Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
File: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft (raw, json)
Hash identifier: 4HBmlAXJZnMZx2vOKVwR4Jl4xhRYouQAVVYfhdaoS1Q=
Subject key identifier: 1F:71:06:F8:DC:39:F3:7B:00:33:E1:29:29:C4:9D:E9:0B:A1:0C:1E
Authority key identifier: C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
Certificate issuer: /CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Certificate serial: 019A71EECA5CC3854847ACDA96767747F4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
Manifest number: 0656
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: IiIPmmM-nxlvi6X_BDwclVK8nN4.roa (hash: 70bCr4c8aponltkSleoGsfNe8bySTBqaNCakdvrbnEM=)
2: xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl (hash: gAYEIfrCTSlVyr9OOmqGSWVxLGQ4TbP8HTaLoU7fB+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ca:5c:c3:85:48:47:ac:da:96:76:77:47:f4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b36fea22c366d08a4b546ac83f4485b2b1e159
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=1f7106f8dc39f37b0033e12929c49de90ba10c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:f0:3c:cb:b0:a4:03:05:41:16:c4:0c:ed:
a8:9c:b9:f3:cd:ab:54:c8:35:51:e1:33:63:8d:59:
c7:95:7d:08:6b:fa:69:39:29:b8:1f:ce:01:65:c1:
ad:35:97:f6:df:c8:3a:57:5a:1b:fa:ae:2a:8c:5a:
98:6d:58:8f:92:94:8e:2f:d1:e6:24:35:fb:46:14:
4a:31:8d:96:3c:4f:6a:6a:4e:3e:29:23:c6:25:20:
37:7a:4b:8b:93:f1:55:72:ac:97:f2:fd:37:52:7f:
88:61:2b:df:a7:6f:45:16:72:b3:d1:4c:42:ae:6f:
dd:2d:3f:f8:ac:d4:ad:23:21:4d:77:31:d8:ea:d5:
59:58:eb:69:a6:a4:0b:ce:fd:98:ae:c1:27:e1:d3:
72:be:41:c9:0c:66:9d:50:ee:a9:f2:82:a0:b0:73:
56:b5:f8:25:ae:db:8b:dd:0a:9c:a5:16:de:07:6c:
77:f0:d5:83:78:85:da:0a:e3:8d:a6:d1:a5:d6:09:
5a:67:2c:d0:3d:4a:7f:3f:5c:19:9f:b9:59:c5:c8:
90:60:c5:f7:66:b2:80:95:de:14:84:9b:0d:fd:34:
ff:4b:f7:4a:ec:f8:95:22:50:8a:66:c0:ac:10:cf:
3b:e5:69:1e:db:bf:26:fd:ef:4e:7d:b5:27:1a:af:
4f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:06:F8:DC:39:F3:7B:00:33:E1:29:29:C4:9D:E9:0B:A1:0C:1E
X509v3 Authority Key Identifier:
keyid:C6:B3:6F:EA:22:C3:66:D0:8A:4B:54:6A:C8:3F:44:85:B2:B1:E1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cc083c-fe76-443f-a214-54d20d88915d/1/xrNv6iLDZtCKS1RqyD9EhbKx4Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:1a:d7:92:df:be:d8:e7:fb:af:d0:57:34:1f:72:6d:b2:
51:e7:22:9c:cc:a3:12:a6:6e:9f:41:c4:07:f6:b4:d1:95:c9:
05:db:d4:66:97:a3:17:b6:fd:26:91:c3:c7:82:ce:eb:22:d8:
b1:c6:ff:a9:1b:71:84:08:31:e2:29:ff:08:c9:c2:87:13:13:
68:5d:5e:82:b2:c7:d0:1c:08:ce:d0:57:e8:31:a3:e9:c4:e3:
8d:d1:0e:91:11:3e:26:e0:8f:8c:0d:25:b0:b8:5b:6a:19:0c:
0e:2d:19:35:8f:6d:c0:95:4f:c0:ae:65:a0:78:4e:cf:12:a4:
ed:7e:86:bb:38:25:4d:41:f5:47:4c:2f:7e:91:35:16:86:5c:
ad:52:60:85:91:26:c1:0a:7c:32:00:ed:86:c7:72:0f:43:ed:
44:ec:18:81:18:db:3e:5b:f1:a9:7b:b6:77:4b:a4:0f:55:4c:
92:16:95:99:eb:0a:7e:24:a1:2c:a0:92:b4:37:f8:a7:1f:74:
3e:1a:4e:05:3d:36:7d:12:0c:07:62:c5:d8:fd:46:4b:e5:68:
33:f5:27:f1:0b:18:74:ad:89:94:60:17:df:cb:56:ab:37:c5:
03:2b:6b:70:e4:9f:79:a4:f2:95:50:22:72:b1:ff:f3:f7:0a:
47:f2:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:29 2025 by rpki-client