Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
File: xrxZ-PdUTx6lulwYs44lc1F8kTI.mft (raw, json)
Hash identifier: ZMzD/uQspc5NOjOt13+g1QkeAtLM0gfKHAezYlE05/M=
Subject key identifier: 7B:71:C7:55:9C:BA:5E:BB:42:FA:64:38:35:E4:D4:D0:19:0E:25:10
Authority key identifier: C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
Certificate issuer: /CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Certificate serial: 0199FC587FBA9358B4F530EBC94572274D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
Manifest number: 060B
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: kHiX8WHdFwuPFdrPXqiFRGBzUrk.roa (hash: otjzQBnh+aIeRc4Qh5LotaBSTmBU7xZUCsHLwTppJLQ=)
2: xrxZ-PdUTx6lulwYs44lc1F8kTI.crl (hash: LWEi+sf8frosNZz7NO8Y3glipzy+26jngQg7OQeWR5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7f:ba:93:58:b4:f5:30:eb:c9:45:72:27:4d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc59f8f7544f1ea5ba5c18b38e2573517c9132
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=7b71c7559cba5ebb42fa643835e4d4d0190e2510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:45:d9:cc:9c:12:23:c9:33:4d:60:3f:56:
0a:aa:0a:3e:76:e5:06:c9:32:6f:be:aa:64:81:59:
76:46:9a:17:cd:9f:21:60:58:4d:22:05:12:f0:0b:
6b:8f:18:87:7b:12:4b:f6:ae:d4:6c:46:1e:e7:87:
19:fb:4d:4c:8b:31:5a:02:2d:2e:8c:44:e2:4f:d3:
0c:02:dc:4d:15:a4:68:a6:2e:f7:0d:49:c1:dc:5d:
bf:49:22:9b:00:ab:e2:48:d5:39:0e:4a:a2:b7:e0:
d7:39:6b:a2:55:21:b7:f7:92:d4:4d:ef:17:cd:8a:
b0:f7:43:2a:d5:90:e8:22:a0:93:83:cc:d6:e9:51:
c9:c5:3d:b5:76:f5:77:9e:cc:bc:c7:75:f9:82:df:
0c:fe:b8:81:ea:bf:29:07:66:0f:b5:67:55:08:87:
8f:e3:66:f1:ec:34:57:ce:21:fb:7d:89:c3:49:70:
b9:35:60:67:d2:08:92:84:69:20:3e:3d:16:e3:e9:
cb:b7:69:09:f4:ea:6e:8a:77:87:9a:fc:26:51:3b:
66:1a:60:6b:5a:12:a4:eb:9b:b5:b1:a9:64:f7:ef:
53:47:f6:4b:8a:cb:da:ae:53:79:49:d6:bf:39:79:
55:8c:dd:13:c3:07:35:27:23:99:5c:8e:21:3c:fc:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:71:C7:55:9C:BA:5E:BB:42:FA:64:38:35:E4:D4:D0:19:0E:25:10
X509v3 Authority Key Identifier:
keyid:C6:BC:59:F8:F7:54:4F:1E:A5:BA:5C:18:B3:8E:25:73:51:7C:91:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrxZ-PdUTx6lulwYs44lc1F8kTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93a843-d9e6-445e-b2a0-3ca409b5311f/1/xrxZ-PdUTx6lulwYs44lc1F8kTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:c8:c5:66:b5:ee:b6:2c:d9:b4:65:12:0f:0a:81:57:dd:
b7:bd:28:28:00:86:40:c8:1e:2d:92:46:2b:7c:ab:19:13:1d:
1e:30:27:b0:b4:06:d5:f8:7c:2f:cd:f4:04:1a:ee:01:3d:6e:
08:9b:77:bb:50:e3:97:df:54:26:e7:58:27:a0:73:2e:9c:9d:
c1:7e:d9:1b:90:92:df:0f:8b:29:85:60:ae:b9:da:c2:c9:5e:
13:60:33:78:14:85:62:05:55:ac:3d:da:67:d0:7b:ff:f9:9b:
2b:f6:d0:2c:b4:11:c6:fa:ab:c9:65:a0:96:07:02:16:42:86:
03:d0:c5:8b:5d:7d:fb:59:4d:ca:e0:cb:84:1a:71:56:81:11:
27:a6:45:db:4c:8f:bd:ac:3c:ce:5a:74:8e:bf:ed:95:a2:a0:
33:9e:74:15:59:c2:ed:10:7d:d3:a1:a1:75:0d:de:97:24:dc:
3d:37:4c:2b:bf:21:41:6b:98:d5:b9:72:da:de:73:7e:1a:c0:
1d:f2:93:ff:af:2c:c3:4e:c1:7c:e0:19:77:60:90:5b:f3:0d:
f6:a6:f4:60:e2:ab:7b:b7:10:04:0f:e7:0f:f7:6a:b7:61:1b:
12:11:0a:5b:25:ed:8e:a1:7d:2a:ce:12:b4:a7:62:40:de:e5:
ea:a1:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:44 2025 by rpki-client