Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json)
Hash identifier: 0hqmqoE8LKJ4eGKLTkjVcs8uWoy4ymHPGqnCT4qkRxA=
Subject key identifier: 68:B0:99:7B:6F:CF:09:2E:E4:89:32:8A:B0:78:0E:27:39:90:06:F8
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 019A4D73EC3551B3D05D700770348FD44C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:33 +0000
Manifest this update: Tue 04 Nov 2025 06:00:33 +0000
Manifest next update: Wed 05 Nov 2025 06:00:33 +0000
Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=)
2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: 6Pp/4bm0OxcwncaCTO1GDW4XO0gCU692AZx1lejMAXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ec:35:51:b3:d0:5d:70:07:70:34:8f:d4:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Nov 4 06:00:33 2025 GMT
Not After : Nov 5 06:00:33 2025 GMT
Subject: CN=68b0997b6fcf092ee489328ab0780e27399006f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:ef:87:79:5e:96:ce:e3:29:e4:0f:90:b1:
ae:a1:b2:97:1d:ea:27:e8:90:41:42:d5:be:fc:80:
8b:de:31:5d:e4:92:02:88:ff:90:99:a1:85:47:a1:
d1:c3:ca:94:f0:12:b6:83:1f:0b:ce:01:9c:4a:c9:
54:bd:76:6f:ea:fc:e8:08:00:75:c3:04:6f:2a:d2:
1b:32:bc:09:48:51:6a:83:be:06:71:80:92:b2:74:
3d:ee:36:66:49:a7:3e:72:44:d5:64:f0:4e:f5:b0:
be:28:c6:62:df:6e:19:ec:76:59:08:70:8c:39:59:
2f:9a:19:b0:6b:1d:aa:00:ce:8f:55:08:5f:e2:fa:
cd:7f:f3:c7:56:29:eb:6f:c8:65:90:39:e6:c5:7f:
f9:66:27:4e:99:14:bf:13:d9:25:bc:c1:b9:f3:a3:
7f:3f:f1:e2:6b:01:a5:70:72:d7:f1:75:84:5e:91:
b5:76:8f:6a:02:7a:a1:50:a4:64:05:9e:ff:08:a6:
36:0d:d3:37:13:13:4a:b6:2b:84:a7:d8:a5:8a:cd:
8b:1f:f1:cd:6a:96:31:62:3b:04:27:14:30:01:aa:
07:93:9d:dd:e9:de:72:7d:18:c1:fc:98:0e:37:df:
7f:8c:04:85:0a:64:5a:41:fb:98:21:3f:a1:f6:e5:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B0:99:7B:6F:CF:09:2E:E4:89:32:8A:B0:78:0E:27:39:90:06:F8
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:3f:75:51:3a:1f:01:e7:f6:8d:79:15:d9:d1:41:35:e3:
3b:61:b4:eb:77:96:fe:28:22:af:99:fa:80:d6:ad:04:45:74:
31:74:4c:70:9e:cf:62:da:21:43:97:67:49:7d:e0:91:f2:df:
31:dd:cf:d6:99:dd:fb:8f:c7:1b:9d:30:6d:fc:2a:90:9e:07:
d3:15:b7:4f:90:67:75:5d:9e:8d:b4:74:99:5a:4c:87:45:43:
26:6e:bb:7b:e4:09:1f:c0:41:92:55:51:ac:20:37:1d:ff:b8:
28:58:5c:7f:cd:57:d2:82:21:2a:10:69:5b:a7:9d:f0:a1:33:
24:1d:af:c1:78:d1:72:7b:10:68:24:67:e7:da:1e:4a:5a:3f:
aa:26:1e:0a:c7:dc:84:1f:5b:95:9f:1a:e7:d0:a0:92:60:b2:
29:a9:b3:17:06:fc:91:52:e7:f3:f7:36:8f:06:cc:33:95:1b:
49:5f:dd:95:d4:da:0d:e1:f2:84:a7:72:f2:96:d1:6f:2b:54:
28:04:0c:81:a0:c5:ff:3f:2e:44:bf:18:7d:ad:a3:01:15:6f:
13:89:7a:18:94:c6:e6:28:ac:16:ed:70:20:cc:75:67:f7:a0:
7e:21:41:26:c0:b7:2b:d6:36:bf:c6:e7:45:03:10:4b:c7:da:
c8:d4:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:19:46 2025 by rpki-client