Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: cG9jwvwY5yzycAGoBih8HdioObElxCgwebI5OZDic10=
Subject key identifier: CA:7D:93:93:4A:92:E1:1B:9D:FC:99:67:DA:FA:FE:73:A9:77:3E:C1
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 0199FCC64B9ACDBEF1B5CEE15C94A92A42E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 1191
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: tMmFTb7ELCS7aT4faJoiFS+q3W6+Owfr4hfuOkwwaQg=)
2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4b:9a:cd:be:f1:b5:ce:e1:5c:94:a9:2a:42:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=ca7d93934a92e11b9dfc9967dafafe73a9773ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:5a:d9:72:0e:c9:fe:28:2c:b7:fa:00:66:
f2:b0:15:a8:7e:42:5a:39:00:c8:b8:cc:b8:07:a0:
d9:f3:21:4f:53:46:3c:9e:c2:2e:1f:50:0a:2a:c0:
ac:03:a5:91:1b:60:a8:ee:67:36:00:da:3d:ee:0b:
27:d1:48:a5:8a:26:0a:85:41:9a:0d:bc:f8:6d:fe:
ff:97:5d:52:13:f7:44:a6:a8:bd:4a:02:e2:ff:85:
ac:40:78:6b:0e:6d:8d:a8:fb:48:4a:9e:e5:97:bc:
c2:31:a2:bf:8e:e5:fc:52:e5:de:97:e1:68:e0:0a:
f0:51:9d:bb:73:69:33:b7:f8:a3:f9:e6:ab:30:7f:
e6:08:bc:cd:17:c5:a0:7b:73:33:fb:d2:36:87:27:
77:a0:e2:cc:5e:6a:40:a5:f9:ae:32:aa:50:de:e1:
68:da:0b:da:11:93:cf:8e:1e:04:8f:db:e7:1b:a1:
b2:a0:0a:e8:0f:cf:3d:ec:3b:f0:95:01:ec:b3:cb:
eb:85:89:c5:34:2f:56:b2:23:98:5f:31:c7:7e:86:
a5:a6:23:21:8e:2f:29:6c:c5:75:48:ec:fa:2f:89:
48:07:b0:7c:19:e5:da:74:3d:96:8e:42:3e:65:b8:
57:4c:6a:b8:a8:2d:db:68:23:51:1c:d4:a3:0f:65:
79:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7D:93:93:4A:92:E1:1B:9D:FC:99:67:DA:FA:FE:73:A9:77:3E:C1
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7e:47:41:cc:18:d9:49:de:65:38:29:80:ce:03:88:75:dd:
ad:de:57:a9:ca:4f:d7:39:8e:c9:98:54:66:dc:ee:f4:94:b2:
83:68:68:3d:53:39:4d:9b:f7:70:6b:21:2f:52:9b:01:8e:72:
3a:83:b8:2c:a8:55:63:ac:3b:3b:bb:9a:f0:57:8a:2a:4a:27:
3b:e2:84:17:56:43:e7:2e:7d:19:27:e2:99:d5:1f:89:4b:18:
ce:1d:86:14:c8:77:69:bf:21:1f:f8:07:13:86:cf:48:ee:58:
08:54:b1:1d:5d:1a:4f:55:d0:e5:fd:02:6c:70:e7:5f:08:1a:
59:c6:31:fc:0e:62:c5:19:75:f4:53:94:1c:31:93:70:aa:6a:
f1:75:86:c5:54:a2:c4:8a:00:40:d5:ae:6b:ae:eb:48:95:d7:
bf:a4:26:2e:71:dc:bf:84:5a:dc:6d:0f:0c:61:f4:3c:de:d2:
93:b9:08:19:da:9e:1d:b0:db:9b:84:c2:58:e8:30:91:da:20:
82:fc:b5:9f:89:7f:db:70:9a:e6:df:25:cc:33:3f:8a:da:e2:
ec:09:57:75:69:7b:cc:33:85:9e:da:71:b7:d5:f7:0f:28:c0:
7b:a7:ed:ff:4f:cc:2f:c6:04:26:5f:99:0d:b7:93:6a:28:54:
59:39:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:16 2025 by rpki-client