Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: Gp0ufQwLju4q/W+dMw2WipRJMBzhsPzD3wJ5qJsId2U=
Subject key identifier: 04:84:92:12:8C:01:8D:EE:AB:D6:69:B9:61:8A:E6:5D:BA:CB:10:96
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 0199FC58D1BE9DE18325D736EB1A8CB1F703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 152F
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: VnsIEzhd4UJd5pyA_Dc2-bnO2FM.roa (hash: VlwFB7fAgr+iiENhL1pQbq6AXoNzH1bEvRoJP9yVGBU=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: HNWrL0HhcpFWsdEJewXHXKz5as0by5NZ2vdwlSY2LT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d1:be:9d:e1:83:25:d7:36:eb:1a:8c:b1:f7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=048492128c018deeabd669b9618ae65dbacb1096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:0f:85:bc:fb:80:99:0c:66:a2:c1:64:55:
05:67:66:7d:c1:ef:c9:e5:63:62:2d:c5:8d:73:0e:
c6:5c:b2:d4:5e:9a:31:a0:c8:0e:d3:f0:0c:35:51:
a2:ef:3d:78:42:e9:b1:7a:93:61:75:94:56:ea:31:
e4:1c:1c:bf:2a:25:15:b9:a6:6e:5b:bd:10:b9:e1:
e2:c1:b5:f2:cd:2b:18:0d:13:96:61:73:41:06:12:
32:1d:6e:ad:76:22:22:f8:42:bd:4a:0a:a8:3b:70:
f4:42:54:34:3d:95:a1:0e:4e:0e:74:28:49:96:60:
49:94:4e:9a:25:de:c0:a1:bb:e4:a2:ae:e9:48:1c:
04:74:0b:d5:f5:85:48:be:05:cc:4b:6e:18:c3:17:
c2:8a:6c:bb:3f:8e:e9:2c:07:1c:9e:75:c9:21:23:
4d:a8:9b:8b:5a:ec:63:1f:c0:9b:d0:6b:a2:01:cd:
66:bc:ef:4b:01:cb:f1:09:17:bc:b4:bc:12:b7:88:
65:74:15:81:c1:fb:70:d7:bf:82:27:bc:89:ed:ee:
f9:1c:cb:54:a8:05:bf:af:0c:92:60:77:ee:07:8e:
0a:10:95:9e:45:1e:a4:25:b0:5e:2a:83:3d:55:70:
30:39:85:c3:84:7b:8b:a2:1e:56:15:f4:7c:7f:c0:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:84:92:12:8C:01:8D:EE:AB:D6:69:B9:61:8A:E6:5D:BA:CB:10:96
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:76:4d:8e:b8:8b:d5:50:dd:18:16:04:e5:c8:de:1a:04:dd:
89:69:cb:9e:75:64:cb:9b:fc:ea:0e:aa:48:94:28:8f:9d:bb:
76:16:9c:dc:87:47:86:b0:f7:a4:1e:81:2b:30:64:8f:7e:e9:
d0:b7:f0:3b:2b:57:5c:f3:e4:ce:af:25:b2:9b:db:d6:f0:aa:
02:52:8d:92:08:d6:7a:ef:d6:15:2d:28:49:ef:fb:04:f0:1b:
54:7d:0c:4a:a2:39:2a:9d:1c:c9:13:17:4a:e3:bb:54:3f:c6:
34:a0:5d:d2:0a:91:05:56:d8:4a:14:3b:63:17:bc:63:2f:69:
4e:2a:e7:59:6a:ef:f2:76:5f:31:81:21:23:ed:4d:e1:02:b2:
72:97:64:ba:14:31:58:f7:03:75:d8:9a:a4:66:05:1a:66:65:
a8:fe:69:7d:7e:e9:15:09:b5:56:2f:51:cc:e5:64:45:de:a5:
69:34:8c:86:d0:67:c7:62:c8:13:67:29:43:75:a0:3b:ed:2d:
8b:7d:aa:37:92:f4:8d:97:a2:42:0c:64:d0:78:c3:f9:7e:91:
be:21:1c:4e:75:e1:b4:af:76:34:4e:d1:0c:b6:af:76:cf:2c:
e5:33:98:bb:4b:1d:07:c6:1b:75:ba:f2:e5:68:9b:5d:9c:f2:
f0:a2:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:47 2025 by rpki-client