Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: zl+sTGCdhoVDXWE2lxAGLMmYqofZkLcNjw1NJxmg3L0=
Subject key identifier: 66:D5:C3:B4:3E:75:0B:5D:6B:43:88:A7:A3:2F:08:25:40:21:AE:A4
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019A4D73E7F8905F9E3C1D7DD4AA299F0D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 1559
Signing time: Tue 04 Nov 2025 06:00:32 +0000
Manifest this update: Tue 04 Nov 2025 06:00:32 +0000
Manifest next update: Wed 05 Nov 2025 06:00:32 +0000
Files and hashes: 1: VnsIEzhd4UJd5pyA_Dc2-bnO2FM.roa (hash: VlwFB7fAgr+iiENhL1pQbq6AXoNzH1bEvRoJP9yVGBU=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: kwOBZWbPAc6mvCtzDS2BZIWH0vQzOQgnXd/2zv408xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e7:f8:90:5f:9e:3c:1d:7d:d4:aa:29:9f:0d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Nov 4 06:00:32 2025 GMT
Not After : Nov 5 06:00:32 2025 GMT
Subject: CN=66d5c3b43e750b5d6b4388a7a32f08254021aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:62:5f:90:20:9a:d8:1d:58:98:bf:09:a4:
a5:0b:21:65:2a:e9:2d:5f:49:66:6b:68:df:fc:ba:
e9:28:44:76:ee:fa:1b:c3:63:59:14:33:81:9f:f2:
b6:6f:08:d4:00:36:61:dd:0e:07:a4:3f:87:c9:63:
3e:14:67:43:d0:34:16:15:e9:8d:89:d2:a4:5c:45:
da:32:bb:31:b2:e3:9f:86:a9:35:d7:82:94:55:f6:
2e:21:32:8e:f7:a3:85:a9:02:78:05:4e:81:17:a4:
1e:36:12:19:53:ef:a5:aa:88:05:56:c4:22:ae:d3:
a4:12:a5:1d:46:ac:f1:be:bc:5b:f7:cc:4e:62:77:
28:c3:15:bc:ef:3e:a4:5b:f8:87:26:79:98:8b:b3:
91:cd:40:87:81:6f:4b:1b:a1:88:fe:df:0e:4c:72:
be:ac:8a:1a:31:c2:94:b0:46:be:8c:d0:f3:1e:fd:
ad:ea:3c:b0:d3:95:6d:cf:41:d2:fd:09:3e:ee:a3:
ce:80:dd:94:53:87:5b:99:4d:3b:62:7a:71:51:5e:
e2:be:e6:2c:44:bf:26:4d:48:70:e9:b1:08:b1:76:
b1:7a:6c:8d:c6:ec:75:1e:ad:84:56:67:81:4c:cc:
a5:d6:56:54:c7:81:77:38:d5:d8:44:d4:9c:49:51:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D5:C3:B4:3E:75:0B:5D:6B:43:88:A7:A3:2F:08:25:40:21:AE:A4
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:47:b6:cb:3a:8a:45:78:2d:85:5e:eb:6d:8b:70:0c:9c:02:
fc:56:37:7f:db:89:b4:3a:0a:f8:c8:12:cc:67:ab:0f:f1:6a:
6d:57:c6:54:93:a3:87:67:74:ec:65:36:00:4c:30:c9:9f:40:
6a:29:e2:c0:80:80:07:73:6d:d1:37:7c:93:d0:36:01:00:04:
c4:aa:32:cf:44:3a:18:f7:54:27:bd:59:25:70:b1:9b:6e:ff:
b7:ec:5c:0d:de:80:5f:6e:c7:41:88:b6:f6:14:54:fc:a9:b9:
b8:fd:6c:6d:3b:c7:1b:48:99:9f:ae:6f:c0:55:8f:72:5a:72:
23:21:fd:fc:17:27:0c:5b:32:80:1c:bb:9f:00:e0:8f:99:1d:
b4:13:08:7f:a2:49:2f:f6:bf:30:33:ec:ed:d1:b5:d7:b7:ed:
d8:d0:fb:8b:c8:20:9e:bf:4b:39:e7:ac:2f:aa:be:35:18:c1:
a6:9c:17:dc:52:d5:11:35:96:c6:82:9e:df:c3:8e:cd:fe:07:
b4:2c:82:97:fe:de:38:2c:7c:40:68:07:8d:0a:de:58:0e:c3:
18:b7:f8:49:dc:da:fd:d7:fc:f2:36:d4:0a:1e:da:95:3a:52:
f3:1b:04:1d:7c:5f:86:3e:1e:04:60:b8:ee:10:b9:6c:1c:f8:
40:45:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:28 2025 by rpki-client