Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: gBshO+m1lrDsSG7vUirpOy17LB1cgLbEGNQLcMxZ7xg=
Subject key identifier: B8:5D:A8:EF:0E:60:AB:09:96:28:44:6C:8F:ED:D9:9B:E5:9B:94:8F
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019A61694512012B57F96F373E547D002CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 16B3
Signing time: Sat 08 Nov 2025 03:01:19 +0000
Manifest this update: Sat 08 Nov 2025 03:01:19 +0000
Manifest next update: Sun 09 Nov 2025 03:01:19 +0000
Files and hashes: 1: CRGhbBrd8rm_fFrDE2Ioy1N5NRQ.roa (hash: VH5biAOV6Cy5Giu5m8tHzDNkXlFYhr3VGlYSiMF6VIE=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: 20kEHNxJ8K3HmgITJbC9r5P+Cs0FxfwJq2/vBSVnfC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 21:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:69:45:12:01:2b:57:f9:6f:37:3e:54:7d:00:2c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Nov 8 03:01:19 2025 GMT
Not After : Nov 9 03:01:19 2025 GMT
Subject: CN=b85da8ef0e60ab099628446c8fedd99be59b948f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:ff:10:0b:92:54:3a:00:7b:54:3f:44:a5:
ff:3c:61:e7:3d:b2:ab:0f:94:98:ce:3d:1c:79:39:
ac:02:e7:10:b4:7e:16:6b:36:c4:4f:5a:09:8e:61:
03:1c:02:86:ae:45:90:a1:a5:e5:b8:7b:65:89:74:
bc:f0:63:57:65:3b:98:41:f0:b3:54:e3:7c:1a:2e:
91:d3:6c:13:b0:98:86:19:9a:08:68:a2:db:80:49:
1b:24:6b:36:88:13:b8:8f:dc:ce:b8:ca:79:86:40:
cc:55:15:51:06:2b:7f:6e:76:0d:4f:0f:53:28:8a:
18:11:08:fa:02:b2:01:e3:cf:0d:cd:01:30:c3:87:
50:76:11:45:ee:01:be:ba:c3:b1:2d:cd:8d:15:24:
81:7d:a3:79:03:bc:41:d9:42:90:17:f8:ba:68:b1:
da:d1:e6:0a:88:88:e4:0a:1d:d2:14:9f:ee:f9:56:
75:ee:d3:d3:9a:e7:4d:6f:01:6b:34:cf:3d:a8:2f:
c7:5e:25:50:5f:68:c9:e5:76:81:52:50:a0:04:0f:
60:e8:af:3f:a3:ff:af:bc:7c:56:55:fe:39:2c:a4:
c8:8e:68:a0:50:4f:86:36:13:02:e8:3e:a3:46:a1:
4b:c6:da:db:1a:94:ff:a7:49:dd:b7:d6:b3:4a:d2:
7d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:A8:EF:0E:60:AB:09:96:28:44:6C:8F:ED:D9:9B:E5:9B:94:8F
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8c:69:b0:42:60:2d:a3:86:b0:98:24:06:bb:91:12:37:37:
9d:ab:b3:98:d6:5f:ce:10:0d:74:7f:fa:ff:70:56:46:0d:98:
b8:5d:6d:95:5c:46:14:80:74:ff:55:8a:ba:f3:24:ab:a6:57:
d8:23:0f:fc:fa:b5:b5:bb:c9:ca:c5:84:1e:08:54:0c:6a:25:
f5:91:e9:15:d8:40:f5:69:4b:23:94:30:0e:39:30:f7:c8:bc:
01:55:aa:0b:92:fd:99:ba:42:83:d6:ce:54:3c:e8:85:ef:3e:
8d:62:82:ad:87:26:27:80:5c:a4:96:50:c1:f4:83:ed:7b:d6:
03:eb:8e:0a:11:be:2b:76:57:a4:ae:48:11:df:c4:c3:37:fa:
c6:ec:eb:34:ad:1e:6c:be:1c:70:ca:2b:ae:11:0f:e8:4a:5a:
24:b1:89:1e:b2:7e:82:ab:e9:e7:aa:b4:0c:b0:f4:40:d5:33:
4a:1e:4c:e5:5a:02:de:c5:e1:22:1e:43:3a:72:96:32:c7:41:
e1:97:ac:a2:d7:e9:2e:49:51:a4:4d:7b:bc:3a:97:65:69:44:
65:3e:67:a1:bc:da:85:6f:5d:81:50:6d:ee:47:33:2d:f3:15:
8b:f8:d2:23:ec:b8:6e:53:48:53:2f:c5:4b:06:bb:3e:85:11:
90:b8:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 05:36:07 2025 by rpki-client