Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
File: x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft (raw, json)
Hash identifier: 4UodhxIfnnerWHRPsCkfAWjOaguko3D8Mw04s1DS3Vo=
Subject key identifier: 39:14:96:B4:F1:64:8C:AE:78:83:5F:61:F8:C5:A8:B4:67:06:40:CC
Authority key identifier: C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
Certificate issuer: /CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Certificate serial: 0199FA69D56C456E257A21E101100D950A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
Manifest number: 13BF
Signing time: Sun 19 Oct 2025 03:01:03 +0000
Manifest this update: Sun 19 Oct 2025 03:01:03 +0000
Manifest next update: Mon 20 Oct 2025 03:01:03 +0000
Files and hashes: 1: MnEhxi_woQM3cXv5W6rDC8mvyKY.roa (hash: kYcuDCyVLUhxBSbVQtzSrwd5iX/KUoxvsuaVTI7bR60=)
2: x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl (hash: M/ST+qT7Fb+Fe18j4eBQ5NzD3HfOtWPXVP3e73EZU64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:d5:6c:45:6e:25:7a:21:e1:01:10:0d:95:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78b52ddfd0be561d410ca8846fc797e2298b3cc
Validity
Not Before: Oct 19 03:01:03 2025 GMT
Not After : Oct 20 03:01:03 2025 GMT
Subject: CN=391496b4f1648cae78835f61f8c5a8b4670640cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:bc:86:8c:32:0e:4c:41:6b:39:26:40:2f:
4a:f2:eb:68:56:e5:e0:4a:71:a6:28:e8:39:68:10:
34:98:1d:b8:e2:49:d5:23:e4:1a:59:02:44:f1:22:
d8:6e:43:70:4b:01:a9:a3:02:c2:af:2c:23:36:c9:
3f:72:3b:64:10:a3:1f:a0:bd:f3:c7:61:bb:b4:ef:
86:69:91:6e:ca:5b:93:6c:a4:c5:5e:82:ec:21:a9:
e5:b2:1b:83:84:6e:e6:b1:22:55:f2:29:f9:50:21:
eb:0a:15:f5:1a:5e:9e:f9:51:8b:01:0e:3f:8e:17:
54:13:25:88:2f:ca:5b:59:27:be:23:90:66:4b:c6:
a6:25:67:36:ce:2a:bd:f1:2a:de:7d:da:af:67:43:
91:8d:a5:77:0b:3a:99:94:c8:24:d4:b7:0b:57:90:
09:52:0b:79:cc:0a:b2:d3:fe:d4:28:27:26:f7:84:
cf:e5:3f:55:cd:5a:c5:8e:72:8e:2a:62:a4:1c:8f:
a2:69:24:19:14:c8:7f:d7:ed:7e:15:c8:48:e4:7c:
b9:d7:ba:a3:9e:b1:30:f6:f4:a0:39:a7:6f:00:c7:
23:b7:3d:b2:ef:12:98:a6:80:40:9a:59:fe:72:97:
5c:4e:f4:0e:bd:ce:ec:aa:83:22:38:2f:ed:cd:05:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:96:B4:F1:64:8C:AE:78:83:5F:61:F8:C5:A8:B4:67:06:40:CC
X509v3 Authority Key Identifier:
keyid:C7:8B:52:DD:FD:0B:E5:61:D4:10:CA:88:46:FC:79:7E:22:98:B3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4tS3f0L5WHUEMqIRvx5fiKYs8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/525707-1a12-4138-ae46-9f7e8a6122a3/1/x4tS3f0L5WHUEMqIRvx5fiKYs8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:79:b9:79:27:68:53:14:e8:71:08:9c:38:c3:7f:fa:7d:80:
06:8b:91:c0:ae:ca:56:d2:a6:e4:f8:0c:53:36:ea:e3:c8:7f:
f4:07:9f:cd:9f:8f:c3:5e:9e:28:b2:0d:f1:e6:de:e8:de:bf:
fb:a5:7f:b4:f1:e0:5e:98:e0:9a:9c:ad:a0:f5:0a:a4:be:0d:
e5:92:99:f6:80:44:06:28:b7:0a:94:92:f0:f5:e3:fe:5e:ad:
31:14:ad:dd:91:f6:20:6e:82:67:d8:66:10:9b:3c:d7:63:3d:
ad:f9:cd:63:2a:74:8e:b6:3f:5c:39:91:67:19:67:16:2f:b6:
49:3f:04:29:e9:c8:7c:62:ad:97:48:1a:d5:92:1e:24:50:e1:
97:11:87:12:b6:86:f8:e2:44:de:52:9c:44:ac:6b:8f:1a:5e:
dc:89:d7:4f:d2:7d:1e:70:2c:ab:4c:e9:6a:df:47:85:18:d3:
61:c0:c8:e2:c3:f1:51:89:df:15:d8:fa:58:9d:91:15:92:13:
df:66:2f:da:f3:f8:58:70:cd:52:69:7d:75:fa:74:33:0b:8a:
f2:d4:d4:26:85:5c:3d:fa:71:bc:cb:e7:04:0f:f4:5b:56:b7:
8a:d4:6f:f1:b9:b0:ee:fc:11:8f:f0:9c:90:5e:ef:ab:2f:69:
a1:75:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:08 2025 by rpki-client