Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: FAz0eDvIESweTVBnWzqHpdBtOMG9e9AzF6X9hskr6Yk=
Subject key identifier: 68:6F:64:AA:21:BF:82:5A:3E:4A:E9:91:7C:65:AE:FC:23:48:64:8B
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 019A50E30C853036F5E73B31233430CF8975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0C66
Signing time: Tue 04 Nov 2025 22:00:48 +0000
Manifest this update: Tue 04 Nov 2025 22:00:48 +0000
Manifest next update: Wed 05 Nov 2025 22:00:48 +0000
Files and hashes: 1: IPVqTow4BPog0VgWrmL6j3UlRyc.roa (hash: yHocQSt6Dh1L30jflXp+Oc+mQ08tmbAfLa5FFYWt/64=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: 0tm3KX+sSWhfqWIdWlNeGmM7ynQSgC+NHfb4aPfi8I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:0c:85:30:36:f5:e7:3b:31:23:34:30:cf:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Nov 4 22:00:48 2025 GMT
Not After : Nov 5 22:00:48 2025 GMT
Subject: CN=686f64aa21bf825a3e4ae9917c65aefc2348648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:32:6e:e5:00:59:a0:47:7f:4c:2b:ec:3c:
46:d9:87:ac:6a:78:95:88:3b:52:ab:d6:a8:68:ee:
f7:05:79:e0:e8:02:ff:11:43:25:6d:0d:81:bb:0d:
98:7b:4e:7a:fd:5f:e6:5f:d9:58:c9:af:f3:c6:3c:
68:4d:93:72:54:46:71:5c:5a:45:18:6e:05:6b:21:
03:5a:e2:1d:ce:f2:68:b1:f8:24:ee:ec:ba:4d:21:
6d:ad:d1:99:ba:74:7b:d7:38:02:32:f3:10:c3:c9:
01:e4:e5:12:30:4f:53:28:50:fe:91:b7:8a:f6:df:
71:4a:d6:d0:7e:ef:eb:be:7d:89:63:b9:72:f5:09:
8d:c4:e4:2e:4c:be:26:eb:f2:0f:75:8f:ed:73:19:
f0:d1:19:2b:00:6b:40:4c:f3:45:30:5f:e7:69:3b:
86:7f:b9:6f:ca:15:f6:31:c0:8e:c4:1a:e4:bf:4f:
d2:69:8d:cf:65:1e:fe:69:a7:9f:46:7c:81:35:a7:
fa:73:ce:14:21:de:92:7f:05:37:27:ab:0a:36:6c:
d9:50:44:37:3e:26:57:68:55:1e:17:5f:7c:c3:19:
cc:83:62:44:69:58:01:5f:65:55:f7:61:ab:63:04:
18:ed:2d:5d:11:9c:ef:ed:81:71:68:c3:93:5d:aa:
b5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6F:64:AA:21:BF:82:5A:3E:4A:E9:91:7C:65:AE:FC:23:48:64:8B
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e9:52:b4:e7:b9:66:cd:1f:68:c9:6f:48:b5:0e:69:3a:d9:
c3:c3:db:b3:77:21:b5:d8:f2:46:db:91:f6:08:60:3d:31:d8:
fe:9c:09:89:56:d9:1c:db:a0:07:3b:9b:6e:c9:09:15:9a:43:
ca:df:29:d9:b6:cc:6a:f1:d6:79:77:b2:f9:07:c6:70:a1:05:
c1:d3:95:91:ea:64:d5:71:91:fc:4a:d9:57:45:46:8d:03:c1:
d1:e0:62:ba:a7:c6:9b:7e:2f:48:5e:97:62:76:b8:40:25:12:
c9:7a:6c:16:ba:51:a6:4d:2e:11:90:9c:22:15:05:69:04:32:
3a:88:10:60:70:0e:eb:20:95:76:2d:41:5e:66:e2:ae:cb:af:
9e:35:a5:90:f8:31:a0:f4:e2:ee:49:92:aa:09:9f:ae:75:b0:
cc:f7:fb:bc:db:a6:95:3d:1b:4d:7a:73:e1:c4:ac:07:c1:db:
7d:38:ab:ff:ba:17:71:25:88:2c:3c:6c:e5:0d:29:34:38:90:
eb:8c:16:9f:e3:e6:8f:b5:b4:d7:62:37:fd:b3:d4:17:b7:5d:
3a:78:91:df:4b:06:58:66:b3:33:a7:2e:60:44:9d:23:3e:7e:
41:6a:25:d8:6e:74:fe:94:25:9b:ff:a6:18:d4:aa:f5:ae:44:
13:cc:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:31 2025 by rpki-client