Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File: xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier: 7i5PMX1k25SQdMo53kDZvgCKRSXj/n3AIQH+qBxvdew=
Subject key identifier: F8:91:72:57:E7:59:CA:0F:EC:4B:B1:1D:23:05:A2:9A:6A:7E:41:0C
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer: /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial: 019A4E86A677874FF48519443928D10C891F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 11:00:38 +0000
Manifest this update: Tue 04 Nov 2025 11:00:38 +0000
Manifest next update: Wed 05 Nov 2025 11:00:38 +0000
Files and hashes: 1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=)
3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: UdamZ4+bM35m9I+fUr509srni7e5L+8+G7pDKf9n2Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:a6:77:87:4f:f4:85:19:44:39:28:d1:0c:89:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Validity
Not Before: Nov 4 11:00:38 2025 GMT
Not After : Nov 5 11:00:38 2025 GMT
Subject: CN=f8917257e759ca0fec4bb11d2305a29a6a7e410c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:79:38:19:d6:7d:d3:2f:6a:d5:22:9b:0b:
40:2c:92:0b:a5:12:c4:52:ac:33:b6:56:4e:84:17:
8f:a4:57:2c:98:c8:43:ee:07:49:21:af:bd:8e:d7:
80:6a:80:b6:f7:44:2e:5c:ec:cd:9b:6e:6f:5e:66:
ba:3b:59:88:c3:2e:53:f8:a2:ad:98:34:39:2c:01:
0b:a6:a3:8e:0a:21:32:54:4d:74:47:31:0b:67:4d:
69:22:69:3f:03:db:e7:a9:8b:1a:4d:a9:db:dd:b8:
d4:ad:2c:65:d8:61:68:03:d9:56:08:60:7b:db:da:
5d:0b:0b:90:ac:32:51:5b:25:2a:03:c4:1c:5e:a1:
76:80:90:6d:30:ff:9a:95:a7:76:08:f5:db:09:a5:
55:23:f6:ef:5f:8b:16:2a:c5:51:b7:20:e3:60:d2:
05:24:14:5a:5f:fb:45:5b:08:02:87:b5:d6:2d:6f:
ca:b5:b4:ae:51:ec:7b:06:c7:ae:fe:91:c5:4b:fe:
e5:e9:77:95:78:a8:b4:f8:9b:db:f4:6e:83:41:a0:
9e:f6:85:60:d4:ba:9f:14:bf:86:b9:7b:16:17:3b:
72:c9:3a:42:f9:07:56:67:a3:8e:06:70:bb:a2:af:
e7:43:36:33:0a:1f:d1:c3:8a:0d:60:fe:47:bb:fe:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:91:72:57:E7:59:CA:0F:EC:4B:B1:1D:23:05:A2:9A:6A:7E:41:0C
X509v3 Authority Key Identifier:
keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2f:32:93:45:13:f1:4c:ef:3c:d7:92:18:b1:9f:80:60:2f:
47:f2:91:81:00:71:7f:44:b5:e9:b9:8c:90:5e:b7:43:56:06:
96:56:9d:e7:e6:47:96:95:29:67:29:3e:ae:46:d3:cd:e7:5b:
ae:ca:a0:55:36:19:1f:97:6a:a0:73:72:0f:4c:49:7d:7d:30:
e2:c8:af:b6:8e:17:73:cc:f4:e2:e1:04:b2:69:ed:4a:37:c9:
a6:4a:91:b4:df:97:21:d9:18:55:a7:ec:15:23:4d:0f:16:94:
56:45:ad:ea:23:55:21:b5:f5:10:f2:54:a0:45:0f:eb:c3:e4:
b6:4c:cf:bd:a7:65:09:ca:1b:12:a3:1e:35:c5:2e:5a:90:2b:
7e:62:fa:92:f1:8c:34:24:fe:ff:4c:cb:26:72:ce:d8:45:71:
12:d7:4a:b1:c5:f6:ff:9e:ab:eb:85:8c:ad:4c:ee:2c:7b:3b:
e8:43:ee:bd:5f:25:cd:1f:47:16:3f:0f:69:75:af:74:9b:3f:
b7:7d:dd:a0:c9:48:b2:08:64:06:93:d6:50:66:68:7c:77:7c:
21:24:72:53:92:76:88:86:be:78:dd:1b:8c:0e:ab:ba:af:bf:
ad:78:da:d9:77:57:b2:cb:7f:dd:67:28:4a:f3:e7:7c:7c:c3:
e6:06:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:20 2025 by rpki-client