Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: AWf2JkcidTgN+GFwyVI5bGS/UZvD6mHs2OxOlCd2xNc=
Subject key identifier: 08:05:25:07:2D:A3:31:9F:3C:54:D8:7F:C0:37:3D:FF:D0:6C:A9:9C
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 019A16F30865DBDCA30344CD684681A86107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 02B5
Signing time: Fri 24 Oct 2025 16:00:17 +0000
Manifest this update: Fri 24 Oct 2025 16:00:17 +0000
Manifest next update: Sat 25 Oct 2025 16:00:17 +0000
Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: hbbGh+6cFSJZCgPVQ3sCLU1PoRxOlFGltkwrywy1ewY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:f3:08:65:db:dc:a3:03:44:cd:68:46:81:a8:61:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Oct 24 16:00:17 2025 GMT
Not After : Oct 25 16:00:17 2025 GMT
Subject: CN=080525072da3319f3c54d87fc0373dffd06ca99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:df:95:4c:82:a7:a2:b2:c3:cc:46:63:8b:
a2:51:3a:ec:3c:83:ae:f3:56:33:03:0d:ff:8f:01:
7e:78:5e:17:f7:9c:55:ab:32:84:4f:e6:7c:53:7b:
b5:ee:7c:27:6e:63:5d:e0:d9:57:e1:af:02:ed:70:
48:c5:ab:41:7e:c1:de:8f:de:46:8f:76:eb:e8:a8:
9d:cc:1a:12:e2:75:df:99:56:f5:57:da:2d:a9:03:
13:88:06:ab:cd:41:27:cd:5d:0d:93:de:89:bd:e8:
15:2e:f5:3c:18:0a:e5:b3:40:15:71:0f:94:b3:8d:
78:a6:dd:7e:89:cf:d6:ae:d3:fd:6d:35:24:6b:74:
fd:fc:78:7b:d6:12:d5:29:8b:b5:d0:f1:db:dc:1f:
ab:91:53:76:af:5c:de:33:86:b5:3d:9e:43:0f:5e:
e5:8c:f2:8b:db:8b:11:ce:83:82:1e:4c:e5:79:67:
98:cd:ce:7f:bf:75:10:50:08:c3:25:ab:ad:0d:a9:
a9:24:a5:38:e4:a0:ad:fb:ee:1f:49:27:38:4d:56:
ad:c0:20:30:48:6d:22:90:d2:d0:b3:3a:26:08:c2:
fa:c8:d3:1e:8c:9e:cd:94:e8:cf:7b:e7:fb:38:9c:
66:58:27:a3:07:7a:fc:9a:02:15:22:b8:0e:c8:ca:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:05:25:07:2D:A3:31:9F:3C:54:D8:7F:C0:37:3D:FF:D0:6C:A9:9C
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:01:45:cf:5f:b5:87:f3:16:d9:6a:42:2d:60:4b:5e:e6:c9:
3c:d2:4a:59:c0:b2:8f:5e:6a:f6:df:0e:02:41:ff:a7:f9:2c:
6a:5f:6e:8b:3f:e0:c5:f8:be:20:52:33:0d:dd:34:84:6b:cf:
4c:dd:c1:29:fc:42:b2:11:04:64:61:38:29:49:70:e7:c2:9b:
23:2b:f8:13:fa:09:ec:6f:f0:0d:f3:3d:71:de:96:c0:d3:91:
7f:22:7c:f1:ff:4c:5d:df:88:95:4d:06:8d:5f:aa:05:08:7a:
53:a1:83:41:46:c1:da:b0:99:07:ca:56:88:27:a3:05:14:47:
b3:96:b6:c4:1d:c7:a2:9a:09:70:60:95:a8:13:1c:01:a7:2a:
09:2c:24:bb:0f:28:98:64:1a:5d:6a:c0:f7:e2:24:ca:73:0c:
d4:ad:d4:11:9f:84:b6:1c:70:81:b1:e1:3c:1f:57:d5:ef:8e:
fb:e3:23:96:81:21:ab:6f:0f:77:c8:8a:83:f9:97:da:50:71:
08:e6:29:5c:02:06:ce:6b:ff:15:07:35:46:b8:ea:c1:c4:50:
93:f8:4b:7f:88:c9:d9:92:19:22:6d:94:0d:66:aa:9d:0e:42:
3d:b0:36:20:0c:ad:f9:60:15:5b:71:c0:51:5c:72:61:68:7a:
ce:a8:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 21:10:41 2025 by rpki-client