Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: acVSp+FzUm+nqcYlbzmBX6ZA5zZRQHlyfCRbgPc5a3U=
Subject key identifier: 11:B1:31:E1:42:52:6D:79:03:F1:62:CD:D1:AE:06:C8:57:1C:BE:55
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 0199FD6B365FA9FFFBCB815C13C07A7FFCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 1008
Signing time: Sun 19 Oct 2025 17:01:25 +0000
Manifest this update: Sun 19 Oct 2025 17:01:25 +0000
Manifest next update: Mon 20 Oct 2025 17:01:25 +0000
Files and hashes: 1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: YLn1A7NXfUv8+9AlTGuQX0qpetrtLgYipJ4Uy6Mdk9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:36:5f:a9:ff:fb:cb:81:5c:13:c0:7a:7f:fc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Oct 19 17:01:25 2025 GMT
Not After : Oct 20 17:01:25 2025 GMT
Subject: CN=11b131e142526d7903f162cdd1ae06c8571cbe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:8d:e5:b5:b9:a7:c3:7d:6f:2a:89:c9:15:
d5:cb:b0:9c:62:1d:54:7e:df:48:80:7d:74:13:b8:
1d:bd:f4:f4:a9:38:bd:80:54:d5:7f:a3:c7:3c:17:
1e:92:87:20:fe:2b:28:44:e0:2b:e0:cb:2d:da:31:
0e:cb:5d:9f:37:e9:66:9e:74:65:52:8e:bb:00:3f:
3e:4c:f7:74:e1:20:16:47:ff:13:d2:59:06:12:9e:
01:8a:4a:2e:ba:83:63:af:6c:f6:37:fa:97:dd:64:
f7:89:a2:f9:fd:a3:59:f3:85:e2:22:5d:06:e5:d2:
b4:29:d3:e6:9e:f0:38:ec:d2:4f:ab:b4:5b:52:42:
fd:00:71:7e:4a:86:7a:c2:bc:de:40:da:f5:58:9e:
4a:ff:3a:dc:95:85:b6:83:92:a0:b1:ae:7f:f6:20:
d5:b7:5f:42:8b:d3:c6:ea:1a:ee:61:53:9d:4f:ad:
bd:04:22:18:b7:2a:67:87:8d:08:af:0a:d3:0a:56:
5b:ec:9f:30:4a:d3:27:48:91:53:1b:2e:8b:7e:3a:
18:92:e8:ed:13:49:42:9b:23:84:e7:41:e0:17:bc:
05:74:16:3c:0d:d0:75:85:ac:b2:5c:8f:20:f2:b4:
ab:52:f0:87:67:b0:e1:0d:ce:0b:d0:2e:e3:dd:84:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B1:31:E1:42:52:6D:79:03:F1:62:CD:D1:AE:06:C8:57:1C:BE:55
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d3:b4:87:7e:79:5f:82:8f:b4:e6:a6:39:76:5d:72:83:54:
2a:ae:68:38:cc:0e:cd:c5:42:57:e3:09:3e:09:94:6a:a2:43:
26:41:37:a3:2d:ef:1c:fe:d5:e1:be:ef:27:a1:6c:cf:94:bb:
13:2c:7d:79:9c:11:fb:1a:40:34:d5:e8:e1:e3:09:0c:af:3b:
e1:b6:0e:5a:98:59:57:d7:25:ce:7f:57:b0:57:a3:ac:e7:6c:
ec:71:8b:39:43:65:64:48:f1:c5:9a:fc:0c:80:cc:5c:f0:95:
b3:25:55:6d:c2:37:12:fc:ba:d0:5c:f9:04:06:37:e5:ad:8c:
ff:9e:9e:cf:46:49:e7:db:9a:bb:6c:82:08:ab:83:ab:31:64:
a9:c8:44:82:70:a7:c8:ad:f7:0f:91:dc:d9:a0:f2:2d:26:38:
78:09:d1:33:60:ac:ac:1f:1d:da:34:75:65:39:56:86:8f:02:
a1:7a:6f:84:91:c1:d4:9a:f0:ae:73:22:56:c0:6a:cd:07:72:
92:0b:c6:d3:7e:ec:31:94:da:37:53:6a:b7:a5:3a:97:db:b9:
8d:c5:d7:26:b5:ef:d0:83:2d:92:af:4f:fa:d1:a0:78:d3:a4:
bf:b2:57:a4:e7:f2:64:87:c5:2d:30:25:cb:22:86:8b:f6:88:
6d:14:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:02 2025 by rpki-client