Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: aEgRlZygWAvGkHV0fj5aA3iB4noVeH2EKq65JjR3Hkg=
Subject key identifier: B9:7F:CA:F6:DD:49:5F:7D:F3:5E:D4:C1:62:52:00:DD:1A:8E:DF:1D
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019A4D73FDC107D2CDDE6EE96A705EC92514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 1618
Signing time: Tue 04 Nov 2025 06:00:38 +0000
Manifest this update: Tue 04 Nov 2025 06:00:38 +0000
Manifest next update: Wed 05 Nov 2025 06:00:38 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: /D+j2BkJJlzYqFZF0+kjOEflD5rUODMYNESjDLnJ3BE=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:fd:c1:07:d2:cd:de:6e:e9:6a:70:5e:c9:25:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Nov 4 06:00:38 2025 GMT
Not After : Nov 5 06:00:38 2025 GMT
Subject: CN=b97fcaf6dd495f7df35ed4c1625200dd1a8edf1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:27:59:67:b1:18:a9:c6:40:02:d2:8c:cd:
f1:da:24:2a:6d:7c:bb:bf:02:6f:59:92:3a:8b:9f:
f9:d3:34:5f:6a:5b:4c:c5:44:10:7d:e3:3c:9a:24:
a4:9f:3e:2c:a0:15:dd:3b:70:03:9d:87:76:9b:da:
b6:90:c5:d1:b9:4e:d3:c1:9f:b8:e0:83:50:08:ce:
2f:9e:b1:13:25:0f:75:b0:1a:c1:f9:36:6d:95:7a:
29:64:30:cc:2a:fb:92:17:21:7f:87:a2:bb:fc:37:
5a:3a:bd:a1:56:88:e3:8a:05:ce:42:8b:e7:16:48:
a2:10:9a:93:42:f9:3f:4b:28:90:94:e4:cd:ba:52:
46:34:4f:b6:2f:ee:fb:02:ce:38:31:9e:76:33:e6:
c0:95:6e:2c:f6:e2:2c:2d:8d:3b:da:d7:07:f9:1b:
ce:a1:0a:22:c3:c8:1a:52:dc:e0:e5:03:1a:a4:e0:
cf:86:5b:71:d7:4e:b9:2e:44:a1:87:64:1e:4a:4f:
ec:e2:ef:d2:a9:e6:4c:6c:87:c2:fa:92:68:2d:58:
82:d7:09:e8:2d:14:b1:d4:af:af:9d:e4:9c:09:10:
cb:ab:f0:5b:05:85:99:0e:7f:27:d3:61:80:ae:48:
8a:1c:ac:31:cb:63:66:8c:fe:c2:04:e9:7f:44:65:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7F:CA:F6:DD:49:5F:7D:F3:5E:D4:C1:62:52:00:DD:1A:8E:DF:1D
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:49:97:27:6a:ea:2d:90:b5:b8:be:30:b6:97:64:7a:e2:cd:
44:96:d9:ba:00:65:32:d9:6b:0a:93:4e:f2:43:d5:8d:10:89:
01:14:51:9a:02:01:44:40:18:7f:54:59:df:5a:27:c2:6f:74:
2a:39:73:4a:8c:9c:f5:b1:84:03:e0:84:8d:4e:04:c9:1b:b7:
29:a4:f8:94:77:b7:d7:e5:ed:af:88:84:57:eb:a6:01:23:23:
07:08:4d:7e:d4:d9:9e:89:a3:7b:43:00:33:6e:3c:f6:db:10:
6c:b3:83:59:72:87:75:3b:c9:21:91:b6:f1:7e:05:13:16:f7:
e4:49:b5:4e:47:a2:0c:57:87:a0:4b:02:41:f3:1a:a4:a6:bb:
5b:ce:9e:a6:d7:d7:9b:05:7f:87:4b:b1:97:86:6a:ad:07:db:
4d:a1:ef:db:73:6f:48:de:ae:f2:07:6a:b0:91:c4:c6:4f:d7:
cd:0a:91:43:d6:c4:ba:d0:25:51:60:5a:02:98:47:0a:fe:70:
dc:9a:e1:ba:db:ed:ef:6d:9a:0e:52:e5:62:23:18:c4:37:4c:
94:03:16:ab:47:6e:50:f3:7b:55:5b:da:98:c1:c4:17:be:0b:
de:34:a8:de:79:ae:b8:df:aa:e6:a1:ea:76:78:f3:43:6a:d3:
c7:0f:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:23 2025 by rpki-client