Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json)
Hash identifier: WFxBiXWevBlSB9jB/qZLvxDybGBlm+O8bdbd0+Fvnt8=
Subject key identifier: 11:BE:8B:FA:F1:2E:1B:7C:78:0E:43:C4:7A:6D:4B:23:AE:11:55:9D
Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Certificate serial: 019A2364F641617F633ED6A3D4C2DC33FFFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
Manifest number: 1588
Signing time: Mon 27 Oct 2025 02:00:10 +0000
Manifest this update: Mon 27 Oct 2025 02:00:10 +0000
Manifest next update: Tue 28 Oct 2025 02:00:10 +0000
Files and hashes: 1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=)
2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=)
3: QAdvSCydHA9eyuAMO4zxWjMLaKA.roa (hash: SOXceRa6NpWT+hoKHihDdCbZSJgN5vfd5bbC+z6R+m0=)
4: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=)
5: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=)
6: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=)
7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: bu/uc0QrQRh1O5HFjknlT9UHr7K+sECCsuJHXL12mtA=)
8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:64:f6:41:61:7f:63:3e:d6:a3:d4:c2:dc:33:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67
Validity
Not Before: Oct 27 02:00:10 2025 GMT
Not After : Oct 28 02:00:10 2025 GMT
Subject: CN=11be8bfaf12e1b7c780e43c47a6d4b23ae11559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:5b:a5:a2:98:54:0a:d8:ce:90:93:c2:fa:
72:a5:db:0a:2a:c2:b7:ea:fa:da:c4:2a:b8:af:3a:
28:5c:24:2e:35:07:8e:15:af:4d:5d:12:8b:54:2b:
56:ca:09:45:dd:53:2a:ec:da:33:36:41:4d:3f:ba:
9a:c3:02:90:09:b5:a5:e8:d7:46:4b:1a:ef:e7:33:
94:78:37:8f:9f:7c:b2:81:e1:9d:04:c2:6e:6d:ef:
51:ea:0b:5f:67:ac:ef:d4:7f:2e:48:e6:ed:3f:1e:
67:d7:09:6a:5b:e8:40:92:d7:92:57:28:ad:19:93:
10:bf:0a:81:be:a8:8d:2b:f1:50:5f:89:67:36:7f:
58:fb:2d:e5:73:a2:e5:bb:43:09:58:f0:16:88:c1:
52:f7:46:fa:76:fe:00:56:a9:a4:10:51:ad:d0:db:
14:ec:22:4c:d6:68:ef:f6:08:75:67:d2:f8:ae:30:
80:15:aa:a4:7b:82:49:1d:0d:36:02:57:e3:68:d1:
71:11:9f:2b:f6:33:61:fd:75:92:2c:e7:67:90:00:
da:06:6c:f5:4e:e3:17:41:4c:a4:23:60:b4:56:48:
77:b7:93:8c:a9:47:c9:9a:fb:46:2c:e8:97:c7:40:
26:bc:d7:d0:6d:f4:35:24:00:90:df:fc:84:e6:77:
8b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:8B:FA:F1:2E:1B:7C:78:0E:43:C4:7A:6D:4B:23:AE:11:55:9D
X509v3 Authority Key Identifier:
keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:19:56:3f:d7:f6:91:b9:e7:19:df:7b:b6:64:4c:6a:9d:c1:
ae:20:c9:69:7b:94:1b:0b:00:50:27:31:2f:f8:dd:f7:e8:73:
f1:20:bb:80:a2:9f:58:1e:d5:06:97:2e:08:fe:7f:d3:87:31:
a2:cc:e6:84:53:4f:b0:16:8b:97:1b:fe:16:21:3e:d6:55:1b:
a8:a0:ba:9e:64:73:f6:a6:76:e6:86:8f:fd:80:8b:f9:56:b3:
24:0f:4d:da:fb:7e:b9:fb:9f:5a:fe:2b:dc:22:f7:12:18:d2:
23:64:90:8a:c8:47:e3:5e:99:d9:e2:7a:f7:c3:b8:63:f0:89:
03:3b:d4:25:25:1a:c0:62:fd:7b:bc:a2:5e:fa:eb:11:d3:3f:
c0:55:e8:79:f5:8d:4c:85:42:3e:4b:b8:25:59:e2:25:d7:34:
7e:5c:ac:e8:c6:82:bb:d2:5f:e1:93:78:7d:14:41:6f:67:dc:
60:8e:12:d8:f3:9c:b1:b9:fb:d1:ca:52:d6:b6:0d:62:15:ba:
01:0f:67:24:32:59:c4:45:77:36:0d:ae:52:4f:b8:fb:20:8f:
fb:fe:4e:a1:f1:15:31:a4:ec:e6:6b:14:4e:cc:19:6e:93:17:
bb:aa:62:8e:39:87:23:e9:fd:b7:cd:7e:36:43:41:10:09:14:
70:57:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:39:36 2025 by rpki-client