Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.mft (raw, json)
Hash identifier: S4LHSUb/p6zDbWzGNUMq3RA7VO+0YMs8di7qfp3BnHA=
Subject key identifier: 1D:0A:54:33:65:44:2A:7F:33:E4:79:90:32:D4:4F:03:DA:4F:73:38
Authority key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Certificate issuer: /CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Certificate serial: 0199FC586AE3F95FB9712713153FF270A71F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
Manifest number: 0C56
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: Zjp5spJdh84vGP_NYi-8y5LIKQU.roa (hash: rWVrxK253VGyHCI0i7PfPHvDu/qTwuTk4y8VuJ8okKA=)
2: xzic6Ca8jSaGm0UvPNk2kCxVL78.crl (hash: lu+cI3IlXHOr+pUlNegXomgOYzWrM8ipogj13kAz5T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6a:e3:f9:5f:b9:71:27:13:15:3f:f2:70:a7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=1d0a543365442a7f33e4799032d44f03da4f7338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:ec:28:7d:0f:45:77:10:48:27:c7:bc:f0:
2a:2e:a7:c9:ec:ee:59:9d:dc:7c:40:71:8a:ab:44:
a5:b4:eb:f2:f0:26:9f:5f:cb:95:94:0f:79:3b:cd:
a4:5e:b0:c1:91:e7:34:0d:19:92:71:20:cf:66:95:
d5:4e:b2:aa:ee:5b:07:af:6e:6a:0a:b7:b0:eb:fe:
5d:c7:a3:16:a9:aa:a2:ca:1b:b8:ac:22:02:85:62:
06:e5:77:41:92:82:c3:01:ea:f5:17:6a:57:f0:83:
29:bd:d2:f5:05:8b:f9:2d:30:e5:77:70:b1:94:e6:
a7:5c:ff:cd:66:14:1b:35:16:c8:4c:cd:c4:b5:4a:
9b:db:26:ff:6d:03:b6:d6:6b:3f:c6:90:9c:47:a6:
e0:be:e4:f5:e5:4c:8c:0d:f4:23:26:c2:23:22:d7:
14:38:20:9b:db:2d:f0:9d:ab:a2:05:f6:cf:19:cd:
10:91:09:95:81:57:9b:c0:65:74:6e:c9:2a:c1:a3:
ad:8e:ee:50:82:6a:76:29:97:44:29:9a:54:fc:9a:
9a:6a:45:61:1b:50:bc:fe:00:19:1c:3f:f6:45:42:
20:be:b1:56:b3:1d:14:4c:bb:45:14:09:82:0a:36:
8c:73:94:f7:71:fe:5c:98:a4:e4:f8:85:34:4c:3e:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0A:54:33:65:44:2A:7F:33:E4:79:90:32:D4:4F:03:DA:4F:73:38
X509v3 Authority Key Identifier:
keyid:C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:da:39:e6:7e:60:91:32:62:ff:74:71:c3:6f:41:45:64:5e:
b7:d5:4b:ed:43:71:da:04:cd:b8:95:38:e3:74:11:cb:84:95:
93:a4:20:6d:5d:2f:16:7a:e5:7f:72:b2:9a:53:a2:2f:26:65:
4f:6e:32:1e:e1:e2:a6:3e:fe:e9:9b:25:93:bb:c9:38:69:a2:
46:d9:29:9d:66:e0:ac:42:e5:d9:ec:c0:d7:e6:69:d3:bd:2e:
81:83:c2:b1:70:22:67:b4:a9:80:fc:a1:65:e1:53:d3:2a:ef:
fd:0f:e1:03:f9:4d:74:e3:4e:69:b6:e8:25:11:56:28:f6:9c:
5c:56:21:c5:da:14:22:b8:a4:f5:ac:30:49:0f:15:64:74:f5:
00:3d:88:39:73:fd:39:c9:c1:72:d2:8f:7c:84:60:e7:17:f4:
e4:a1:f1:87:33:48:79:bc:c4:5a:5b:04:26:25:49:ef:d7:e8:
64:64:55:ad:29:ab:59:e8:37:0b:c1:67:7c:06:a6:c3:f4:a4:
15:e7:84:ab:7a:9b:37:03:7f:a6:02:24:57:3f:c0:57:21:66:
d8:08:3d:c8:12:9b:11:22:f7:a9:0c:c3:c8:44:bb:43:24:72:
5e:d6:5e:02:6c:f5:de:51:98:69:32:63:ba:e1:97:84:3a:de:
fb:70:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:25 2025 by rpki-client