Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: SGZVkblqDUh5ye/hbLM440GTfv6gUeUekAjrhlY6BKA=
Subject key identifier: AB:DE:1D:A5:23:B0:21:9C:A0:76:53:E3:A3:F9:76:E1:90:9D:BF:4E
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019A5074B2BAA18C5FBC2CEF555E27F92B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0428
Signing time: Tue 04 Nov 2025 20:00:16 +0000
Manifest this update: Tue 04 Nov 2025 20:00:16 +0000
Manifest next update: Wed 05 Nov 2025 20:00:16 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: Tisj7f1JfHy/F3e9Jj9wu/S4jnw2kZmxWELWYeRVbBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b2:ba:a1:8c:5f:bc:2c:ef:55:5e:27:f9:2b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Nov 4 20:00:16 2025 GMT
Not After : Nov 5 20:00:16 2025 GMT
Subject: CN=abde1da523b0219ca07653e3a3f976e1909dbf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:25:0a:24:4f:27:b6:57:f3:72:5a:85:5a:
cd:6d:01:eb:f6:78:59:f6:88:c9:d8:29:0a:c2:a1:
e8:a2:c6:9a:47:88:dd:80:02:e0:ec:5d:55:fb:bc:
62:86:b6:ef:01:05:cc:eb:3c:57:2d:8c:d9:d4:c7:
dc:a3:b0:25:10:66:27:6b:10:16:1b:6d:e7:79:88:
0f:cc:ab:d8:98:ba:50:14:bb:b6:9a:64:df:e7:e0:
09:05:26:b9:f5:c6:68:69:b0:ef:b4:09:12:e2:a3:
ab:9c:72:b2:49:7a:08:6a:52:75:af:3a:a9:bf:2f:
4c:3a:28:78:91:92:4f:cc:d3:87:0e:27:84:78:94:
59:0e:7f:9d:bf:d9:d6:aa:18:50:f7:4b:ed:a6:2f:
ca:91:ab:3d:ad:3e:3e:f8:94:df:46:d6:51:6c:ce:
14:c1:5e:c6:b7:6c:7f:76:b0:af:1c:af:3a:95:14:
5e:58:c4:d2:8a:50:b6:7f:c3:04:b7:37:f0:60:c5:
d5:11:da:07:66:3e:7f:0a:c4:33:16:c3:d5:dc:2e:
51:1c:a0:4d:ea:be:3c:d8:46:ba:5c:ed:f9:f4:bf:
fc:bf:4d:ea:7b:bd:d9:be:94:8e:f5:17:30:d2:91:
92:18:c0:21:72:30:ec:0d:43:66:2b:1e:28:5e:9d:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DE:1D:A5:23:B0:21:9C:A0:76:53:E3:A3:F9:76:E1:90:9D:BF:4E
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1b:c2:b6:74:6b:9e:03:0a:10:99:bb:d7:a2:a2:8a:08:7e:
a8:3b:05:83:22:f3:42:e0:73:be:08:5d:b7:98:0e:19:40:84:
9d:bc:7f:50:b4:ab:a0:8c:8f:d0:4d:0f:3c:d8:a2:57:05:dc:
27:63:56:cc:7a:bf:e0:cc:76:7a:a3:8b:8e:9e:44:24:3d:c4:
85:3a:10:2a:13:d8:ed:64:32:fa:5f:6f:bb:92:e7:84:26:ac:
91:33:0f:7a:dd:ef:7c:52:0e:2c:c5:23:2d:68:b8:b2:7e:f5:
8b:f2:26:f1:70:a6:4c:41:b8:aa:63:af:d0:1b:ca:f4:87:c1:
5f:28:96:06:d8:79:f2:df:f8:d7:36:bd:fc:91:37:43:2f:6c:
a2:d2:30:7c:bf:b4:25:28:22:5b:2d:8b:09:cf:6e:a6:74:61:
5b:15:08:fb:40:51:72:8e:41:31:3a:ca:c8:20:29:97:32:4d:
6c:97:ea:12:42:3b:15:48:29:a0:50:10:19:50:73:f5:39:38:
17:34:4a:5c:ff:30:2d:53:6d:37:6f:28:c7:3a:fc:9a:67:ec:
c0:4e:fc:2d:ad:f8:64:47:23:66:d6:5e:06:ad:ca:46:12:c6:
a2:2d:01:5c:b8:3c:26:04:4c:45:ed:b4:cd:67:c7:e4:ec:dc:
36:d0:64:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:17 2025 by rpki-client