Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
File: xFpgEca3YVjA9sXCctgtgCf4j6M.mft (raw, json)
Hash identifier: FXZ+HVtR9/RXra5+KENM7Up04c89nsT7UYN8DXYzRxU=
Subject key identifier: EE:8A:9C:E1:06:1D:A2:DF:E5:66:36:C4:DD:17:5A:21:75:20:D3:39
Authority key identifier: C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3
Certificate issuer: /CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3
Certificate serial: 019A7180A1FB3B19E99DF918FD11F0F3B128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
Manifest number: 0B
Signing time: Tue 11 Nov 2025 06:00:46 +0000
Manifest this update: Tue 11 Nov 2025 06:00:46 +0000
Manifest next update: Wed 12 Nov 2025 06:00:46 +0000
Files and hashes: 1: TDwx2WmFrMdexoGeE59PEmpc9rM.roa (hash: 28BE4l6J/5v8RjnKxtTkUCzhfcWaJj8sY8Y3wzlLglI=)
2: xFpgEca3YVjA9sXCctgtgCf4j6M.crl (hash: ddqAQt3lKiCb2ktPCkagQ7fPtEJbYiHbCcGjinMGmlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a1:fb:3b:19:e9:9d:f9:18:fd:11:f0:f3:b1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3
Validity
Not Before: Nov 11 06:00:46 2025 GMT
Not After : Nov 12 06:00:46 2025 GMT
Subject: CN=ee8a9ce1061da2dfe56636c4dd175a217520d339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:af:d0:cf:74:23:57:27:8c:f6:f1:62:be:
aa:21:e0:7f:2b:ef:6d:8c:9a:6b:f8:05:3b:d3:0b:
02:88:8b:a3:8a:b7:09:ae:7b:e2:4b:b6:af:e2:aa:
56:9e:95:4b:21:b7:42:8d:6a:fc:d0:1b:27:e0:3e:
0e:9a:0c:6d:55:d4:6a:0f:45:28:b7:2e:3a:84:32:
65:fe:37:b7:97:b0:96:08:10:3c:52:35:e8:eb:f1:
9c:6c:cd:6e:63:ad:6e:05:d5:3d:40:87:43:3e:2e:
c0:8e:93:08:fc:77:b2:bf:26:66:60:d3:73:57:88:
a3:5e:ec:dc:d6:5e:15:78:d6:34:db:8a:3e:be:58:
2e:4a:58:79:69:ef:40:79:7c:41:b9:53:0d:50:cd:
6c:86:d8:69:8f:ed:fb:ca:46:a8:26:94:b6:ab:17:
9a:85:b0:1c:38:bf:5b:a0:d0:c5:a3:1f:f5:63:f9:
34:69:47:c3:cb:5c:e8:d3:52:40:7d:81:7c:c0:36:
0d:76:4f:75:5e:d8:ad:0c:f4:6b:64:c1:18:cf:eb:
3e:d7:0f:44:e8:69:66:14:0b:fa:62:c6:87:2e:5d:
f1:b5:cc:13:49:85:27:d4:6b:1b:fc:1e:f0:34:2f:
43:ec:c1:b4:23:d3:8f:56:5a:1b:9a:c8:28:51:bb:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:9C:E1:06:1D:A2:DF:E5:66:36:C4:DD:17:5A:21:75:20:D3:39
X509v3 Authority Key Identifier:
keyid:C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f0:59:64:c2:4d:5e:8c:de:12:a8:cc:ff:0b:4a:df:7b:7b:
a7:71:78:a1:96:a7:a9:03:e8:a6:32:80:37:d2:67:8b:38:e8:
92:99:d5:ca:6e:a1:c8:70:f7:44:26:60:22:73:7b:0e:d8:cb:
1b:de:3b:20:e5:bc:81:ba:0b:2c:e6:68:e2:82:35:96:a6:a1:
bf:85:6f:12:01:2f:22:bd:93:31:7b:24:2c:e9:78:a8:98:9f:
f7:f2:95:55:94:e8:d0:a3:cc:03:d9:76:5c:c2:4c:8a:4f:63:
d1:02:7f:c8:95:c3:3b:28:79:b1:1e:0c:5a:52:4c:ad:59:89:
ef:30:5e:da:8f:4d:96:82:7b:b8:a7:a9:78:7d:0d:ef:62:87:
bc:79:9b:e1:16:9d:9a:51:3d:20:22:ef:b8:08:44:d5:9c:24:
dc:c7:59:8a:c2:89:cd:d8:52:89:78:e7:14:09:d2:01:cf:3d:
e9:65:0f:24:67:ef:3c:42:b0:af:02:66:1c:2f:14:1d:d0:31:
21:39:55:45:f2:8c:9e:d3:95:c6:24:8f:c7:ec:2a:c0:85:77:
74:96:61:ce:0e:37:22:00:29:b3:39:ac:d9:58:20:7a:a8:0d:
2b:73:c4:4f:96:93:a8:ca:b5:87:7d:fe:dd:86:f2:03:c7:58:
92:00:0e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:27 2025 by rpki-client