Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
File: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft (raw, json)
Hash identifier: O3QNuNyEwqSbJZkbS/cZF0XSmTujeZLmd/2ejqZgjy4=
Subject key identifier: 73:B0:25:23:09:2F:48:51:AA:A6:BC:9A:46:AD:19:E5:C1:F7:37:03
Authority key identifier: 5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
Certificate issuer: /CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Certificate serial: 0199FD345E9B548E1537CDF4A8CCC6CE279E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
Manifest number: 11A0
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: QtZsqFLqtrL8olVDp6VSmjVajiQ.roa (hash: YhuUvItgnCDVt791lrn/5FAJLBN1QJhZrza7GAVkh44=)
2: Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl (hash: sYUiXIZpW3q37LdNbgyG5M/2qJAYEO/J4XbOSpl+W5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5e:9b:54:8e:15:37:cd:f4:a8:cc:c6:ce:27:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9b9bed8f8d3d579bb0552e4fc4b81986861e64
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=73b02523092f4851aaa6bc9a46ad19e5c1f73703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:87:c0:a2:eb:cb:61:38:6a:f7:99:7d:11:
c9:5d:14:d2:16:7e:ed:47:a8:03:5a:63:37:f5:31:
e8:9b:ee:31:75:c9:85:43:3d:7b:04:ef:a9:66:ef:
18:11:31:74:6d:cb:cd:bc:bf:67:61:a8:61:a5:0d:
b2:18:5a:9b:90:89:08:12:5a:0d:6f:95:4a:db:ef:
0d:9a:a3:de:88:40:14:ec:19:22:94:a3:83:37:2c:
c5:3b:79:c9:12:a9:09:f6:fb:66:fe:46:32:16:69:
37:59:00:46:97:4d:28:ff:b3:ae:02:91:05:80:21:
80:1e:e2:9d:9d:c2:71:94:fd:97:38:c3:4e:10:7b:
2c:1a:11:d2:59:e4:c2:88:3c:ca:ab:70:97:17:95:
26:7f:80:92:87:40:f2:43:a6:e2:61:c7:14:47:fe:
65:b3:a2:05:8e:77:b0:24:36:4f:44:5a:28:95:1e:
88:84:de:aa:24:37:45:19:bb:12:f2:c9:50:95:27:
40:c1:36:bd:67:62:05:b6:1a:7b:ae:11:43:6e:43:
0f:b1:80:bf:2a:2b:fa:42:72:ab:f9:59:f8:63:8d:
48:06:7c:9f:91:3b:3c:8e:90:49:48:b9:39:5b:9c:
5c:2a:95:68:6c:82:6e:3e:26:7e:f6:7d:a4:3f:00:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:25:23:09:2F:48:51:AA:A6:BC:9A:46:AD:19:E5:C1:F7:37:03
X509v3 Authority Key Identifier:
keyid:5E:9B:9B:ED:8F:8D:3D:57:9B:B0:55:2E:4F:C4:B8:19:86:86:1E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/448c85-a966-4df2-98e4-a5a5ad06eb43/1/Xpub7Y-NPVebsFUuT8S4GYaGHmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:75:0d:9c:a1:9d:0c:89:4f:6e:7e:2a:0b:47:52:a3:99:1f:
27:b1:c5:37:c5:b4:aa:66:37:0c:d6:35:bc:8d:ac:6d:2b:79:
d1:ca:93:77:45:93:10:a1:f5:c3:99:06:db:c3:5a:b8:4f:15:
f3:ca:1b:70:f3:c7:93:76:71:2b:66:d7:c8:40:f1:c4:94:bd:
2a:3e:74:b1:51:8f:b1:c5:d0:f9:02:b1:b2:2a:e8:86:de:42:
3f:07:a6:5f:a1:4b:b2:40:93:65:69:f8:19:a1:30:8a:cd:a0:
bc:dd:13:86:60:5e:11:2e:b3:4e:20:71:54:bc:01:94:ac:88:
c4:71:1c:71:23:7c:d8:99:1e:fc:e2:63:90:8e:bd:58:80:d5:
29:b4:bf:51:f6:d0:1f:98:ac:3d:ed:2b:c6:62:46:6e:91:b9:
71:6b:c8:ff:6e:ae:dd:b2:3d:eb:cd:b3:ea:8c:67:69:4f:a7:
29:63:2e:15:10:49:59:30:50:07:22:cc:af:fb:fc:9f:2a:1a:
b9:9e:be:93:35:51:3c:eb:7d:62:39:eb:13:40:64:1d:e7:5f:
ce:2d:3d:52:06:dd:e5:b3:00:ae:f5:e9:00:f8:7a:92:58:67:
24:df:c7:2e:58:34:c4:13:c8:62:1d:00:50:7c:b2:99:10:b0:
97:ec:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:31 2025 by rpki-client