Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: +D8x+zTRWuyZeP85Zsd5P4GvHh5G8s9Fj3nvs3HjVGw=
Subject key identifier: 84:88:10:AA:16:1D:3B:7A:D1:1F:73:BD:BA:08:65:0F:89:F7:8C:22
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 019A7112E63C49872CF3B6514A97B4DE3AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0FF9
Signing time: Tue 11 Nov 2025 04:00:55 +0000
Manifest this update: Tue 11 Nov 2025 04:00:55 +0000
Manifest next update: Wed 12 Nov 2025 04:00:55 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: NXRAzv/7mcNVKUPzbqRko39Wd6mZil9jkyJd/yTO8gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e6:3c:49:87:2c:f3:b6:51:4a:97:b4:de:3a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Nov 11 04:00:55 2025 GMT
Not After : Nov 12 04:00:55 2025 GMT
Subject: CN=848810aa161d3b7ad11f73bdba08650f89f78c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:60:da:81:45:0a:3f:3c:a2:e9:ae:bf:1b:
7e:82:7b:1d:08:6a:5c:22:90:b5:e9:f5:4c:28:85:
36:27:80:97:98:d3:00:86:1b:9c:90:90:c8:9a:65:
bb:96:e8:ba:6e:c7:ae:29:a2:f1:28:52:f8:db:bd:
9f:e6:b6:47:c8:fc:67:33:50:3b:b0:31:5e:ee:2a:
4f:63:1d:48:c3:0a:d2:b9:b6:67:ec:bf:3e:f0:8d:
b7:04:e2:af:47:db:f0:fb:89:a7:3f:66:56:79:72:
79:4c:8d:91:f7:2b:1a:32:a6:2e:6b:ff:4a:78:88:
49:50:c9:86:22:e4:bf:2b:14:77:af:ad:56:68:c8:
3b:fd:03:4b:ad:32:9a:44:82:9f:e5:16:7a:94:dd:
7f:21:e9:b7:ee:d9:ea:fc:d7:dc:be:4b:cc:cf:74:
f9:dd:79:41:c7:d8:3c:3c:21:29:28:70:f1:52:66:
cc:83:42:5c:32:27:40:f8:51:b2:e8:96:3c:52:ad:
1b:a6:bc:8a:69:1b:9d:4a:c9:0f:46:84:3d:96:ec:
f0:d2:15:da:07:90:cb:cc:cb:b8:7f:d1:6b:98:17:
be:b4:ea:8b:a4:7b:6e:6c:34:7a:b2:04:51:23:05:
fa:82:cd:72:e2:ab:62:1b:55:93:e7:05:80:96:f8:
d1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:10:AA:16:1D:3B:7A:D1:1F:73:BD:BA:08:65:0F:89:F7:8C:22
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:aa:24:bf:01:f4:5c:c0:92:80:ae:01:ce:c7:6b:21:84:4f:
c1:25:c6:e1:f9:20:fd:d3:e8:59:07:7d:90:de:49:bb:b5:04:
1b:a2:cb:0e:97:de:c9:b7:de:67:56:58:f1:c1:25:0c:3c:93:
29:19:cb:9a:b3:37:f0:fe:ee:c3:62:ee:dc:4d:98:b6:4c:dc:
b7:9b:4d:1d:4c:f2:b9:2a:1a:0c:58:ab:03:96:12:f5:c0:76:
68:66:81:30:c4:38:36:72:a3:94:0a:a7:a4:b7:0b:c1:95:40:
25:9c:40:28:4e:44:a2:a5:dd:df:96:d9:33:a1:a5:a4:0c:8f:
ac:0c:7b:2b:37:bb:76:7d:d1:68:55:52:12:4f:8a:7b:f3:ce:
99:e3:b7:b7:6e:20:49:42:f8:4b:05:6f:41:5e:f9:83:46:9e:
0a:2c:c3:c0:8a:48:1d:c7:f0:60:8b:ce:42:3c:71:4e:4e:45:
0c:f0:94:9c:b3:92:09:32:1e:df:b0:2f:a3:a2:aa:54:f6:22:
9b:c0:86:99:6f:72:93:47:07:b9:5e:fb:6b:14:ea:bb:7c:04:
cb:81:d0:1e:56:2d:73:d5:a4:e4:8d:3b:ab:75:5f:6e:66:c1:
be:38:0c:49:6e:aa:5e:59:2f:f9:52:f8:3e:fd:0a:ed:74:7b:
5d:12:fe:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:23 2025 by rpki-client