Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: EFGoT2KyQr5LNHOSZioMbHqg9yF85g9v6ONd8uSqnmo=
Subject key identifier: 44:2A:69:BA:56:19:91:76:81:63:85:7A:99:B4:65:09:BA:5D:5E:24
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019A2E8DE44728EC1A0409A80B453A1384D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 1549
Signing time: Wed 29 Oct 2025 06:00:42 +0000
Manifest this update: Wed 29 Oct 2025 06:00:42 +0000
Manifest next update: Thu 30 Oct 2025 06:00:42 +0000
Files and hashes: 1: VnsIEzhd4UJd5pyA_Dc2-bnO2FM.roa (hash: VlwFB7fAgr+iiENhL1pQbq6AXoNzH1bEvRoJP9yVGBU=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: hd7LkBRrcovgnPg3H+EOAwp3JDfK2RMw/zG+ULFPvIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:8d:e4:47:28:ec:1a:04:09:a8:0b:45:3a:13:84:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Oct 29 06:00:42 2025 GMT
Not After : Oct 30 06:00:42 2025 GMT
Subject: CN=442a69ba561991768163857a99b46509ba5d5e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:d0:b0:53:b2:76:92:c7:d8:f0:8b:6f:3c:
7e:7b:05:79:78:2c:7b:ca:47:33:74:df:06:43:d5:
fc:19:f3:27:81:5b:4f:9d:f9:ed:20:47:ab:b5:bd:
53:c0:a0:96:ec:3e:51:b9:56:2a:07:a6:c5:a9:63:
87:9b:2b:b4:6c:48:fc:fe:79:7b:6a:3e:3a:54:a4:
dc:7f:09:5e:5d:d7:9a:bb:5e:f2:b0:5f:c0:71:d5:
45:ba:51:86:b9:48:b7:27:ce:c1:a2:39:9b:7e:d6:
66:1e:2d:66:51:05:8d:19:23:3e:eb:8f:70:f2:c5:
91:03:4f:10:47:36:57:b5:73:3c:a6:9e:32:3d:68:
6b:a5:3e:d3:e4:90:a4:5b:c2:d9:17:d5:b7:a5:51:
4a:2f:e0:79:b4:25:b8:a5:28:b9:94:fc:c8:21:5e:
76:86:22:90:99:75:8d:66:f2:ef:83:e7:0b:7e:79:
9f:9d:7e:b8:18:21:7e:5c:b4:67:d6:57:c6:ae:70:
00:cd:78:8d:f7:b6:65:97:de:cb:d8:58:b4:b4:5e:
e0:26:ba:b9:33:22:62:bd:4f:eb:9f:21:b8:6c:90:
9d:2c:e2:98:74:74:0e:1b:c3:82:33:1f:6e:b0:2c:
87:bd:51:e5:c0:65:93:05:2d:4e:40:75:dc:05:5a:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2A:69:BA:56:19:91:76:81:63:85:7A:99:B4:65:09:BA:5D:5E:24
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:80:39:5a:68:d3:42:8e:10:f2:a9:23:e5:50:12:a6:64:02:
c1:9a:a7:b3:30:b8:b2:70:bc:6e:5a:d0:df:29:d0:3d:13:46:
63:82:db:d2:d9:e7:f0:a3:5a:bc:4a:2e:b2:b3:1c:c0:10:83:
92:76:fd:3f:a3:74:7d:25:47:1d:02:13:51:7d:4d:f5:95:7f:
16:54:c7:57:56:b1:f6:6a:f9:f2:47:d5:76:21:9d:22:4b:4e:
19:f7:c3:f8:f5:14:e1:4c:14:92:7a:82:53:fe:23:40:21:db:
d7:8c:ec:ba:93:d6:09:d6:a3:e0:51:3c:92:54:20:70:1e:d5:
15:6f:02:98:41:3d:74:e7:ea:5a:78:a4:f3:6f:85:0c:09:b8:
41:2a:90:7d:27:e3:66:61:df:a8:55:b1:62:63:17:77:1a:35:
e7:19:93:b8:eb:2c:9b:dd:1c:4a:09:d8:74:46:ea:a2:3a:5f:
59:8f:b6:b7:e5:cd:5d:61:60:37:f4:b5:74:41:52:73:5d:62:
64:4f:ab:b7:0c:a8:86:58:00:13:4a:8e:a7:47:ea:70:0b:8a:
63:09:9f:ab:e4:6b:aa:0f:9f:4a:57:79:6a:4c:72:69:63:e5:
23:ee:bc:2d:23:af:55:f4:31:70:88:01:0f:22:2b:3c:5b:ae:
25:8b:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:30:21 2025 by rpki-client