8:ea:56:14:8a:08:b7:fb:1b:54:4b:ee:
cb:4b:8e:c9:e6:e9:c6:57:aa:64:d7:d1:47:30:6d:5c:0b:2a:
4b:f4:66:ef:44:f5:ce:5c:89:12:ad:65:38:fb:db:2d:4e:6d:
93:aa:7c:ca:3a:5a:c4:26:7b:a8:20:3c:dd:11:82:f8:2b:2b:
06:7c:b2:75:d3:e8:0e:8d:c2:89:b8:30:f2:91:37:83:06:b3:
ea:e9:85:f9:0d:eb:6e:49:f0:5d:f8:84:cc:6f:e5:79:35:89:
bc:39:03:0b:de:c3:7a:31:49:e2:2a:a8:6e:a7:d4:af:6f:5b:
07:4d:c6:1a:1b:8b:cc:de:6b:29:92:18:b4:5f:4b:49:2f:d9:
69:3e:5e:54:18:d7:0f:dd:74:af:4c:7e:43:53:7d:5b:fa:51:
45:92:2f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:33 2025 by rpki-client