Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
File: xPHyFPsizFNhKPXeSqAXqHiA8oU.mft (raw, json)
Hash identifier: rX8PoKpkCnSlTIh9ihHa4CGdQcpyDVlrjCKIB8oMMhE=
Subject key identifier: 10:AF:20:64:D6:14:C9:B0:35:8D:B8:BE:58:F6:FD:EC:88:3B:73:72
Authority key identifier: C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
Certificate issuer: /CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Certificate serial: 019A00A341C05EC3A455004F7C2DDF10A63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
Manifest number: 0850
Signing time: Mon 20 Oct 2025 08:01:30 +0000
Manifest this update: Mon 20 Oct 2025 08:01:30 +0000
Manifest next update: Tue 21 Oct 2025 08:01:30 +0000
Files and hashes: 1: NEtQy5f2240GFeET2QYMep1OUSw.roa (hash: MvgE972/GBhvnhbQmRaRf/7py1gPZlkr59j136VjyK4=)
2: xPHyFPsizFNhKPXeSqAXqHiA8oU.crl (hash: Y0f283lXZsb33l3MvkkvpuAAX01KCc/wl4f/He5VPS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:41:c0:5e:c3:a4:55:00:4f:7c:2d:df:10:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f1f214fb22cc536128f5de4aa017a87880f285
Validity
Not Before: Oct 20 08:01:30 2025 GMT
Not After : Oct 21 08:01:30 2025 GMT
Subject: CN=10af2064d614c9b0358db8be58f6fdec883b7372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:35:e9:5d:d2:6d:1c:f8:89:bd:72:84:db:a2:
8c:ba:2b:5e:76:35:8d:11:5e:d9:66:01:68:75:8a:
bd:2e:05:ef:cb:cc:87:60:09:cf:aa:9b:10:88:7a:
7e:19:94:a4:f7:ed:53:44:1f:05:e5:5d:1f:54:50:
01:17:18:96:87:be:29:6d:70:6a:06:12:8c:c9:6d:
06:2b:57:49:73:86:88:ee:3b:e9:ee:4f:1f:fb:03:
7a:2b:e7:94:a4:11:c9:aa:a5:d8:47:c4:c0:b7:ef:
77:2e:4a:29:9d:47:48:aa:f1:0a:f4:8a:22:93:dd:
f0:5d:3c:d4:fd:32:8c:2c:de:eb:7d:da:2a:79:65:
34:11:85:0c:92:9b:f7:05:84:8d:0c:55:43:6b:b3:
20:52:ef:1a:5f:6e:da:9c:31:56:7e:61:57:22:e9:
c5:2c:f4:2d:e3:21:ad:d9:f5:de:4d:9d:39:56:43:
93:bf:2b:b9:e5:91:c0:c1:6f:f3:a8:f8:af:87:7f:
64:10:97:90:c1:98:b4:77:25:0a:e2:7a:d9:3d:4c:
b4:91:08:34:30:31:3d:f1:6b:0b:b1:1c:da:1c:38:
4c:39:19:73:4e:5a:74:43:76:e8:a8:46:a1:85:61:
bf:4e:5c:a1:ed:17:a6:3b:ea:66:da:4f:b4:90:b5:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AF:20:64:D6:14:C9:B0:35:8D:B8:BE:58:F6:FD:EC:88:3B:73:72
X509v3 Authority Key Identifier:
keyid:C4:F1:F2:14:FB:22:CC:53:61:28:F5:DE:4A:A0:17:A8:78:80:F2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPHyFPsizFNhKPXeSqAXqHiA8oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e2b349-e796-4865-8040-ecf4f420c98a/1/xPHyFPsizFNhKPXeSqAXqHiA8oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f7:7e:d0:c3:e3:67:d3:ab:f4:a0:9b:a4:39:43:ff:d8:23:
f3:e7:1d:7b:f6:77:f9:92:cf:b7:6d:04:22:52:78:36:b3:49:
d1:c3:98:b0:b3:db:af:b2:c8:35:8c:0c:c3:ed:8a:b2:76:7e:
59:05:8c:4e:01:e0:47:d9:82:2b:6e:5d:89:a0:01:eb:11:68:
1f:41:2a:04:ff:10:91:ac:20:78:20:f0:c0:e4:32:0c:f1:0b:
8a:7d:69:08:a5:32:b2:1f:ea:57:c8:24:97:fa:2e:a4:f4:ef:
65:68:3b:e8:ae:f6:9c:75:6b:d7:a9:0e:28:e4:6d:97:f2:71:
a9:57:16:5a:b2:03:38:2b:e9:45:53:5e:4c:56:84:18:59:36:
d3:47:e4:c7:c4:49:f9:c6:bf:68:ba:b7:24:3e:9e:3d:de:82:
2f:20:46:da:0d:c1:36:cf:2e:ea:a4:a3:43:ac:3c:ef:84:50:
43:08:8a:27:19:c3:89:c4:d3:84:55:91:86:24:88:f5:d1:f9:
9d:00:a4:27:43:96:27:f9:02:3c:c7:7e:c8:ca:fa:4e:ec:62:
7c:2f:ab:6e:71:18:8e:e0:6e:49:23:cf:30:fd:03:4b:19:41:
cf:38:3b:00:49:ec:c5:69:63:c1:80:fb:7e:92:93:c2:3c:6b:
fe:e6:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:20 2025 by rpki-client