Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
File: xm1Fok0ceFg5_sq74bRzG8JBd5A.mft (raw, json)
Hash identifier: aMpq5I/WPa2ANYAB26BGqBoGzWUymRqrjN6U3tjykpQ=
Subject key identifier: 92:B7:FD:2F:97:14:E2:1B:39:57:29:ED:CE:9A:E1:9E:38:6A:AC:FF
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 019A288B9EF34C4A95387E2FA2CE544EA9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
Manifest number: 077A
Signing time: Tue 28 Oct 2025 02:00:30 +0000
Manifest this update: Tue 28 Oct 2025 02:00:30 +0000
Manifest next update: Wed 29 Oct 2025 02:00:30 +0000
Files and hashes: 1: 1RxiuQQEE3hYvCnKLXbQqvZScn4.roa (hash: Fco0LOIT6Jp6IN6bV0QpMxndj/V7V5a5vCdUbYOcT+0=)
2: xm1Fok0ceFg5_sq74bRzG8JBd5A.crl (hash: omjgVs5fYzImhlsd9p2aW23gNlVQfchEvLPVSnvuhiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:8b:9e:f3:4c:4a:95:38:7e:2f:a2:ce:54:4e:a9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: Oct 28 02:00:30 2025 GMT
Not After : Oct 29 02:00:30 2025 GMT
Subject: CN=92b7fd2f9714e21b395729edce9ae19e386aacff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:ff:68:e8:71:6a:ea:b4:bc:e7:cc:db:24:
31:d5:8a:55:3a:63:70:d9:e7:83:bb:33:54:0c:92:
1c:3c:55:77:ab:b6:68:12:01:c6:7a:f9:7f:e2:69:
fb:22:8d:fe:68:07:e7:1d:3f:f4:3e:be:56:d5:72:
1d:56:78:10:4a:85:b7:ff:f3:1d:d4:e3:99:83:09:
8b:0b:75:cd:a2:1c:e9:62:29:15:19:34:47:aa:26:
69:2d:e7:91:8b:40:bd:81:ee:55:f0:3f:20:74:40:
6a:40:03:eb:cf:e2:8d:b8:78:3b:3f:25:b5:92:46:
db:3d:26:bf:de:52:fe:c0:06:3c:e1:c0:22:2d:ed:
64:5e:4e:43:a8:2c:3c:7d:c3:d7:ae:67:94:75:2a:
3c:0c:25:2b:23:cc:57:2a:26:e8:0d:c9:9a:16:6a:
dc:7f:b3:68:c2:9f:a2:fe:5f:2c:56:dc:d0:c9:97:
0e:5f:b4:7b:f4:06:2f:bc:40:1a:5a:70:ca:af:8a:
96:34:f6:bf:00:8d:08:e8:d8:ce:52:23:a3:a1:78:
25:68:6d:bc:73:91:c1:dc:8e:ef:05:f6:f1:59:21:
f1:47:dd:7a:4f:e1:80:e8:fe:49:72:a6:1d:a5:8d:
ff:48:04:a4:ed:01:2b:8d:38:ed:4d:aa:8b:aa:c0:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B7:FD:2F:97:14:E2:1B:39:57:29:ED:CE:9A:E1:9E:38:6A:AC:FF
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:71:cb:1e:64:f1:27:9a:96:b3:66:aa:d6:e2:c6:d1:a8:0b:
87:06:d3:63:9d:c5:40:c5:2d:a5:cd:35:35:95:8b:71:26:4e:
bc:07:88:1f:7f:e0:2d:e0:06:ba:b5:c7:58:74:34:72:83:57:
93:ea:9e:3c:d3:37:c1:45:39:0c:2b:38:3d:f1:b1:9c:33:17:
ca:97:c6:a7:fa:21:da:83:b4:42:59:ee:56:f4:a1:90:00:6a:
21:eb:87:80:23:0c:8d:5f:6c:33:0d:7f:11:c6:e3:01:9d:35:
4e:de:38:fb:74:4d:e5:ec:a2:21:fa:87:53:2d:fc:f1:69:02:
5b:8d:ec:75:1b:ba:27:7e:3e:7b:d2:08:6e:fc:01:6e:df:73:
8c:d3:3d:92:7c:57:4e:60:e0:78:9c:64:1a:5b:44:86:29:c4:
48:7b:01:e3:7b:84:85:0f:f9:d9:fd:74:27:dc:18:1c:8b:3f:
cd:ea:f6:77:e4:18:c7:a0:7c:ae:5c:a1:0d:63:f6:8a:56:8c:
51:fe:ad:7c:26:41:d5:25:2b:63:f7:4c:6e:7e:de:ed:70:cc:
51:eb:b8:ca:33:48:0c:8b:0e:49:f8:61:ed:bf:b0:53:f5:8f:
fd:90:22:55:f1:85:8d:40:f1:4d:e2:3e:a2:1c:07:9f:01:8f:
96:b3:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:07:18 2025 by rpki-client