Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json)
Hash identifier: MftutcyJga7cXk73bGwuyaKX2op65rxS1jkV0sHIBMU=
Subject key identifier: D4:31:15:50:AC:65:A9:B5:DA:4C:A0:C4:64:27:87:17:D9:B5:77:8C
Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Certificate serial: 019A4F2B779CBD5306A6BAFC5C08D22EBA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
Manifest number: 1581
Signing time: Tue 04 Nov 2025 14:00:40 +0000
Manifest this update: Tue 04 Nov 2025 14:00:40 +0000
Manifest next update: Wed 05 Nov 2025 14:00:40 +0000
Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=)
2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: pzzExHU2oXRjvEUEIl1de0RNjtwAFe9maa7ehHfZxaE=)
3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=)
4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:77:9c:bd:53:06:a6:ba:fc:5c:08:d2:2e:ba:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1
Validity
Not Before: Nov 4 14:00:40 2025 GMT
Not After : Nov 5 14:00:40 2025 GMT
Subject: CN=d4311550ac65a9b5da4ca0c464278717d9b5778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:8b:0e:03:49:7e:c3:6c:44:43:73:41:95:
41:20:d5:c4:7c:59:96:63:56:65:28:28:5b:e3:54:
7a:88:3d:28:d1:6e:36:52:3f:86:fd:13:04:24:12:
1e:c0:eb:23:96:1d:aa:a9:1a:2b:45:e9:3b:4a:5a:
c7:29:69:f1:5e:64:42:34:3b:80:00:09:1e:53:84:
5f:f7:8b:e0:ae:30:35:d7:22:6b:3f:0d:8b:fc:af:
65:2b:ac:01:24:08:ec:64:f2:3a:76:b8:31:56:b3:
bb:07:8f:4c:90:b1:ca:ad:34:e0:57:85:ff:f8:ca:
bc:af:20:03:bc:7a:73:37:be:a8:df:20:f3:06:6f:
82:0f:02:d6:ae:d6:97:b2:40:93:80:94:ed:58:81:
3e:76:a4:e7:99:73:ee:b8:1c:c8:26:cb:50:63:52:
69:1b:90:9d:d9:92:ba:97:eb:7b:c7:a1:40:45:ee:
ac:66:1b:bb:c9:2f:22:9e:da:75:ae:bb:ef:f5:e3:
d8:5b:73:36:0c:c0:75:55:f6:c2:3d:bb:57:d5:54:
57:bd:d4:61:32:8a:bf:82:5b:4f:c0:f2:ce:e0:0c:
c7:b4:b5:e0:48:e5:f6:59:74:2e:64:36:85:ed:e8:
53:94:2f:ee:61:f0:45:95:f5:d4:4f:fb:67:77:48:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:15:50:AC:65:A9:B5:DA:4C:A0:C4:64:27:87:17:D9:B5:77:8C
X509v3 Authority Key Identifier:
keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:54:c3:87:97:eb:55:3b:3f:dd:0a:3b:30:9d:07:c8:04:95:
f6:5f:7b:92:8b:72:8f:ba:8c:1f:15:84:16:42:a8:51:20:0a:
11:d0:c3:c1:b1:35:b0:52:71:9a:51:cd:29:8c:58:29:01:af:
d6:ce:d9:c2:af:39:73:f8:26:cc:0e:1d:1a:37:05:10:3d:7c:
84:27:3d:15:28:56:d8:4c:90:21:98:76:98:05:41:9e:0d:78:
14:ea:b1:01:db:6a:2a:25:b5:5a:23:f9:b1:c9:b3:a6:fa:cf:
7a:78:f6:06:9f:73:5b:24:c6:36:f3:9d:dd:e8:ee:8e:0f:23:
13:d6:49:13:6a:07:96:af:34:72:65:42:39:ed:2b:0e:43:55:
7c:61:3b:ad:8d:35:ce:12:69:1b:49:ed:a6:62:07:6d:81:66:
43:49:07:b4:47:50:45:ba:35:1f:18:aa:fd:4a:98:27:19:48:
4a:22:46:24:e7:17:bb:26:21:0b:e5:79:e5:13:ea:4a:e4:3a:
af:ce:bd:3d:ca:f5:43:f8:f9:fa:0d:8a:92:5b:2d:08:05:45:
3a:e2:4f:72:b4:35:60:4b:b4:2f:84:de:7a:ac:0c:07:62:50:
fe:1b:7e:b6:d2:a2:19:cb:94:2e:b7:1f:b2:46:db:cc:fa:c2:
e7:fc:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:17 2025 by rpki-client