Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: //ABYsu+FJglCbqGgMhFGK05fkaBJnWznGqxkDFcZCM=
Subject key identifier: 2F:C7:31:C9:EB:C1:1A:20:C2:B9:F0:EF:34:43:42:7B:B7:2C:F3:7A
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 019A4F629EAB35795F3FB8E31BFE5F5E37FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 0636
Signing time: Tue 04 Nov 2025 15:00:54 +0000
Manifest this update: Tue 04 Nov 2025 15:00:54 +0000
Manifest next update: Wed 05 Nov 2025 15:00:54 +0000
Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: wjqPFtPHimYeZlmkUuKYQdCJstqDKJpf2KRReQbHabE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9e:ab:35:79:5f:3f:b8:e3:1b:fe:5f:5e:37:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Nov 4 15:00:54 2025 GMT
Not After : Nov 5 15:00:54 2025 GMT
Subject: CN=2fc731c9ebc11a20c2b9f0ef3443427bb72cf37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:e3:1a:87:9c:8f:3f:25:72:31:53:c2:19:
d2:c0:9e:af:ae:a7:2f:c7:3e:03:98:56:56:f6:03:
72:77:72:ea:56:fc:ae:dc:08:a1:f9:dc:d8:f4:36:
f7:d5:0e:17:67:27:28:cb:22:da:50:9c:41:d7:bb:
4d:25:6a:4f:00:3c:48:75:ae:04:22:1c:2b:12:94:
ee:69:d1:24:c2:16:4d:1e:79:52:20:5a:d3:ce:7d:
eb:28:b0:e6:25:6d:0d:7a:47:35:7b:8f:b2:3b:94:
40:fa:fb:bd:c8:56:0b:28:f2:3a:1d:d7:5c:80:a9:
07:29:92:e8:52:83:39:86:75:55:46:2e:58:d0:3e:
72:22:c9:0b:76:96:6d:ce:40:e8:d9:71:b6:61:73:
1c:12:9e:2d:0f:fd:76:50:9f:0d:81:0d:d4:e2:8b:
98:36:d9:cd:51:4f:30:20:89:f2:cb:0e:64:99:5d:
ae:eb:80:30:ec:6e:06:31:d6:a8:c3:bc:ca:51:bb:
a3:37:bc:e4:4c:62:03:c8:74:dd:b2:d8:9d:35:15:
69:50:2d:c4:a2:49:ff:ca:3b:f0:37:55:f8:f8:08:
b9:bb:43:90:c3:ff:da:aa:43:23:7f:42:60:f5:3c:
50:c4:6a:fd:fa:98:38:9c:ec:ed:c5:c3:50:f6:84:
76:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C7:31:C9:EB:C1:1A:20:C2:B9:F0:EF:34:43:42:7B:B7:2C:F3:7A
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:5f:24:06:23:44:f4:0a:92:17:28:aa:f6:47:bf:5f:ba:
0f:a9:97:3e:30:eb:6f:d6:8e:3f:d9:0d:12:fb:bd:bd:de:da:
32:d5:2c:8b:3f:f4:a7:09:60:f7:39:ea:8c:f5:01:cc:07:36:
34:b2:f1:64:d5:76:5c:21:f6:99:ad:4e:20:48:c5:5f:df:2b:
f0:8d:6d:db:ef:f3:2d:3e:4f:65:5b:c2:4f:73:ec:fb:2c:03:
ae:06:d3:b6:68:0a:20:a5:10:12:14:aa:51:c2:dc:36:98:a8:
d6:bb:5a:3f:3a:16:05:e4:88:ee:a3:fd:41:d1:ff:a3:b3:5a:
91:19:87:26:ba:77:87:7e:86:ab:1e:77:8d:aa:d6:08:5b:53:
f5:fd:d3:44:86:dd:ae:dc:14:b3:5e:57:3a:10:b8:d1:cf:ac:
b5:35:0e:ec:79:ca:6b:b0:35:6a:fc:2a:0d:fd:a2:18:53:88:
ab:7e:4a:e4:1a:fd:82:87:e3:ea:4c:1c:2f:a1:d6:8f:54:66:
a2:3e:7d:29:44:e6:9f:bb:f4:a7:58:47:db:56:23:eb:3f:85:
31:27:d5:76:54:46:5e:96:a2:8a:15:35:40:ad:d2:52:b0:30:
62:60:50:b6:38:3f:ea:45:78:3b:56:1f:c4:a4:1b:10:94:1f:
a6:58:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:49 2025 by rpki-client