Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: sE1bAU64sYBccwMYGU3YcK/PTUGeUG+jkNw68mnN5yI=
Subject key identifier: 22:4A:57:C5:31:5E:D4:42:78:21:B0:1F:63:69:FB:EF:14:34:93:F1
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019A7112C974390942E9F8040B05C3B74351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 1520
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: ueBb6XAUF6o0wgWHrBMyAvCjDcw.roa (hash: FG2GqOv/aixTR0aGnuCtGnWbZFyWEpFgUNZYVCVmlOI=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: f1k/ouf/M1Tk4+rJgDPx/xZpL8S2az95RSdiW31Mlig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c9:74:39:09:42:e9:f8:04:0b:05:c3:b7:43:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=224a57c5315ed4427821b01f6369fbef143493f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:6e:2e:f9:e3:33:f0:ed:54:7b:85:fe:12:
fe:4e:4a:1a:c7:ce:81:10:51:dd:d9:dd:99:bb:e8:
0d:71:b9:32:06:1b:a1:42:b7:d1:20:2a:b9:95:c6:
99:8d:87:e4:eb:79:f6:5c:ed:8f:46:a9:66:f6:e5:
f9:05:1d:0c:19:9d:32:bc:dd:3e:03:05:d3:9e:b6:
b6:4a:8f:72:49:04:a8:ee:93:4f:11:00:96:1c:a0:
2e:81:d5:7d:b4:5b:dc:41:c8:98:dd:96:14:73:6f:
c8:1c:01:12:6b:33:c1:a5:42:70:6c:71:2f:9b:5c:
6c:32:9e:9a:f7:b7:f2:8a:92:5c:0a:25:14:fd:fa:
c6:89:d8:75:8b:b4:3a:87:e1:85:8c:56:ec:b6:be:
3c:04:ab:5b:52:7c:b7:95:4b:23:e4:a7:0c:1c:db:
ea:4a:1c:4d:ee:29:e4:0a:ab:cc:bb:b4:3e:53:fc:
84:42:a3:fa:c1:a7:c2:f3:2c:ea:22:b0:41:2c:92:
4d:e6:9e:a5:29:b5:ea:26:e6:90:ab:18:06:7a:14:
7e:e9:85:9a:26:b8:1f:17:4a:cf:94:34:35:9d:20:
b0:99:eb:22:41:7c:24:ce:88:75:c4:8b:05:18:c9:
58:7d:d2:e9:8d:31:e8:35:ab:37:ba:ee:a7:6a:29:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:57:C5:31:5E:D4:42:78:21:B0:1F:63:69:FB:EF:14:34:93:F1
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ce:f2:f9:04:10:67:15:4b:f5:cc:86:4e:85:7b:fd:4e:5d:
67:ff:f3:ec:e1:27:ff:51:75:25:66:32:82:f0:8c:e8:49:f2:
12:e2:7f:11:57:f8:1b:e5:29:bf:37:09:d9:ef:c6:8c:f9:64:
2f:2e:8a:ad:12:c6:fa:25:98:4b:1d:29:85:3f:aa:bc:15:e9:
02:0f:ce:a6:cc:b0:30:bb:5e:58:f0:d3:28:b8:03:ba:e5:24:
f9:3c:0b:21:3b:76:80:25:6e:e4:1d:7e:9d:94:c0:43:34:79:
3a:b3:e2:0e:c9:bf:d0:dc:21:02:c3:38:c8:dd:f7:24:22:20:
dd:88:ae:5c:7b:22:31:ad:aa:a5:03:36:a2:bb:14:88:0b:b7:
02:a7:22:44:b1:c0:2a:11:82:6a:24:db:e2:08:6b:ca:f5:a5:
5d:a3:33:b1:94:75:c9:6f:24:0f:84:5a:7f:53:cd:49:60:c8:
b0:8f:71:7a:34:4a:84:71:68:5a:b1:3a:b6:9e:fa:50:3c:7e:
df:0b:97:c1:1e:1b:c5:e4:5d:46:3d:3f:f6:99:d3:8a:a5:ce:
29:f6:9e:06:4e:62:ea:54:ce:a3:91:7c:5d:94:52:80:f7:85:
da:76:6b:f9:20:29:fa:ac:8e:e7:9e:23:c4:60:36:3d:49:ca:
1e:01:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:43 2025 by rpki-client