Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: YUWyolz99YpF4303h0FZp919qI53bPdxlvRKDufvtLM=
Subject key identifier: F6:66:FF:96:6C:C3:B1:1B:F5:38:05:33:1B:ED:1E:6C:79:C3:1B:79
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 019A503E615C25E8D70FA95D0D9D8930C14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 19:00:56 +0000
Manifest this update: Tue 04 Nov 2025 19:00:56 +0000
Manifest next update: Wed 05 Nov 2025 19:00:56 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: da9S1un1Q/o1LAitNECI4IpGwOabriYvZntg+wIeb44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:61:5c:25:e8:d7:0f:a9:5d:0d:9d:89:30:c1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Nov 4 19:00:56 2025 GMT
Not After : Nov 5 19:00:56 2025 GMT
Subject: CN=f666ff966cc3b11bf53805331bed1e6c79c31b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:d3:c8:7f:1f:e3:8f:b6:77:d4:fe:02:eb:
d4:85:c0:ed:69:bd:47:b6:ba:0d:40:a9:bc:d4:d3:
78:90:00:59:14:af:e3:64:9d:0c:0f:f1:a1:09:b9:
ca:07:3c:c5:79:2f:ca:2f:e8:0b:e2:f1:0d:4f:5a:
3b:6f:6e:99:08:dd:16:7c:51:e1:bd:56:6f:45:ed:
f5:47:cc:c7:68:2a:17:bf:19:db:42:9f:0b:8b:39:
ee:b4:90:46:27:73:0a:18:51:ce:fb:24:20:f9:1c:
38:9d:ed:11:a4:52:3b:d4:57:8a:31:1c:86:7d:3d:
48:24:06:c6:90:5f:ed:ef:17:46:b6:cb:f1:25:58:
5c:66:59:ad:77:54:44:8a:c7:de:fc:5c:9f:32:60:
30:a4:6d:f5:6f:74:81:55:1f:eb:62:27:cb:26:00:
2d:a5:4c:00:c4:ca:0d:00:b6:ca:cf:0e:48:0e:e2:
87:9a:19:7c:da:41:3f:3b:85:88:78:14:b0:a0:52:
6d:8a:0d:f3:e7:1d:31:42:0d:7d:a2:5a:78:a8:64:
86:52:78:46:f0:41:61:b6:4a:4b:de:a9:be:ce:e4:
f1:8d:ea:f2:f3:70:46:dd:7d:42:c7:4f:ca:bf:6a:
15:e3:5f:79:fd:8a:52:84:b4:4a:51:f2:d7:72:2e:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:66:FF:96:6C:C3:B1:1B:F5:38:05:33:1B:ED:1E:6C:79:C3:1B:79
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e8:7b:a8:3f:32:9b:ac:6f:a7:9c:ff:95:de:ac:c6:54:de:
c1:70:94:7a:7b:8a:64:8b:bc:da:0b:60:c7:21:69:b7:42:ef:
17:df:66:d8:17:b2:ce:b3:80:12:d9:fe:51:0b:0a:ea:cd:c5:
24:29:fe:d7:1b:92:35:b8:9d:2f:d5:75:45:09:77:b9:62:d6:
cb:7a:6b:f1:bc:0b:72:37:00:50:7f:13:de:f3:cd:e7:10:ae:
ec:00:27:ea:84:0f:f8:16:ef:69:8e:22:b3:cc:69:fc:c6:6b:
26:1e:d6:60:59:0b:61:02:8f:b7:ca:6a:81:77:8d:cf:22:72:
95:9b:b5:38:73:2d:c0:8b:3c:22:c8:93:a5:f3:0c:6e:30:57:
8d:14:0a:bf:32:a1:0f:24:47:71:ca:32:4e:2a:b7:55:f1:6f:
bc:44:75:e6:72:71:6b:65:55:f9:b1:8c:a5:db:e2:b6:6a:5c:
73:0b:18:22:97:e6:26:41:04:90:c3:94:67:9c:ad:b5:db:da:
8c:e2:66:4d:0b:4c:5a:48:39:9f:cb:77:7d:6f:76:dc:6b:13:
9b:ea:e0:b8:76:fb:59:2f:63:90:f9:b5:d2:21:09:0b:13:df:
74:05:d7:0b:6b:1f:57:92:5a:06:e7:42:9d:d2:53:7d:ed:00:
2c:df:f4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:04 2025 by rpki-client