Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: hXRuIiiSHJp9qxWCMI0Roo/S6KRVGJQJ8lFFA4swyAs=
Subject key identifier: F0:1F:6B:49:EB:6C:F8:F6:B5:17:F4:15:2B:88:C9:23:A0:2A:49:CD
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019A7149D6565D0C39E626FC1C002EED0D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0439
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: aZpRqZLG9Pnyt5VwsKLvfH0JoTUrlUsjIWULIjy2tlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d6:56:5d:0c:39:e6:26:fc:1c:00:2e:ed:0d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=f01f6b49eb6cf8f6b517f4152b88c923a02a49cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:e6:99:94:f6:73:d2:48:04:fe:cf:12:d2:
29:f9:9e:cb:05:da:0b:46:e0:6b:c2:0b:fb:4d:48:
5f:a1:98:b2:86:7f:ea:32:cc:8a:aa:ac:fd:bc:e6:
49:a8:87:58:a2:2e:4a:6f:2b:d9:28:d7:1b:37:6b:
5b:ab:40:fa:2c:1c:ff:7f:8c:96:c4:4d:2b:e1:7d:
a4:0b:f3:42:c1:9e:8e:69:a7:8f:43:ca:e3:9d:1e:
62:37:a5:37:28:11:ef:7d:ee:41:43:7f:b4:45:c9:
61:69:8b:a9:76:62:cd:4f:fb:6a:1e:03:d4:5a:67:
c0:60:06:48:76:a7:14:3f:07:a1:46:d1:bd:df:0f:
6c:f4:34:bd:d5:76:3e:99:e2:70:dc:e2:94:14:96:
ce:31:9f:11:8a:7f:84:87:49:b6:a3:3a:ce:47:da:
42:32:b3:48:fb:6d:bb:e8:46:85:c2:20:0b:e0:e9:
b8:63:10:06:70:45:86:62:56:57:a6:73:01:97:aa:
41:f0:91:20:42:eb:8a:8d:c4:ee:ab:60:32:7c:85:
ef:bd:eb:41:1f:17:89:81:6a:2f:8a:0d:e8:ce:74:
13:2d:f0:bf:d2:de:4a:8a:3c:1e:90:6b:72:50:0d:
59:cf:7a:64:8b:cf:28:40:7a:da:b7:b1:fe:34:22:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1F:6B:49:EB:6C:F8:F6:B5:17:F4:15:2B:88:C9:23:A0:2A:49:CD
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:86:a7:2c:db:2a:e4:b1:f8:06:6e:f6:d3:62:25:fc:75:53:
31:f5:f5:19:c9:bc:cf:fc:f3:27:d2:29:53:89:44:6d:b1:44:
19:1b:04:4c:0d:c8:d4:51:fe:dd:b6:d9:03:99:8a:e8:0e:7e:
1e:65:11:c2:8b:55:11:88:31:e9:47:e0:d0:af:23:a6:aa:7b:
54:6b:2a:bd:e8:f6:70:98:72:ad:26:fb:68:c6:cc:18:aa:e2:
b3:cb:bf:b0:7f:84:ad:fc:de:c0:8e:7a:c2:ce:cd:23:ab:62:
47:a5:90:72:bf:65:b0:e0:17:ab:79:d8:fd:c8:60:22:ef:1a:
17:0d:94:a4:23:30:8a:ed:1b:23:81:03:a1:5b:fb:79:04:3e:
56:aa:94:f9:aa:53:e2:51:27:58:e5:f1:e0:a1:e5:0e:7c:87:
df:86:fe:7e:ee:6d:c5:c5:55:43:1f:7a:13:f1:75:a2:1b:65:
ae:d0:b5:cb:de:3f:8d:df:45:94:09:a2:13:5f:98:d5:bd:bb:
2c:59:5a:c6:5d:0a:bb:00:58:9a:30:1e:8f:ec:f7:55:e0:3b:
92:8d:e0:5c:90:eb:14:dd:55:ef:5f:a8:00:07:eb:be:59:0c:
0f:ff:13:d0:9a:f0:92:bd:d8:ed:95:4e:f6:b3:76:f3:31:b3:
2e:17:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:41 2025 by rpki-client