Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: ciT3hYtF25VVtxUcHCyxt/iUW63Cn50qgBWrIRh5ZwU=
Subject key identifier: 9C:87:FE:84:E1:0C:4F:27:CA:29:D8:E8:AF:55:93:03:18:16:5E:B6
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 019A4F62B4AD6E851F45D817DB2E6BABEE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0805
Signing time: Tue 04 Nov 2025 15:01:00 +0000
Manifest this update: Tue 04 Nov 2025 15:01:00 +0000
Manifest next update: Wed 05 Nov 2025 15:01:00 +0000
Files and hashes: 1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: GuGa8Q6b/oyxIuLYiSbj+n9FBTiS4jynxE9oJ9rmm0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:b4:ad:6e:85:1f:45:d8:17:db:2e:6b:ab:ee:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Nov 4 15:01:00 2025 GMT
Not After : Nov 5 15:01:00 2025 GMT
Subject: CN=9c87fe84e10c4f27ca29d8e8af55930318165eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:69:a9:4d:c9:d5:3d:12:ac:49:3d:aa:98:
7e:c9:95:48:45:a8:42:bf:61:39:97:c5:05:09:16:
9f:dc:79:f1:89:e6:ff:c3:b1:0d:b0:27:ce:e1:8b:
25:b8:82:79:c3:55:02:97:0d:a9:3c:7c:94:5e:4a:
ab:ac:7f:18:2e:84:6b:a0:b1:5d:ce:b9:76:cc:3f:
ec:e4:39:d3:fc:bd:e3:87:7c:31:82:6e:8f:b0:1a:
2e:e9:4d:77:55:1a:8b:6d:5e:96:48:01:93:ce:f2:
65:3a:25:da:2a:5d:fc:9a:39:4e:e0:7d:72:d6:b4:
f9:85:34:b6:f8:f5:8c:5f:15:4c:a2:f5:df:e9:71:
e5:21:55:49:69:c4:0b:21:7a:d0:6d:e3:01:36:c0:
7f:64:94:eb:da:fe:c9:1b:6d:85:77:e8:b4:bb:19:
b1:03:3e:4f:12:f3:ef:f1:f3:c3:5b:e2:69:90:3b:
20:9c:8b:21:d6:4d:11:43:12:d1:2d:c6:47:f2:7e:
67:0c:ee:8d:da:d5:28:4e:43:90:26:cc:20:df:d9:
e3:b7:36:a4:e3:8f:0a:5c:67:12:db:43:dd:1c:76:
87:9b:78:ab:16:d6:7d:34:de:ed:07:ab:6b:7f:a2:
59:46:c3:73:d7:f4:a8:0e:66:54:35:7e:bd:d8:8c:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:FE:84:E1:0C:4F:27:CA:29:D8:E8:AF:55:93:03:18:16:5E:B6
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e9:09:2a:99:68:7f:9b:86:a4:26:c8:ed:fa:bf:07:96:ba:
08:f4:e7:98:f1:58:fe:6d:20:59:b6:54:ed:ff:53:98:f5:f1:
0e:c0:e6:65:a5:d5:1f:cb:48:20:65:52:53:a8:6e:59:b6:c5:
30:67:09:f1:87:0c:67:64:30:20:32:e6:5c:a4:79:80:ff:d9:
5f:bd:fb:73:1f:3f:1c:a9:03:81:b7:49:c0:3a:a4:1b:60:6e:
c4:04:34:1e:05:31:b8:84:70:a1:67:72:f1:cb:a7:80:f2:3c:
27:c3:74:24:3e:58:fe:85:5b:ca:db:5d:bd:c3:e6:fe:3f:d3:
1f:a1:f5:70:c2:52:64:6f:8b:ab:a2:38:aa:6e:cd:2c:bb:c0:
0c:0f:ae:7b:be:0b:39:27:5b:1c:2e:c6:56:3b:02:86:b4:fc:
b5:d3:9b:33:43:ec:2d:df:06:f6:4f:a2:12:d1:0b:c7:3b:8d:
ee:c7:8a:dd:2a:2f:ec:ee:f3:ec:d7:38:88:29:8c:6f:ea:e2:
ca:ef:ab:cd:40:1e:82:28:85:1e:60:f4:c2:b5:e9:d8:b9:e2:
50:3d:02:ab:a8:4a:6e:72:60:d7:ae:27:7a:24:b9:43:15:97:
99:2f:de:1b:23:65:a6:02:b9:47:69:4c:e2:ee:3d:43:e0:d1:
93:f0:00:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:07:49 2025 by rpki-client