Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json)
Hash identifier: gtqh0tvyorYJFLMVJzBdCPqH9TT6NPQRRSzKHiyaBW4=
Subject key identifier: CF:B1:10:CC:0A:60:34:43:CF:79:89:E3:01:E1:C5:88:65:12:20:60
Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Certificate serial: 019A71B8B25FD5C91F0B34160039D5FF7849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
Manifest number: 0304
Signing time: Tue 11 Nov 2025 07:02:00 +0000
Manifest this update: Tue 11 Nov 2025 07:02:00 +0000
Manifest next update: Wed 12 Nov 2025 07:02:00 +0000
Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=)
2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: tCtpv/vEgrWxJFszPbw5PV6HHEttxVkTTHqW188A/CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b2:5f:d5:c9:1f:0b:34:16:00:39:d5:ff:78:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Validity
Not Before: Nov 11 07:02:00 2025 GMT
Not After : Nov 12 07:02:00 2025 GMT
Subject: CN=cfb110cc0a603443cf7989e301e1c58865122060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:ea:4d:8a:44:3d:c4:97:66:ff:28:be:dd:
bc:55:58:38:f7:ef:16:8f:fe:57:13:35:4d:2a:5e:
29:0f:b8:f3:38:be:69:97:17:30:f1:c8:35:1c:46:
33:1b:2b:76:41:ed:ae:de:0e:b5:29:d0:77:34:82:
45:b3:4e:f8:97:e3:33:54:8a:d6:db:20:70:06:23:
ca:bf:83:86:c0:cd:4d:3a:02:4f:99:89:59:3e:2f:
ed:a2:e0:a3:db:91:a3:2d:d5:af:aa:74:01:8b:8c:
1a:58:42:8f:91:95:fd:98:aa:e2:6d:db:8d:fd:ee:
87:fe:32:65:de:de:72:57:bf:c3:b1:1f:25:58:c9:
7e:a9:a0:e6:88:ef:38:35:e1:48:74:bd:34:41:37:
74:0e:e1:4e:e8:02:4f:de:9d:f4:8d:cf:e5:6f:68:
5f:d6:1d:a0:4b:0d:ed:14:11:c8:2c:d5:be:3d:0b:
33:d4:69:b1:18:73:cf:17:47:fe:7b:ec:dc:a2:a6:
ee:1e:c3:9d:3d:e8:f4:65:dc:90:50:8a:27:63:6d:
e3:bf:d4:48:72:a6:a3:87:80:14:01:f4:75:f5:80:
f8:16:7e:66:0a:c3:76:8b:39:b9:64:3f:41:60:2f:
fd:ca:d1:c3:27:56:77:5e:ca:c4:b8:a6:22:29:87:
dc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B1:10:CC:0A:60:34:43:CF:79:89:E3:01:E1:C5:88:65:12:20:60
X509v3 Authority Key Identifier:
keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f0:7e:1b:12:91:90:4e:de:dc:67:d7:cd:b4:96:e9:ae:46:
39:40:e8:14:31:10:6b:ef:98:81:14:2b:2b:03:15:6f:2e:81:
10:a3:d4:ba:44:c1:26:17:9b:e4:e6:38:9b:ae:b3:49:ef:b4:
b3:58:2b:1b:5d:85:95:cc:04:f1:05:65:92:13:87:76:5b:f2:
45:d5:11:df:b2:bd:6d:28:2c:99:e8:20:bc:bd:9e:cb:a4:4e:
9b:15:e8:16:41:15:5f:7e:65:3b:62:22:99:6b:5a:16:bd:38:
92:fc:ac:a9:71:9f:9d:d8:f7:02:62:06:8f:19:4f:ad:ef:57:
75:46:3b:a2:20:52:25:d5:26:d6:b8:34:8b:61:e7:52:b2:bc:
c8:4d:e6:92:72:14:e8:03:60:14:0e:c0:4e:a2:5f:6c:45:03:
d9:79:99:75:53:3a:c9:fc:90:65:3c:62:d7:f2:6c:ce:fe:f8:
5e:56:ec:b5:12:3d:5c:27:6a:7d:18:4c:7a:39:ca:c4:a5:b4:
cf:85:44:73:26:a4:3c:ba:6f:21:be:a9:21:fb:64:b8:ec:5b:
94:3a:dd:47:1f:8e:22:cd:8c:00:c9:7e:fe:1a:af:66:1b:98:
b0:4b:df:8b:bd:d6:a1:3f:21:d4:72:13:57:43:fa:d8:f1:2d:
7b:7a:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:02 2025 by rpki-client