Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: JZBKHhq0XKyUc1Y9NJizhvb1ov3y0P9QDM73Cv16wBQ=
Subject key identifier: 07:36:43:6E:51:18:F2:55:B7:57:B9:51:8B:0A:F5:12:24:9A:5A:4A
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 019A70A4E0F558ECFBC615A233B5CECDD505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 088A
Signing time: Tue 11 Nov 2025 02:00:44 +0000
Manifest this update: Tue 11 Nov 2025 02:00:44 +0000
Manifest next update: Wed 12 Nov 2025 02:00:44 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: H2RcQ+5cN/QLXRYYwXcRrEWplp1PFpgcWPC12BnI0nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e0:f5:58:ec:fb:c6:15:a2:33:b5:ce:cd:d5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Nov 11 02:00:44 2025 GMT
Not After : Nov 12 02:00:44 2025 GMT
Subject: CN=0736436e5118f255b757b9518b0af512249a5a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:c5:f7:d3:bc:21:1a:18:88:d3:c5:13:5e:
98:77:a0:47:ad:58:a5:99:26:7c:6d:a6:51:ac:97:
4f:06:5b:d9:86:2b:ab:55:19:cd:bf:59:4f:58:eb:
23:c2:9e:f3:6e:3c:75:26:82:5f:af:b5:27:0e:5d:
4f:ba:ee:f2:12:94:00:fe:46:a7:58:42:ce:96:9a:
a3:56:c0:cc:3f:7c:10:ec:2f:1a:11:f1:83:55:58:
82:47:0d:ed:4d:ce:13:6f:59:32:1d:0d:e1:61:9f:
59:1b:eb:16:1f:96:d2:a2:a6:a7:e6:01:7f:7e:b8:
50:08:a8:6a:2b:a6:9c:33:69:91:b8:10:7a:de:8d:
d6:2b:09:76:b7:6a:b8:4a:e6:fe:eb:ff:c3:55:d0:
c3:50:98:1c:4b:46:07:5e:c7:e0:29:df:b4:79:7e:
b4:9d:ea:92:1b:15:98:cb:a9:1c:62:58:73:a4:20:
c3:d6:de:42:c0:f2:84:4f:66:37:ac:1f:4a:65:68:
e4:d3:c2:7b:76:39:12:13:f5:e1:4d:09:44:d0:09:
9c:4c:e1:ae:29:f8:68:8c:fb:dc:e2:0d:b8:32:b4:
9d:c5:be:87:84:09:44:af:10:ca:dd:34:ef:28:55:
53:7b:87:be:3b:06:1e:45:ea:ed:ef:ca:ef:c2:73:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:43:6E:51:18:F2:55:B7:57:B9:51:8B:0A:F5:12:24:9A:5A:4A
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e5:bb:92:8b:6a:dd:86:83:e2:42:4f:53:c2:df:1e:c1:58:
4e:68:f1:48:0f:2e:27:f3:1c:82:fc:5a:34:41:75:94:b9:82:
df:fe:2e:c3:a9:cc:4b:64:b3:24:b5:3b:ab:10:e2:4a:b8:52:
33:14:08:a7:b8:66:bb:3a:91:48:d4:50:e7:70:be:d5:e4:6b:
1e:62:08:7c:dd:c8:9e:55:f2:24:6c:bd:50:41:5c:71:0f:b3:
67:e3:5f:ab:ff:c2:7a:64:e2:16:53:c3:79:1b:c4:df:92:6b:
52:69:27:42:37:83:12:06:91:4d:c6:14:8a:d8:cc:52:f0:23:
20:0b:1a:4a:58:76:47:39:08:a5:25:4c:f8:09:8b:05:53:c7:
e5:fd:3f:0c:fa:02:66:3b:3e:d9:c6:8b:ad:57:80:71:ab:d7:
e3:ad:ea:2a:2e:81:98:15:23:a0:6b:90:59:4b:53:df:b3:e4:
0d:cb:6e:e2:44:47:8d:39:27:73:7e:96:f4:06:e0:00:8f:ea:
61:61:0c:15:2c:be:d2:24:1b:17:e1:30:a5:2d:08:4f:af:fd:
4a:e0:46:dd:27:1e:7d:e7:a6:01:2d:76:54:c3:39:9e:4b:d1:
82:b8:a9:31:2c:c0:3b:7b:a5:e7:0c:17:10:e1:c6:cd:fc:10:
f6:4a:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:56 2025 by rpki-client