Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
File: xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft (raw, json)
Hash identifier: ErjPaWzkjVPAn4pnz2XBx8kFs4QJ64XlPefD74mex7s=
Subject key identifier: 04:42:F6:33:66:62:E0:51:39:72:EC:FE:86:C4:0A:56:74:70:50:F1
Authority key identifier: C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
Certificate issuer: /CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Certificate serial: 019A51BE96D10C596ADC680EC041CFEC265C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
Manifest number: 130A
Signing time: Wed 05 Nov 2025 02:00:36 +0000
Manifest this update: Wed 05 Nov 2025 02:00:36 +0000
Manifest next update: Thu 06 Nov 2025 02:00:36 +0000
Files and hashes: 1: S4GEAGQpLNuwxd69ASEGW9Vms4c.roa (hash: FsqX6X9yKqotnT07LkiZuZ69e3G5OYb0RnxsqAXswi8=)
2: xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl (hash: DV5Oh/qUkYayAVB73VUFabmH0KveItEr9SI4VuXwXD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:96:d1:0c:59:6a:dc:68:0e:c0:41:cf:ec:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62f0803c4298e156d563bd4f207cb5b8361026e
Validity
Not Before: Nov 5 02:00:36 2025 GMT
Not After : Nov 6 02:00:36 2025 GMT
Subject: CN=0442f6336662e0513972ecfe86c40a56747050f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:fa:7a:6f:22:16:fa:96:f4:a9:7f:a5:9a:
49:55:42:9e:4f:44:d7:fa:d5:d1:b5:59:13:5e:37:
5e:2a:6b:74:6b:65:9c:86:80:7d:36:a0:0f:dd:82:
da:67:5f:d8:3f:87:6d:2c:4b:63:01:9b:15:f3:d1:
eb:2b:79:eb:4c:e1:55:4a:cd:6e:6b:27:5b:f2:a4:
9f:25:ca:ae:5b:b3:fe:40:07:1a:0a:6d:ad:fe:8d:
80:c1:10:f5:37:a0:0a:74:13:c9:83:d4:c6:e6:bf:
0c:8f:ee:68:80:d2:ce:51:ba:63:53:94:b3:7b:3f:
f1:9f:99:b5:b5:a8:49:d5:e8:74:1f:40:43:54:ca:
82:16:34:6d:20:7e:8c:2e:41:98:2f:5d:65:92:61:
bc:c8:93:d9:a5:93:5e:bd:fa:a5:df:c8:6e:70:f5:
7b:99:ea:59:e3:26:d1:89:c8:ca:af:32:7d:33:ae:
6e:3e:01:cb:e2:ac:6f:cc:76:e9:8f:d9:e9:9d:53:
c9:a8:00:03:99:1d:4f:66:c4:48:39:64:2d:9f:c5:
83:a9:cd:d5:4b:94:f3:79:1e:93:0e:a1:11:3c:ca:
2c:38:85:c1:ad:16:8d:10:4d:94:ea:15:18:42:27:
32:98:ff:6f:b6:93:a7:72:c0:6a:4b:51:65:ad:2c:
3c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:F6:33:66:62:E0:51:39:72:EC:FE:86:C4:0A:56:74:70:50:F1
X509v3 Authority Key Identifier:
keyid:C6:2F:08:03:C4:29:8E:15:6D:56:3B:D4:F2:07:CB:5B:83:61:02:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi8IA8QpjhVtVjvU8gfLW4NhAm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7dda1c-87e0-4b49-bd9b-3deba1666e9b/1/xi8IA8QpjhVtVjvU8gfLW4NhAm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:1f:50:c0:d2:1d:9d:03:66:75:82:e9:02:8c:27:43:87:23:
62:29:81:f7:41:a6:e3:e8:14:45:83:1b:6e:5c:ad:84:b8:84:
ad:67:84:0d:55:53:c1:21:6f:72:b8:88:0e:15:2d:cc:a6:99:
b4:04:33:67:12:f5:64:d4:80:1d:83:1a:24:24:f0:5e:45:7a:
18:9b:04:c0:e1:ea:bb:e3:ab:54:4b:60:ff:60:a8:6f:b1:57:
37:7e:2f:7e:5b:e3:0e:30:f3:d8:42:b8:80:89:69:97:7a:7d:
8b:ac:cb:f1:97:13:e9:8a:f9:84:34:68:57:0a:e0:7e:5b:38:
ad:14:66:75:a0:31:c5:f9:01:88:60:44:a3:8d:59:e0:31:24:
fa:43:5a:a3:28:e6:08:8a:08:1f:54:02:50:41:d1:25:03:51:
15:38:1c:a3:9d:4b:0e:2b:9a:c2:68:c2:87:21:7f:85:51:72:
6d:24:c4:6a:1b:7a:3d:f0:38:3b:fc:6c:35:98:0b:25:98:c3:
56:98:1b:4d:f6:74:d4:4d:78:94:c0:02:9a:cd:0b:f9:2c:d5:
61:bc:c2:99:04:04:8e:1d:b6:bc:56:23:f1:ad:9b:70:1a:97:
c5:10:92:eb:21:c6:a7:c4:06:04:3b:54:6e:bf:86:49:f5:8e:
7c:25:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:57 2025 by rpki-client