Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
File: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft (raw, json)
Hash identifier: 7KeyHwEdI4A10oDb5L/HnBkasuutZ58+CURPUlWAQd8=
Subject key identifier: 0F:5F:84:FE:14:B9:58:92:0C:1D:7B:54:B6:51:FE:9E:43:AA:2F:D5
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 019A7149E4C10561F3C55DA5C23C1CF67565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
Manifest number: 0D29
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: Gia5qJnxkTQXZv942Pyg_qz0Ijw.roa (hash: Ohs/5SqLV2Md0cGZVcdev41UIaMnOgv11AyrRygjew0=)
2: xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl (hash: GBCGwLCucilusGDomGdYX3Ys+Nc5NuSbwajNHMe42NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e4:c1:05:61:f3:c5:5d:a5:c2:3c:1c:f6:75:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=0f5f84fe14b958920c1d7b54b651fe9e43aa2fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:49:b6:6c:02:f1:be:8f:0a:ef:f3:fa:d2:
ef:55:5d:69:02:6d:d1:48:de:d9:ca:1a:82:f5:eb:
cf:db:88:56:c4:f5:a0:ed:89:7e:bc:58:16:b1:b1:
4f:c9:65:a6:4b:21:c5:a2:42:d4:d4:97:15:36:a1:
38:44:ae:40:32:d3:0a:72:7d:38:48:22:6d:37:52:
6b:58:7f:d0:26:97:09:dc:f3:a8:83:14:cb:02:ea:
1a:e0:74:0e:60:4d:97:4e:f2:ba:b3:a3:0f:59:64:
60:27:b8:05:7c:13:02:d0:24:94:56:4f:c4:a7:27:
a0:54:62:ed:fb:e4:72:84:97:4a:48:a5:9b:ef:f8:
27:be:ae:03:a6:54:08:79:1e:d1:20:f5:45:e9:ae:
cf:39:f0:f0:2d:4e:0d:fa:44:8d:80:4e:67:9f:69:
f9:18:de:30:41:b8:a5:5b:57:46:65:17:6b:7e:06:
dc:56:03:1a:41:df:75:25:fa:66:d5:5e:6b:df:2f:
08:41:ba:3a:db:29:7e:c5:e0:ab:b0:e8:2f:33:2b:
97:c2:4f:93:b7:f5:70:cb:2e:7a:28:83:a4:d4:28:
1c:b3:05:e5:0c:60:22:03:fb:13:1d:16:04:32:29:
89:a4:8e:f0:b5:83:16:e9:71:5e:d7:e0:2f:6a:3c:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5F:84:FE:14:B9:58:92:0C:1D:7B:54:B6:51:FE:9E:43:AA:2F:D5
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a8:dc:b8:ac:f7:27:fb:a6:c7:6c:5a:77:5f:65:3c:f0:d2:
71:f0:c5:b7:3f:fc:2e:e3:50:b0:3d:67:73:1d:4e:a4:e8:74:
0c:fa:7a:d9:3f:25:b7:ee:10:fa:72:9e:96:ba:e1:5e:8f:97:
14:3e:65:aa:5f:fa:48:3b:d9:73:63:9c:9a:f1:e3:3a:fa:21:
0e:5e:40:6e:c7:55:8e:e6:48:0e:da:ec:9b:c5:4b:0c:c3:3b:
f8:18:0b:d8:0a:12:0f:ac:06:61:39:0d:9e:26:c3:b8:2a:1d:
fd:4b:9b:28:6c:50:88:85:32:3f:49:40:22:d4:89:00:50:35:
9b:3b:94:8f:33:13:c8:49:3c:da:4a:67:27:7f:88:31:1d:c3:
d6:81:8b:5e:70:8e:68:86:c1:f6:f6:f0:59:b1:7b:8a:04:a4:
64:b2:15:6f:f3:79:00:6f:3e:03:76:a9:3b:06:c1:c4:07:e1:
b7:82:d4:3b:bd:65:d6:64:2d:41:53:20:ed:0a:ae:d3:77:3a:
18:1c:d9:30:f4:42:a1:bd:1a:fc:8e:a1:b7:40:54:2d:98:b2:
95:a2:39:99:f1:86:8a:63:ee:86:02:81:11:46:db:04:a1:91:
41:47:b0:fe:46:db:47:36:d0:4f:69:d4:6a:5d:59:71:32:af:
49:40:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:45 2025 by rpki-client