Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json)
Hash identifier: rZyrg8esah3xrqY6h7LS+9epNO6hBhOIxUn9qslFgQ8=
Subject key identifier: C7:9E:36:40:DF:37:E8:1B:7F:C9:29:B4:EE:CD:1C:2B:F8:B6:40:FD
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 019A4D070D50206B1D10AF47AB6FEA9202C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 04:01:38 +0000
Manifest this update: Tue 04 Nov 2025 04:01:38 +0000
Manifest next update: Wed 05 Nov 2025 04:01:38 +0000
Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=)
2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=)
3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: /QhbnEMzCac3/lfv5SxBarl13PkIsfbdm8myPq9bUvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:0d:50:20:6b:1d:10:af:47:ab:6f:ea:92:02:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Nov 4 04:01:38 2025 GMT
Not After : Nov 5 04:01:38 2025 GMT
Subject: CN=c79e3640df37e81b7fc929b4eecd1c2bf8b640fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a0:a4:78:f1:83:bd:f5:64:a8:16:14:9c:2d:
28:9f:61:cf:96:ae:f3:cd:c1:45:d8:f9:b3:58:2b:
09:94:4f:32:e5:ac:6b:c0:bb:8d:14:77:27:7a:0a:
fe:5f:47:7f:46:33:9e:0f:ae:17:a5:99:3d:56:d4:
9a:b8:66:c3:83:5d:a1:e9:b8:f5:7b:a3:c2:55:95:
a5:73:72:3a:d5:33:56:ff:8b:78:7a:78:8f:55:75:
3a:b2:23:ba:cf:ef:b9:af:24:77:b2:33:9d:c1:c3:
1a:15:b2:93:e4:3b:71:42:1f:70:69:5d:5c:f9:9a:
24:12:4d:31:0d:d8:ce:c6:21:ab:14:b1:a0:99:ae:
02:6a:ed:00:17:6d:c3:5f:a4:01:68:05:9b:a1:be:
d1:3c:64:67:9c:24:65:b6:c8:7b:ae:6f:84:99:74:
c2:11:28:ed:ca:8e:fa:00:7b:e2:0e:94:e8:8f:e1:
56:b7:e8:cb:da:22:2f:79:88:91:e4:cd:be:ba:c0:
5f:b0:39:b5:df:5a:c7:9a:38:08:61:d9:63:ce:f1:
42:7f:d1:8c:eb:64:bd:d0:a6:2d:f1:17:fe:4f:b9:
e1:76:d1:20:bf:4e:68:93:72:73:a1:ac:47:4b:8b:
50:8f:7c:43:b0:86:ed:01:5c:31:88:ef:8b:80:06:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9E:36:40:DF:37:E8:1B:7F:C9:29:B4:EE:CD:1C:2B:F8:B6:40:FD
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0a:1c:04:b4:98:00:16:d1:88:2f:14:23:ee:49:a8:3a:7f:
7d:e1:90:c0:87:65:c0:bb:39:91:e7:67:44:fe:cb:63:99:1c:
9e:06:45:35:83:0a:db:9f:fa:5e:d1:fc:35:8c:68:fb:a2:12:
b2:30:56:a9:33:1e:8b:94:55:46:65:5c:c0:62:03:cc:00:1d:
a5:70:80:60:c4:97:83:fc:46:23:a8:03:8a:b3:00:5f:4c:6b:
cc:8b:ed:1a:82:30:1e:2c:67:8a:b4:b7:a9:d2:b0:bb:a6:fb:
52:0e:12:c8:cf:91:df:df:92:79:d7:05:11:bc:1a:22:d8:35:
69:74:90:50:59:94:5a:04:2e:e5:27:e7:71:9b:0c:33:c2:9a:
b2:38:eb:56:29:61:3d:22:0a:6b:3f:c3:ce:c0:76:25:ff:4f:
44:28:2d:ac:03:b0:99:74:7a:a5:7c:c5:bd:87:32:3b:5c:28:
02:29:b7:7c:11:6b:aa:3e:88:81:29:14:fc:46:06:31:79:63:
90:7b:60:2f:76:75:22:cf:39:8c:72:0c:b5:6f:4f:6f:4c:db:
84:9e:15:78:47:9b:b8:38:f1:28:e2:41:91:fa:1b:61:e7:75:
9b:13:dc:07:c2:8d:b7:a0:2d:eb:0f:17:f1:a0:66:5d:48:fc:
5f:18:18:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:42 2025 by rpki-client