Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: onPE3FaqQ9cWldssINOxF5YuCsRNb4rgeZuSd3gAPb8=
Subject key identifier: BE:6A:9F:C5:18:C3:6F:2F:35:C2:E2:58:79:9C:4F:4C:15:97:1D:13
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 0199FDD8D566B540E5E7F941DFD85287E5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 02A8
Signing time: Sun 19 Oct 2025 19:01:09 +0000
Manifest this update: Sun 19 Oct 2025 19:01:09 +0000
Manifest next update: Mon 20 Oct 2025 19:01:09 +0000
Files and hashes: 1: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (hash: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: uZmqMxoMzB/4d2SEX6pz6D2OBFHWdSxGe/x1zFDFuQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d5:66:b5:40:e5:e7:f9:41:df:d8:52:87:e5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Oct 19 19:01:09 2025 GMT
Not After : Oct 20 19:01:09 2025 GMT
Subject: CN=be6a9fc518c36f2f35c2e258799c4f4c15971d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:98:a7:8a:01:d0:9f:13:4e:87:94:ee:86:
6c:66:61:da:93:58:c1:bc:0b:88:67:5e:69:c9:d4:
70:8d:ab:e7:60:7c:68:ea:de:ed:dc:99:49:72:55:
ed:2e:2d:2c:8c:73:63:5b:1f:86:79:7e:72:b4:8d:
9f:55:c9:a7:76:93:b7:82:6a:f0:9d:8f:91:32:b3:
63:8f:a5:5d:b6:c4:67:71:36:65:7b:7a:f2:a7:f8:
86:38:15:7f:43:dd:9d:9d:5a:bc:6a:29:4f:c5:8d:
05:f0:37:3b:51:e2:6f:38:68:b9:71:2f:fe:34:7b:
52:17:1c:42:1c:11:06:6a:d8:a3:44:cf:30:31:cb:
24:e1:7c:31:25:8e:47:a5:ce:46:b2:15:25:8c:cf:
a9:a0:e2:39:5d:9d:2a:48:3e:69:9b:15:e1:a5:f8:
6f:e2:c6:39:ad:82:b3:ae:c6:13:c3:cf:68:78:19:
d0:7b:d0:2c:23:cd:94:77:26:45:ce:35:7e:c0:3b:
1f:aa:70:d8:06:b6:29:a1:b8:fd:39:d4:09:fc:5f:
26:9f:8b:62:b7:12:6c:bf:f1:33:d2:5d:b3:76:85:
cc:97:71:ff:58:ba:b7:fb:25:3c:fe:dc:f6:44:6c:
86:7e:7e:38:06:e6:e3:2d:5f:f0:9a:9a:5b:fd:f7:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6A:9F:C5:18:C3:6F:2F:35:C2:E2:58:79:9C:4F:4C:15:97:1D:13
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:01:89:2e:31:57:d8:63:f2:ef:6e:7e:cb:91:0a:5f:43:62:
27:04:d3:c1:0c:14:42:e1:98:47:44:ec:10:d8:e7:ce:28:57:
82:be:aa:37:a6:78:c0:8b:f5:85:22:b1:d6:2e:f7:38:12:f3:
ad:88:95:94:fc:2b:2b:3b:97:cd:df:49:b4:1a:59:fc:bb:c5:
55:ff:9d:ca:06:29:79:2a:78:00:9d:af:76:44:ed:3d:0d:90:
24:8d:3b:15:66:df:c6:8f:da:e9:1b:92:6e:15:ab:1f:5e:8e:
cd:47:76:03:8c:c3:0f:fc:f6:21:bc:c9:7c:00:15:51:28:69:
d0:d9:da:f3:b8:e2:74:ba:3e:88:be:e0:cf:63:37:48:54:5d:
2b:9f:e7:ea:84:54:59:bf:97:1e:61:8f:3c:11:2b:f6:cc:7e:
be:96:1e:5a:3c:0e:d2:8f:02:cf:9a:48:3b:ff:3a:5a:d2:28:
6d:d3:99:f8:e8:92:e9:c5:91:95:53:6a:f0:c5:97:13:26:5a:
27:43:96:0d:67:08:28:de:c6:89:ed:5b:cf:64:3f:82:6c:b7:
9c:a5:35:66:15:86:7f:50:f1:22:27:b0:e8:a0:0b:ea:0b:e2:
a8:9d:bc:a4:cc:a2:c7:2c:cc:61:5f:a8:00:29:42:91:cb:27:
80:84:db:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:42 2025 by rpki-client