Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json)
Hash identifier: RUz3OHTRORIzQbqTp22mBI0XtSEf09VuMbkyEa7gVDY=
Subject key identifier: 66:CC:3F:54:C9:A3:73:A8:36:B4:6B:F1:A8:0B:D6:7F:FB:72:D4:06
Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Certificate serial: 019A725C3B7F09A61B5B88630C64BEF974D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
Manifest number: 1651
Signing time: Tue 11 Nov 2025 10:00:38 +0000
Manifest this update: Tue 11 Nov 2025 10:00:38 +0000
Manifest next update: Wed 12 Nov 2025 10:00:38 +0000
Files and hashes: 1: ZYp7OzB0VDkonl-vqvogoEtvvrU.roa (hash: XLDH0R2aZzMq1kqL7QSYAm+5jtX2I1Y+ljQvrGChpiQ=)
2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=)
3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: 1HPBb3bLU6TAMoL/Gl1Ja71ZRq5WhNXC1ZCmuSPJcU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3b:7f:09:a6:1b:5b:88:63:0c:64:be:f9:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e
Validity
Not Before: Nov 11 10:00:38 2025 GMT
Not After : Nov 12 10:00:38 2025 GMT
Subject: CN=66cc3f54c9a373a836b46bf1a80bd67ffb72d406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:10:e9:2b:7d:97:54:dd:4b:96:16:cb:22:
6f:c2:03:3e:17:74:52:67:85:e3:23:2c:dc:b8:86:
58:50:7c:63:73:5e:5f:3f:0f:6f:57:1d:b2:9d:26:
17:11:05:f8:37:56:61:32:b0:8a:a4:3e:88:b8:87:
04:ed:e8:c8:4a:50:d3:e4:f2:e8:eb:6d:2e:6c:1c:
5f:9d:9f:e4:de:d6:5e:73:83:88:2b:d4:7e:14:a1:
29:13:df:26:73:bd:c8:5a:0e:b3:7d:69:78:3e:59:
0e:40:7b:c9:82:a9:49:8a:24:cd:1b:58:c8:42:73:
a8:c6:0b:8f:e9:8e:36:56:52:fd:54:da:4f:a7:29:
1a:53:d1:03:53:bd:a0:18:9f:3c:c4:d6:8d:a7:0b:
17:af:af:3d:1a:9e:1c:4c:12:83:37:d6:28:b8:ad:
11:de:0f:0a:26:58:7c:20:27:6f:f7:5b:ec:65:1e:
64:7c:3b:4e:52:49:b7:99:b8:7c:1b:a6:67:30:77:
1a:86:7a:3b:ff:4e:7a:96:10:53:62:a1:08:be:f0:
7d:78:3c:9f:f1:4a:b0:bd:ef:c6:0e:44:e5:86:e2:
96:46:22:b2:17:ee:70:3e:bf:82:e8:e7:2b:99:d6:
81:61:a6:f5:10:d2:23:2e:6a:53:73:ff:85:47:33:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:3F:54:C9:A3:73:A8:36:B4:6B:F1:A8:0B:D6:7F:FB:72:D4:06
X509v3 Authority Key Identifier:
keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cd:d0:0a:a9:e9:15:82:83:2f:0c:a2:49:12:d2:32:1a:d0:
bf:2c:f6:9e:39:ee:42:43:94:f3:b8:9c:6b:da:72:ae:40:e4:
89:42:c4:fe:d1:27:02:91:81:84:86:47:8d:74:f9:91:03:a8:
0c:64:8a:af:6a:8b:dc:cf:1d:df:68:8f:54:27:fa:1a:3d:a4:
6e:2f:bb:cb:86:cc:fc:c3:14:ab:76:ab:01:f3:11:e3:4a:f4:
19:27:1b:b4:8e:4e:67:19:6f:61:04:f2:a0:a0:17:20:c0:62:
43:28:cc:40:ee:67:9d:6c:40:98:1b:09:5e:80:d6:ad:36:3c:
55:bd:bb:2b:95:4e:1a:f3:56:5e:af:bb:3a:6a:62:6a:29:f7:
ec:93:95:cc:6f:76:b3:ee:cb:76:26:5f:52:72:3f:b8:d8:9e:
2b:bb:b8:9d:a6:82:e0:bd:ec:d8:d9:6e:5a:59:fc:27:79:a3:
58:b4:5e:7e:fe:75:2e:16:bc:85:fb:70:c5:67:63:31:0c:5a:
5f:d4:f5:3e:1c:77:70:6f:09:38:5b:30:2f:00:d0:a1:89:5a:
95:44:cb:fe:1e:aa:76:2d:24:af:5e:bf:ea:68:db:6c:b7:12:
27:d8:be:27:a9:e3:33:c3:cd:b1:f5:2f:32:0b:8c:72:1b:51:
e2:91:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:54 2025 by rpki-client