Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json)
Hash identifier: keNx+G2fOqyMZhiF7NnCcGYdO/Y0aOzdi3UpKySDAPU=
Subject key identifier: F7:B5:D9:8B:7B:35:3A:7F:BD:BD:34:E0:3A:54:57:5A:92:24:85:3E
Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Certificate serial: 019A7149DD8A9A5A6812956DE81656299ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
Manifest number: 3C
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: huTpztbsQALNaxE7iUdUxmvpFuk.roa (hash: sMf2UqH7zZTc0SKWY1HAbVuZYKZQgSMeRF7P6Xn93AA=)
2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: k0zZiRU1cc1KaX7I+cUT/REjPXkquj49DI3Xm35jVws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:dd:8a:9a:5a:68:12:95:6d:e8:16:56:29:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=f7b5d98b7b353a7fbdbd34e03a54575a9224853e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:00:86:22:b2:6a:83:2e:bf:c4:74:18:7d:
d2:1d:12:40:64:ba:7a:69:ad:1f:86:03:e5:79:09:
68:a7:2a:d6:61:f9:3f:54:83:11:f1:51:d1:5c:79:
04:dc:64:f6:d7:4b:a1:17:7e:68:da:2b:26:d9:05:
4c:ee:c6:e0:01:35:e1:06:31:b7:c7:e5:6b:8a:88:
43:92:40:4a:c0:4c:56:90:8f:25:85:49:2c:b3:7f:
ae:4d:c9:3c:c6:76:ce:1b:07:c6:f3:ba:10:28:fc:
ee:fe:bb:bf:11:2e:7e:be:5a:ca:19:37:46:d1:b2:
f4:f5:98:49:2b:2a:65:59:d9:56:25:7f:6c:2c:f4:
4f:c5:4e:19:4d:4d:80:65:14:fb:d0:7d:7e:29:c7:
10:59:f1:81:a4:05:4b:92:6d:c2:41:06:6f:11:06:
74:47:a2:bc:84:3d:10:18:d2:7a:78:4b:08:ef:28:
66:dc:c2:86:07:17:73:21:17:21:3f:04:41:7e:c5:
fd:c9:14:2a:85:76:31:67:cd:f8:2d:3c:5d:cf:1e:
2a:fc:a0:68:ff:22:84:98:1b:1a:a3:90:65:8c:f1:
2d:59:ea:65:d0:d2:68:3a:23:d0:ed:52:dd:f3:a1:
45:dd:43:cc:eb:cc:c6:12:50:8a:d5:7f:8c:00:ae:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B5:D9:8B:7B:35:3A:7F:BD:BD:34:E0:3A:54:57:5A:92:24:85:3E
X509v3 Authority Key Identifier:
keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a5:b8:42:22:6c:f9:e1:2a:d8:6c:9f:61:dd:af:08:de:8f:
29:ee:d8:34:95:a9:66:91:36:18:87:e5:4a:f9:e9:e2:58:ca:
b8:05:85:19:ff:bf:6c:82:0c:e9:69:1e:37:f8:66:68:d7:63:
3e:69:89:cd:65:98:79:51:2c:c4:ea:1b:d2:bc:ac:f4:08:57:
0c:99:ab:cc:25:86:0e:2f:a8:4c:3c:14:71:8f:57:98:56:c9:
33:10:41:37:e8:41:22:d5:0f:e4:a4:2c:d6:c9:a0:3a:21:76:
b4:f3:eb:62:26:33:b7:ba:91:24:9e:6d:4d:22:dd:7c:39:34:
96:c7:63:ea:fa:14:d3:68:e3:ec:eb:73:dd:e6:e0:68:d8:d8:
d9:a0:8b:18:16:50:32:2d:4e:bc:40:82:47:93:b0:95:c8:ad:
da:13:15:12:1d:b6:75:5f:25:15:83:ca:8c:f7:57:0b:30:d8:
b9:41:5d:6b:58:1f:35:1b:8a:5a:c8:8f:a0:94:01:45:04:44:
2c:a0:a6:9b:19:a1:80:4e:24:ce:80:b3:02:18:99:c8:03:31:
72:33:bc:27:7d:ab:a7:96:01:25:92:ae:54:ff:a2:65:d4:8e:
c0:7a:d4:a2:24:96:46:76:ad:53:08:86:91:86:4f:6c:7b:7f:
1c:6e:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:36 2025 by rpki-client