Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: Nmh6G26SiCf5eWDc1jL1+8HhdoxsbYS0A457XAv3j/I=
Subject key identifier: F2:06:20:78:97:31:88:13:74:F6:B8:07:7C:4D:DF:AD:7D:33:4A:8F
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 0199FC8F24AA41B8A93A7968296F7ECEC04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 04FB
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: UlvmKmOb7LR5bqI+NGyHVrFmpWOp1eeSBltFwBUXMD0=)
2: ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (hash: LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:24:aa:41:b8:a9:3a:79:68:29:6f:7e:ce:c0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=f20620789731881374f6b8077c4ddfad7d334a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:e7:19:e8:0d:00:3d:88:f3:e6:44:4b:6a:
f8:83:92:38:6f:ca:a1:de:4e:c8:a4:07:be:a4:ab:
82:f8:45:59:d8:02:a7:7e:ff:b1:cc:e8:c3:2e:0e:
78:33:47:aa:6b:2b:0b:98:e6:fb:88:22:f8:0c:83:
a8:0a:6b:24:c9:f1:94:d8:d3:ba:af:8a:73:9b:b0:
18:d3:e2:fc:c2:73:28:5d:ed:2f:c2:5c:2c:8b:0f:
ba:7f:61:e1:c4:d8:ab:15:4d:72:c9:db:3d:64:08:
b8:c4:0b:bf:47:3d:ca:b8:30:f6:f0:2a:3b:83:ae:
07:4e:5a:8e:fb:f1:d6:7f:bb:52:28:41:35:37:81:
66:f5:13:03:3e:f8:c7:29:5e:d4:99:9c:b5:64:e4:
7c:ad:3e:f0:43:89:f8:7e:9d:8d:f3:8e:41:5c:46:
8b:c3:d2:6f:b3:46:10:17:44:c5:17:04:f8:9f:6a:
87:fc:d3:0c:20:02:c7:0a:aa:82:e5:a7:42:3a:1e:
ed:58:74:1c:07:02:7c:5b:1f:0b:18:31:49:ae:e7:
7e:16:a5:5c:f4:bd:a8:00:eb:58:36:a3:ef:46:cf:
45:4f:26:3c:38:76:aa:6a:87:1d:21:05:bd:d6:8c:
8e:41:e8:54:ce:7b:11:38:87:75:17:a4:85:2d:9c:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:06:20:78:97:31:88:13:74:F6:B8:07:7C:4D:DF:AD:7D:33:4A:8F
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:00:96:37:11:2b:1e:53:48:1b:30:a0:ca:3e:7b:b9:0f:55:
ac:e2:26:23:57:df:3d:8b:79:90:5c:55:59:b0:a6:0c:f8:b4:
32:85:da:f9:f2:5d:eb:7b:c8:2a:72:55:81:f3:3c:bc:4e:bd:
5d:c0:7f:55:8e:d1:fc:8d:43:8f:2b:89:a2:79:80:3d:64:56:
1b:07:e3:59:e7:12:f8:a8:67:0d:a9:e5:20:73:c0:53:59:6c:
ef:2a:35:0f:eb:a3:29:24:d7:14:3a:b6:f5:54:88:c6:e1:1a:
92:d2:1e:10:76:14:f2:d9:68:99:db:5e:88:c3:3b:0d:48:af:
37:64:4e:65:d9:33:61:e8:e2:cf:e1:16:2e:40:0a:60:e5:db:
53:e9:9d:6e:a9:b4:a0:c5:b1:cf:dd:61:27:3c:c5:ff:a7:9c:
3f:a9:90:07:fc:4e:5b:27:0d:eb:e2:0e:44:20:eb:14:2b:fb:
5f:98:62:7b:53:3c:8a:e4:50:77:b1:f3:3d:a5:5d:db:87:f7:
3b:b1:6b:57:1a:8f:da:71:1a:f0:6e:b3:df:cc:36:22:66:f0:
12:f4:1c:19:33:d9:81:2c:67:2b:3c:08:43:78:fc:76:ea:27:
b0:87:8a:14:00:cd:df:ff:93:51:45:e9:d3:49:d9:b5:5e:f0:
71:b3:ac:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:17 2025 by rpki-client