Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: 5siDk79cjDJ5hgI3G0qdVDYWQeBxjhY+HwaHzxkQp9g=
Subject key identifier: 48:49:64:36:1D:B3:BC:C7:3B:6F:6F:A5:4C:74:0B:3F:09:E1:64:A7
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019A71B92BD63A3087FBD606AF5510EEDA03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0C10
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: qXw7CaNdP9WXJUNPeZKdmoQsPsKCgfCNZLvbLG2QO+0=)
2: fcJb-6V4S8Ggt4XkeQ4z4NeOvBg.roa (hash: Ok0E8qecmwKHIVZlR2uj+ZosbjuqbuM99KMf84z3ECc=)
3: p4_ii_5CQnYwGbo3_8Nwum53Fnk.roa (hash: yPjrncDLc3pAW7ob7SlQAI0rDTeDl6C5CrdsoONunQ0=)
4: uR0GCgMzcLoo7kMNpml9uCS8CMM.roa (hash: QU71NgSIyG52g0tQUOMPeRAsoX9aQ7+oGv7C6ynHtWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2b:d6:3a:30:87:fb:d6:06:af:55:10:ee:da:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=484964361db3bcc73b6f6fa54c740b3f09e164a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:df:a1:d0:f3:66:b5:66:50:7b:04:b8:e8:
0b:9c:2c:3e:e9:9e:0c:23:7e:39:2e:38:89:0b:12:
d4:12:e5:f3:da:8d:68:f1:4c:2f:28:2f:0d:e4:14:
ba:bf:fd:32:b4:7d:55:39:7e:c8:fd:83:cc:6a:52:
df:94:4a:58:36:b6:b0:67:1e:87:6c:2d:f5:b1:58:
12:be:84:f6:3f:ef:dc:54:63:08:4b:5b:31:d8:8d:
11:62:99:51:ca:99:1f:86:d6:e7:15:9f:8f:fc:bd:
de:a0:2b:4b:dd:6e:27:10:b0:c9:60:15:07:38:f3:
c3:a3:81:15:d4:b7:3b:bc:bc:51:0c:f4:da:ad:10:
aa:ab:1e:82:46:f0:1d:33:0a:6a:0f:3c:c9:8e:46:
db:5a:3d:fc:5d:15:e2:7d:c0:aa:c3:4a:da:c1:74:
9f:ba:66:87:0d:97:b3:62:c0:53:fe:fc:29:71:d6:
03:49:ad:0c:c5:db:2f:46:d2:18:9a:b2:fd:70:37:
d0:4e:82:21:d7:fb:c3:39:2b:83:4a:1e:08:19:83:
88:21:97:fc:5d:9c:72:a5:40:ab:dc:0f:b9:fe:7c:
d7:7f:c6:d6:89:49:ea:94:f7:1d:5d:ee:a2:cd:de:
08:c4:20:ed:d3:23:a0:c0:db:5a:a9:b8:88:34:1e:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:64:36:1D:B3:BC:C7:3B:6F:6F:A5:4C:74:0B:3F:09:E1:64:A7
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:60:20:e1:c2:0d:51:4f:e6:d8:d1:2b:01:5e:a0:02:39:cb:
0e:e9:10:14:df:cc:5c:48:68:71:32:12:4c:9d:bf:42:57:ed:
b0:1a:73:a0:23:21:bc:1a:c5:24:13:18:3d:8b:72:d1:5c:30:
47:99:fc:3a:47:ad:92:ca:14:34:aa:b4:a4:cb:8c:83:f7:36:
19:fd:65:de:e6:ba:ef:a5:29:fc:c4:fe:2c:c8:c0:34:7d:37:
a4:7a:00:bc:b7:74:e0:60:85:b8:a6:00:41:1c:3a:d6:5b:30:
c0:f6:d9:0c:8b:32:0b:e7:2c:e3:fe:2d:da:a2:53:a1:c5:1f:
91:68:82:01:22:3d:a9:a1:7f:1f:2a:7d:d0:8b:47:de:fa:8f:
15:9b:a3:72:1f:27:a8:8c:25:48:f9:51:6f:8d:8d:08:a6:a4:
b3:cd:19:2a:f1:8f:02:83:02:b6:97:33:d6:97:b1:5f:d2:c3:
b7:76:c5:97:3d:75:58:ea:97:29:0f:4c:aa:dc:83:95:46:a4:
23:9b:f6:72:b6:38:a4:91:9f:ea:86:d6:42:a2:38:d9:c4:bc:
9f:96:6d:2f:e6:1c:a8:88:fa:94:65:1d:31:71:ee:e4:75:b1:
9f:4f:e9:10:0a:96:79:2e:25:4b:4b:b6:ed:d0:53:1e:9c:1d:
c6:e2:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:45 2025 by rpki-client