Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: 0JK/4VKJQhdR1VOLxp4Bfp8Ee4z9geNTFptXQdGOqLo=
Subject key identifier: E7:DF:7C:AE:27:C9:65:AB:10:FB:09:4E:B0:11:50:B4:81:8D:21:39
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 019A4C97FD94DC6CF5EFDC055BC8A8C5CA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 031F
Signing time: Tue 04 Nov 2025 02:00:20 +0000
Manifest this update: Tue 04 Nov 2025 02:00:20 +0000
Manifest next update: Wed 05 Nov 2025 02:00:20 +0000
Files and hashes: 1: duv4en-kEZVnVXOXNGPZW_Jyrcw.roa (hash: /NQGSNT25LxwGXN6iIBj1hB3qklD/ePBBcZOp63AVyY=)
2: vCCb_HMH6KGFfsqbXQ0TIng1tfU.roa (hash: Twx8fVXaunI4+UsiQLUlLfwUCYQ1G7itZPYouG+NOxY=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: kZyvXUslvQtDx7uTHZUBOmnl9eKznLxl9gY3GNNfTyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:fd:94:dc:6c:f5:ef:dc:05:5b:c8:a8:c5:ca:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Nov 4 02:00:20 2025 GMT
Not After : Nov 5 02:00:20 2025 GMT
Subject: CN=e7df7cae27c965ab10fb094eb01150b4818d2139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:63:43:02:61:22:a5:f9:24:d7:f3:cd:3d:
f3:51:6d:a5:9b:35:28:bd:7e:39:e8:4a:2d:04:fd:
a4:4c:4c:a4:7b:10:dd:d6:23:24:29:b0:3f:88:6f:
f2:f1:73:14:96:4b:62:a5:c8:13:db:5c:bc:c5:8d:
d9:38:ce:a8:98:5a:0b:80:50:8a:47:4a:91:f9:56:
c6:1e:76:89:da:5e:b3:2c:93:7e:97:1d:29:48:bd:
c0:a1:1f:c0:df:ad:00:f4:11:b5:32:aa:fd:31:e0:
48:fd:7d:28:4b:7d:01:f5:c1:a7:51:8c:f7:24:1e:
df:d5:79:dd:c9:53:39:c5:f4:56:73:35:17:55:f7:
b9:a0:01:8d:d2:35:9f:a0:55:52:63:ce:b0:01:f0:
66:24:d4:94:98:87:31:f9:a9:62:cf:d8:a5:96:d4:
98:41:62:ba:2c:a3:d5:54:4a:25:4d:3b:af:7a:ab:
a3:2e:af:98:e9:fb:2e:96:19:1c:f8:20:06:21:62:
7b:80:68:01:8d:de:99:ef:7f:70:fe:d1:f4:6d:49:
03:62:c1:18:3e:bd:49:c3:6c:a7:53:7a:9a:3c:10:
3c:f2:9d:ab:ab:3f:8c:10:f7:5d:c9:86:ef:8a:a9:
54:d8:35:11:fb:78:13:ef:18:ce:1c:8d:6b:43:cd:
22:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:7C:AE:27:C9:65:AB:10:FB:09:4E:B0:11:50:B4:81:8D:21:39
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ee:ea:fe:59:2a:e4:21:e1:d4:c3:c5:be:f3:dd:cc:5c:2b:
d5:69:e4:0f:49:8a:65:7d:7f:34:49:57:4c:fa:5c:34:8b:7a:
72:1c:3a:f1:b5:de:d1:4f:51:50:a3:1b:d4:39:2b:22:81:81:
8b:b6:74:49:f0:ba:98:4d:37:0f:84:85:3c:6e:56:a1:db:0b:
26:36:a2:24:61:52:f1:78:6e:fb:58:d6:c6:bf:bd:ed:a5:56:
95:ed:59:93:c5:d0:f7:2b:3d:3d:51:fc:f4:e6:19:27:22:88:
3d:b3:d0:b0:6e:d2:4c:62:9b:0a:c8:a4:5f:6d:40:e6:f4:fb:
e1:99:b7:c8:f2:0e:47:e4:cd:60:79:86:64:ea:ff:af:9a:74:
4f:aa:13:a5:f1:a2:cd:42:a9:bd:87:88:ba:ea:43:57:18:72:
c0:9a:37:5d:9c:74:51:0c:03:d4:bf:3e:fd:6d:58:a1:1a:64:
82:2b:88:c4:4a:28:95:79:ab:b0:4d:7c:18:b1:c5:ed:8b:08:
ba:11:fd:4a:09:08:fa:a8:09:48:a0:26:9c:09:08:83:db:2f:
9e:5b:c1:e6:ba:3e:1b:89:28:ed:84:07:63:8d:a8:9d:42:54:
06:24:d8:5e:53:65:fe:d0:99:4c:a3:81:da:38:e5:7e:a7:a1:
bd:90:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:35 2025 by rpki-client