Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: FFND9RJB4iPZpBSaZwPkAQi9Gon3NV7heZcmTPgT6G4=
Subject key identifier: C2:CC:10:B1:A3:FC:EE:3F:88:73:D1:F4:38:40:C8:83:67:EA:CD:B0
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019A4DE1BE8F962E3511A63B7DB1D12B2BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 11BB
Signing time: Tue 04 Nov 2025 08:00:31 +0000
Manifest this update: Tue 04 Nov 2025 08:00:31 +0000
Manifest next update: Wed 05 Nov 2025 08:00:31 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: bIqQM49q7TH8diaEH8pnVg161qGxnXF4OAz4vHhApqM=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:be:8f:96:2e:35:11:a6:3b:7d:b1:d1:2b:2b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Nov 4 08:00:31 2025 GMT
Not After : Nov 5 08:00:31 2025 GMT
Subject: CN=c2cc10b1a3fcee3f8873d1f43840c88367eacdb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:cc:02:9d:03:43:51:f5:23:30:02:d9:3f:
94:04:d2:ba:22:09:12:17:5d:b7:25:06:98:b2:42:
37:f2:1c:df:c9:43:d2:f5:3e:02:01:7f:87:d8:4d:
76:ae:b7:72:a5:6d:fc:6d:76:c7:ca:b2:27:ff:b0:
28:dd:38:75:9f:26:0e:15:aa:d5:a8:4a:79:59:dc:
a1:52:d1:c1:d6:2b:6f:cd:c2:65:a5:de:36:a7:b6:
fb:ee:8c:cd:9c:f3:64:34:f6:b7:25:a0:c7:aa:6c:
c2:ae:17:b5:28:54:d5:35:99:b1:37:7e:01:43:c1:
45:53:61:7d:3e:e9:b6:fb:c5:29:01:fc:a1:36:f7:
6d:d9:79:44:5a:22:b9:55:86:64:bc:94:55:f3:9b:
63:21:59:41:c4:93:af:91:5a:c3:77:38:89:a1:27:
cd:f8:0b:99:97:38:81:76:eb:84:6b:0a:8f:c3:60:
82:d6:83:b7:c4:ad:3d:09:76:4d:7d:4d:e2:61:d2:
14:87:df:0a:5b:50:c3:12:a3:5c:27:98:4e:af:2e:
d5:4e:90:e2:20:ce:d3:58:eb:ff:92:bd:b4:ef:c7:
06:d9:0c:91:95:41:7f:6e:03:ec:60:96:0c:d2:cb:
9f:50:2c:32:0f:3f:7f:4f:06:b8:9f:ae:ff:7d:b5:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CC:10:B1:A3:FC:EE:3F:88:73:D1:F4:38:40:C8:83:67:EA:CD:B0
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d5:bb:96:d7:17:f7:ea:3b:72:f4:77:a7:64:53:51:f6:26:
7d:72:f0:66:a7:5f:fe:60:64:89:c0:bb:a6:cd:04:a6:3d:96:
39:d6:46:e9:45:c0:5b:1c:46:fe:c0:7a:56:01:57:07:46:ff:
cd:96:9f:95:fb:58:c5:e1:93:c2:2c:b7:25:bd:fe:88:84:e0:
b8:07:e4:eb:2e:fd:55:fa:ff:86:fa:3b:6d:17:38:6a:78:6a:
1e:20:bc:69:f0:b2:05:bb:14:83:e4:47:eb:54:7b:de:77:13:
c9:08:a2:d4:e9:1c:6c:80:83:59:e3:27:f4:f2:91:81:20:db:
99:62:eb:f6:4f:b9:7d:c5:49:40:c6:60:55:61:4d:9c:b3:f6:
1b:84:d6:c4:94:d2:89:a1:a9:b3:f4:40:f6:c6:7b:bc:60:35:
b7:8c:64:a8:16:58:81:de:77:7d:26:86:02:aa:30:b6:0e:4b:
ab:54:b1:db:1f:7c:0a:6a:e8:64:1c:5c:4f:4a:ac:6f:5e:11:
ce:1e:16:73:e8:0f:bc:7b:33:04:3b:ef:94:a2:9d:94:c6:4e:
df:90:48:7d:30:5e:c3:ef:2c:db:6c:68:8b:b5:c2:03:41:57:
78:8d:06:ae:b8:38:59:3a:a1:cb:aa:bf:d4:5f:df:a1:03:8d:
f8:03:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:03:03 2025 by rpki-client