Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: BKy7cXElqzxsvK6iOMc7OMMDAo5oTAElHnBZ2f2LbP8=
Subject key identifier: 41:DC:40:3D:1B:FC:9E:2F:E9:0A:4F:83:70:67:08:1A:D7:E5:9F:FE
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 019A7226777DDF50CE126A3C61B452BD0F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 0648
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: kjXXJkTYooiZJ/8XbNKwo36HAAb1Or9meEwsEFXRz4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:77:7d:df:50:ce:12:6a:3c:61:b4:52:bd:0f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=41dc403d1bfc9e2fe90a4f837067081ad7e59ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:4a:65:bc:fb:2d:46:08:73:91:d6:08:7f:
b5:37:ab:e4:b7:f7:4d:d9:fa:7f:3f:dc:52:bc:42:
08:4a:c8:d4:bb:83:e9:be:2d:0c:f3:eb:b5:82:e8:
62:61:d1:88:4d:f1:a6:10:bc:59:8e:5f:b9:ef:45:
67:2e:c1:51:09:2f:3d:e5:d6:73:35:ca:7f:16:bd:
9c:2f:3a:5e:f9:a3:d0:90:a0:01:46:c2:7d:f1:c3:
9c:22:19:73:80:31:8c:f4:b5:3d:43:ef:10:c2:5f:
cc:4b:f9:2e:32:8e:b9:64:71:11:07:69:16:4d:cf:
7b:a9:1d:ee:36:1c:67:c3:d8:1d:0c:3d:33:ee:2f:
6f:14:8e:55:a6:f0:3a:be:2a:1e:15:30:9a:08:6a:
fe:d7:b1:67:28:02:22:b7:84:42:10:7a:7e:8a:f0:
9f:b2:f7:fb:35:83:c2:44:25:53:bf:3a:e7:c9:bd:
97:cf:19:d9:5e:ea:17:ca:2c:aa:61:07:1e:2c:9a:
5e:1a:03:bd:46:fa:b4:cf:98:b4:ec:99:63:c3:f1:
de:0d:61:eb:59:9d:b1:38:c5:5a:0c:56:f1:85:36:
79:8e:f9:31:40:dd:88:7f:7f:dd:99:89:c1:66:7d:
e6:58:e9:ab:dc:29:67:10:b2:fc:7d:be:39:99:65:
9c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DC:40:3D:1B:FC:9E:2F:E9:0A:4F:83:70:67:08:1A:D7:E5:9F:FE
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ef:43:6e:d2:2b:19:3a:20:f2:bb:c5:57:d0:3e:25:6b:87:
d9:25:b3:30:db:2d:6b:b9:87:42:c8:58:d0:aa:04:bb:39:c2:
61:27:07:b7:bb:7c:6c:3b:5a:34:bc:2c:6b:7c:b3:e4:3b:4d:
a6:69:1b:35:08:fe:66:5a:65:f5:1b:19:7e:b3:80:5d:9b:c8:
c9:b4:03:5e:0e:21:08:d4:c1:ed:3d:41:fb:34:3c:65:cb:95:
ae:7f:c0:60:a5:8a:cf:e4:82:71:09:0e:bd:cf:b3:e2:25:a6:
6c:d5:de:20:d6:bf:07:cb:90:90:94:c0:8a:b9:40:81:c5:3f:
8d:5d:47:64:d0:76:23:50:7f:59:2a:8a:6c:ed:7b:bd:8a:b1:
37:42:cf:5d:fc:00:33:60:86:2a:20:d6:23:22:eb:1b:c4:d8:
ae:c8:74:62:64:88:b2:9c:06:be:0e:9c:a0:3b:c3:8d:7b:61:
94:0a:de:0a:3c:9c:a2:9e:37:26:24:31:85:48:14:70:6e:e6:
54:7d:d6:55:9c:55:46:40:cc:53:4f:9e:a2:77:d8:b1:50:71:
f5:e3:3b:a4:91:ea:ff:a1:48:ff:44:98:8c:f4:08:89:77:4b:
2d:fc:c3:ba:fa:4c:00:4d:df:db:9c:c9:08:e6:b4:48:24:41:
63:83:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:32 2025 by rpki-client