Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
File: xm1Fok0ceFg5_sq74bRzG8JBd5A.mft (raw, json)
Hash identifier: TRFkzR/r3Asdr45BHeW0HfFzxQXJG8WB34eAzA0xBGA=
Subject key identifier: 72:12:4D:4F:01:9C:3B:36:09:77:5A:E0:83:72:E6:D1:E7:D6:73:B3
Authority key identifier: C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
Certificate issuer: /CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Certificate serial: 019A4F2AFF7942A69CF27ECEAD9854A13E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
Manifest number: 078E
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: 1RxiuQQEE3hYvCnKLXbQqvZScn4.roa (hash: Fco0LOIT6Jp6IN6bV0QpMxndj/V7V5a5vCdUbYOcT+0=)
2: xm1Fok0ceFg5_sq74bRzG8JBd5A.crl (hash: yIa9yKjCy1GGU6J67miA7g9W0zOoBlY7z2ffPa4HBWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:ff:79:42:a6:9c:f2:7e:ce:ad:98:54:a1:3e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d45a24d1c785839fecabbe1b4731bc2417790
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=72124d4f019c3b3609775ae08372e6d1e7d673b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f0:85:fc:af:2e:d8:7f:06:f9:0f:eb:63:33:
c7:25:28:e9:90:d7:af:4b:1e:9d:e2:62:23:de:8e:
f6:b2:06:08:f1:75:fa:20:3c:46:bd:0d:0c:85:e5:
e3:53:e5:87:be:f5:0b:02:f7:5b:d8:d9:0c:3f:d3:
a0:ad:c3:da:3f:63:cf:a4:c6:44:7e:b7:5a:f1:8f:
50:63:fa:76:c6:2a:03:88:a7:ca:b0:72:85:52:56:
30:8f:a4:a2:30:55:9d:5f:fa:64:e8:15:5b:45:dd:
07:71:ff:8a:27:5c:73:40:4b:53:eb:44:3d:ed:19:
5d:24:39:a2:93:1c:ed:a5:53:25:61:04:82:7e:a4:
c2:8d:f1:c6:3d:b9:96:d2:bf:ab:cc:c5:08:01:ee:
6a:80:ac:24:93:f0:45:18:c4:91:20:0a:81:90:db:
77:77:e0:8b:92:63:b3:10:c0:68:5e:34:cf:52:9f:
e0:7f:7e:2b:75:7c:f6:b9:c2:b6:10:26:1f:3f:34:
1f:35:25:3e:57:bd:37:96:f6:f2:2d:78:97:e0:6f:
2f:47:09:7b:ac:b8:07:f4:c1:70:fb:48:20:0e:63:
51:64:a7:d8:dc:f2:c8:f9:be:89:3d:f4:72:d6:d2:
b3:6d:6d:e7:c3:bd:d9:5d:a5:e9:4e:e6:1e:17:49:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:4D:4F:01:9C:3B:36:09:77:5A:E0:83:72:E6:D1:E7:D6:73:B3
X509v3 Authority Key Identifier:
keyid:C6:6D:45:A2:4D:1C:78:58:39:FE:CA:BB:E1:B4:73:1B:C2:41:77:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm1Fok0ceFg5_sq74bRzG8JBd5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50fa7b-7561-47bb-b455-16d1f208f35d/1/xm1Fok0ceFg5_sq74bRzG8JBd5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:df:1d:a5:80:30:7d:39:6e:52:52:1d:bc:2a:b4:b8:b5:0f:
51:63:29:b4:07:20:5f:72:59:15:62:02:3b:78:0d:a0:94:e4:
a5:a7:59:ce:6e:b0:98:a4:ff:3b:a9:73:6d:67:ed:6b:e3:13:
ff:3a:cb:d6:3c:28:f4:d5:1d:8b:1e:ab:09:7b:fb:8a:3b:aa:
32:ce:c1:06:b8:ae:b3:3a:31:45:63:4b:42:8f:72:77:97:4b:
84:9f:2d:db:a5:1a:62:07:76:e1:47:25:76:a4:dd:4d:27:2f:
4f:af:93:cf:f3:fe:cd:62:a3:c9:99:85:4d:ca:be:56:5d:48:
d3:2e:09:e7:78:91:eb:60:a3:a9:b2:c0:dc:d2:5b:a7:7e:6f:
26:09:96:9f:3f:e1:a2:19:d1:f0:9b:23:9b:eb:04:05:a5:b0:
ba:fa:41:c6:ae:71:fe:bc:85:f2:52:a4:28:43:7e:9e:1c:12:
d2:ad:5b:a6:40:96:5f:cc:e2:96:7d:12:5e:42:3c:92:1c:8b:
c7:2d:56:30:6c:e1:66:56:f2:04:18:4a:b7:9f:51:61:69:67:
5e:23:dc:bc:63:c2:d8:ef:4f:0d:ff:eb:62:ea:02:df:47:fd:
19:91:17:ef:9f:a6:b7:7e:25:13:dc:5e:76:fc:f1:46:43:73:
c9:34:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:59 2025 by rpki-client