Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: Kg+2iYYyLe/15KQuct4RTzCS6pINTCnH+WSm2Wq87c8=
Subject key identifier: A8:EF:27:98:F6:6B:76:68:33:8E:4E:D6:EA:14:D8:08:30:46:53:7E
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019939B8F5F94E6851087074C134478A1AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 14CA
Signing time: Thu 11 Sep 2025 17:00:46 +0000
Manifest this update: Thu 11 Sep 2025 17:00:46 +0000
Manifest next update: Fri 12 Sep 2025 17:00:46 +0000
Files and hashes: 1: cvdTCQ1rKFtOI57splHij7_4WZc.roa (hash: ooiNatd9+6iVmkcH8vk1iiTnL6jalmfjxMv2S0gJ2P4=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: S6M9U9q1krtpCeWudg0tqmNDCQWV+0RxmEc21WeFhAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:b8:f5:f9:4e:68:51:08:70:74:c1:34:47:8a:1a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Sep 11 17:00:46 2025 GMT
Not After : Sep 12 17:00:46 2025 GMT
Subject: CN=a8ef2798f66b7668338e4ed6ea14d8083046537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:2a:a3:5b:f6:4a:0a:b2:f0:9b:ba:cb:fb:
23:2a:56:9b:8d:35:2c:dc:a3:af:7b:44:9d:78:e7:
b3:18:59:b7:a9:da:3e:23:ca:8b:71:67:40:f5:5a:
e3:e6:99:0e:39:39:47:c9:d0:12:98:4d:15:9d:36:
34:67:96:a4:b4:88:88:80:7d:6a:cd:47:3b:5e:86:
24:f1:63:63:cd:c8:e0:09:4d:62:18:93:b2:6d:7d:
e8:30:6d:d9:dc:51:78:b3:46:7f:f3:5c:5d:de:6c:
49:7c:06:9c:72:99:7e:b2:a7:41:a1:f5:ca:05:0d:
4a:eb:45:ed:6a:16:33:00:96:1c:12:79:27:5d:78:
8f:90:ed:27:2e:40:a4:03:2e:a6:21:25:95:65:e1:
f6:00:e8:83:47:60:54:4d:3d:0e:75:dd:4c:cb:9a:
4b:30:e0:0f:74:44:60:3c:95:77:d2:59:54:52:f4:
04:f0:13:06:40:59:d7:83:b6:70:c0:bc:42:c3:b6:
57:a6:f4:66:b0:49:52:ae:4b:cc:73:80:72:e5:4e:
15:24:3e:c7:37:8b:b5:f8:de:18:b3:c7:11:62:3d:
73:2e:0f:f9:6f:b4:7a:46:08:7b:9f:3d:f1:bc:53:
e2:4f:bd:ef:7a:22:87:03:40:f8:47:23:7a:6f:1a:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:27:98:F6:6B:76:68:33:8E:4E:D6:EA:14:D8:08:30:46:53:7E
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d9:8d:be:65:88:6c:28:1b:1d:5f:fc:e9:89:d4:90:1a:0d:
ac:5b:e2:2c:ce:d8:cf:05:c9:95:a3:48:f4:31:52:2a:08:04:
e8:6d:a1:ca:ec:c9:66:50:47:9c:a5:b4:41:1f:02:52:65:f2:
16:65:d3:d8:0a:0d:ac:51:67:c2:ef:e4:6e:c0:f1:64:05:c7:
a4:ab:f0:bc:a8:b5:94:56:a1:2d:f9:e9:4c:a0:e4:5d:6a:f9:
ee:ed:19:2c:43:4f:e6:ba:14:89:89:6b:04:4d:cc:40:ab:d8:
1f:6f:99:0b:4f:05:2f:7d:36:51:f5:ec:24:e8:82:f0:d9:8a:
ec:38:ce:7e:d2:31:d7:53:8a:4b:b0:1d:83:61:6c:e6:11:77:
d5:9a:93:da:3f:93:8b:2d:8c:39:f1:c9:ca:3b:c6:0e:d9:12:
b8:2b:5b:cd:37:df:8b:e5:5e:76:44:e6:cc:62:a1:c6:f6:cd:
b0:d2:34:cb:26:b8:03:6f:17:89:bd:22:35:22:54:c5:21:82:
39:09:cd:8c:15:3f:7d:69:41:2e:35:8e:0a:d0:eb:70:d7:85:
17:f4:cd:70:73:46:a5:c3:e6:1f:c4:5d:a5:11:66:be:8c:d8:
ac:08:b5:88:05:3e:9e:61:7c:c3:2b:30:52:2b:a1:67:e2:cd:
56:bd:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 23:50:15 2025 by rpki-client