Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json)
Hash identifier: 1TBxShC9TR5Kw9d5KmmPhThSJU2eKbThI8cUBLgYeTk=
Subject key identifier: 63:00:F8:98:6C:A2:40:F3:C4:06:38:9F:6A:57:D7:E9:66:86:11:FB
Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Certificate serial: 0199FF22E178A020891A90A84690E69C3C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
Manifest number: 0A12
Signing time: Mon 20 Oct 2025 01:01:39 +0000
Manifest this update: Mon 20 Oct 2025 01:01:39 +0000
Manifest next update: Tue 21 Oct 2025 01:01:39 +0000
Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=)
2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: nQ+PuGbjlCLADMfmQotVX6OmYdukkbL1G8FmsMlN8YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e1:78:a0:20:89:1a:90:a8:46:90:e6:9c:3c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48
Validity
Not Before: Oct 20 01:01:39 2025 GMT
Not After : Oct 21 01:01:39 2025 GMT
Subject: CN=6300f8986ca240f3c406389f6a57d7e9668611fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:7b:84:c7:55:1e:08:7c:be:b3:88:aa:a2:
ae:19:8b:44:69:bb:61:ab:3c:0c:0a:6e:ce:b2:c9:
b3:a7:07:f8:4d:5e:17:0e:b0:f3:31:b6:ad:92:dc:
b9:1e:56:9e:a4:2a:80:e9:f7:18:ab:5a:49:f6:cf:
b5:e5:7d:67:b4:70:34:8c:5d:4b:a0:a7:cd:18:6a:
3e:20:e3:20:89:ee:a3:da:85:4a:41:25:07:54:d3:
8c:e1:a0:7a:60:38:ae:33:fc:e9:5b:e0:2e:cb:ab:
73:33:5c:61:ad:0e:fa:47:e6:96:c1:4d:86:c5:6e:
8c:aa:32:10:e2:69:4d:69:99:a2:bb:06:4c:bb:b5:
8e:ba:d0:f6:34:68:b2:b5:d0:ce:d8:49:da:42:32:
d5:31:e5:12:9e:29:87:9c:60:fa:70:35:73:c8:f1:
2b:dd:9f:11:71:eb:11:03:28:26:bb:95:97:b3:17:
5c:b5:0b:6f:0f:c0:19:91:f6:4b:ee:38:cc:a5:cc:
ff:60:6a:1a:14:18:3b:02:23:34:4b:48:8d:d4:91:
41:3a:c9:e3:fb:e9:66:b7:00:66:74:36:8e:20:ff:
25:dc:87:93:32:52:5f:9d:a8:b8:66:24:13:5d:c0:
85:1c:ee:16:8a:0c:7c:b9:cf:77:f9:94:18:78:74:
b3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:F8:98:6C:A2:40:F3:C4:06:38:9F:6A:57:D7:E9:66:86:11:FB
X509v3 Authority Key Identifier:
keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a4:5b:28:e3:e3:25:f1:e2:8e:fa:2a:d1:b8:3c:d5:e7:8c:
ef:63:a2:82:30:55:fc:af:f6:1b:dc:55:9b:95:a8:66:f7:13:
6a:00:1f:c3:48:ea:10:02:6c:02:b5:ef:52:dc:8e:94:21:a8:
b2:6d:ba:61:b1:ce:f3:7b:a2:d8:5b:b6:1c:28:9d:20:b2:4d:
c2:29:14:42:97:fd:65:f1:5e:bf:d6:3a:94:3d:d9:81:40:00:
47:ef:ad:01:68:3a:ef:ba:14:ad:0f:42:2d:83:bd:db:78:5d:
1d:73:f8:43:67:f3:d2:42:b8:d9:d5:97:2b:54:a4:39:1c:62:
f3:82:a8:af:44:f7:9f:b8:1a:8b:fc:69:b1:37:ed:f1:f2:d5:
53:42:4d:3c:d3:eb:6f:92:23:a1:17:40:68:1b:6a:64:fd:df:
83:db:44:46:f6:2d:d6:7d:54:af:7c:ed:da:df:a0:9e:74:86:
aa:b8:cb:58:09:a0:e2:0a:16:3d:74:26:5e:fd:fd:8d:0c:50:
43:67:31:ac:ed:bd:a6:f6:82:f2:cb:f0:42:a2:e5:0e:0b:47:
50:45:89:ac:24:42:b0:ff:48:62:46:87:e4:c1:22:ee:ed:c3:
39:40:3a:52:2e:fd:da:2a:76:a4:0f:25:d9:45:62:ac:4d:02:
a1:5d:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:44 2025 by rpki-client