Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
File: xvYePrPLRHrKbZpDVs11cXp7fGg.mft (raw, json)
Hash identifier: b53ydTEUOuRsG1Vjl1Pj+ybisI1YaToHkPuVw4reZu4=
Subject key identifier: 55:62:CE:8C:20:5D:C5:70:A5:C0:1E:92:31:1A:FC:BE:63:C7:22:47
Authority key identifier: C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
Certificate issuer: /CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Certificate serial: 019A70DC42F9B842A9F508902306570A670C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
Manifest number: CF
Signing time: Tue 11 Nov 2025 03:01:14 +0000
Manifest this update: Tue 11 Nov 2025 03:01:14 +0000
Manifest next update: Wed 12 Nov 2025 03:01:14 +0000
Files and hashes: 1: o4QGe1oVFAvlinc81nAuNrtMaoE.roa (hash: gIUvO01SqzkXQhjCsB61bL9/pNHUHKOGVQndKRDnyOA=)
2: xvYePrPLRHrKbZpDVs11cXp7fGg.crl (hash: Dwb3uGkmmSeEZ82CQt1I/lOgaDbrZudTqtCW061p6/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:42:f9:b8:42:a9:f5:08:90:23:06:57:0a:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f61e3eb3cb447aca6d9a4356cd75717a7b7c68
Validity
Not Before: Nov 11 03:01:14 2025 GMT
Not After : Nov 12 03:01:14 2025 GMT
Subject: CN=5562ce8c205dc570a5c01e92311afcbe63c72247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:96:88:fc:a9:80:e9:1f:26:31:b0:b4:d9:
18:3d:b9:96:51:ed:04:10:15:2e:3f:71:12:df:b9:
6c:a2:61:8e:81:c7:de:ff:fe:66:09:b3:e8:2f:8d:
af:16:dd:6d:1d:0e:99:ab:66:6c:b2:21:9e:f6:52:
37:bb:40:f1:f3:52:2a:08:eb:71:4f:44:29:89:5c:
e1:03:7c:5c:0e:37:1a:e5:dd:0d:f5:f7:38:ff:f1:
13:91:06:f1:1d:e3:00:52:af:25:40:2d:5b:24:84:
5e:e4:04:e7:a7:30:ea:e5:4f:5e:3c:62:5d:db:78:
d4:55:c0:b5:0f:b5:06:b2:3f:00:ef:7c:82:3b:07:
9e:f6:e7:ca:97:43:30:e7:d8:22:84:d4:a4:a4:72:
1f:6f:25:82:07:32:b2:65:54:0e:60:c2:e4:f0:15:
be:d3:6b:89:31:77:27:d3:12:92:a9:6c:d0:27:9a:
d1:9c:8a:16:92:85:28:06:fd:be:1c:e0:f1:36:44:
2a:9b:af:65:99:4c:69:9b:0c:da:0b:48:33:c0:85:
87:1c:e6:bd:78:bc:e0:e4:c4:9d:b7:81:8c:3f:b5:
df:36:f5:90:d5:ec:74:fc:70:38:17:5d:6b:99:3d:
04:44:85:38:74:b8:21:d4:65:49:f4:20:cb:05:ea:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:CE:8C:20:5D:C5:70:A5:C0:1E:92:31:1A:FC:BE:63:C7:22:47
X509v3 Authority Key Identifier:
keyid:C6:F6:1E:3E:B3:CB:44:7A:CA:6D:9A:43:56:CD:75:71:7A:7B:7C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvYePrPLRHrKbZpDVs11cXp7fGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/454f03-0877-445d-bfb1-7703250bfbab/1/xvYePrPLRHrKbZpDVs11cXp7fGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:38:32:20:21:53:18:74:9a:8e:b7:5d:3d:25:b6:59:6b:
90:90:80:d6:e0:26:78:7b:a8:96:f3:3a:53:3c:3c:bb:de:4b:
69:2d:3f:13:96:12:5a:87:ce:55:f1:89:b2:e1:c0:cb:2c:23:
ab:48:ef:78:16:fd:38:4f:90:c9:4e:4f:68:72:29:c8:eb:fa:
13:5e:a2:a3:74:ae:e7:a2:59:01:89:62:c6:2a:18:b0:57:95:
f9:2c:a7:10:7a:b3:0c:57:04:c3:a8:31:9b:7e:83:4b:c7:da:
2d:6f:2f:99:2a:df:e4:1c:12:e4:0e:b2:54:54:92:53:66:19:
eb:d2:b0:50:76:61:30:36:9a:d8:ce:45:47:99:08:f3:27:c5:
9c:35:29:6e:e9:c2:70:1a:a4:79:9d:ad:a8:3f:5c:26:ef:9c:
54:b7:2f:59:32:a4:a5:a0:f8:52:64:69:7d:b4:40:75:3f:ba:
a6:c7:3f:ea:cf:10:e5:1a:c6:33:4d:a5:13:75:54:b2:31:31:
6d:19:03:61:b5:e7:60:62:8e:0d:3d:70:54:53:3f:4f:98:00:
2a:9f:79:77:3d:56:6b:21:6e:97:53:27:5b:9b:8c:2b:e9:d3:
65:bf:09:31:2f:67:98:c1:4e:16:29:fc:76:e4:64:19:3c:1e:
76:2c:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:00 2025 by rpki-client