Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json)
Hash identifier: xDqpMnRhIAsSqdXl2s8GIj5n1C4imR1mkCuuPs+aNi8=
Subject key identifier: 3E:0C:5B:A2:65:11:75:D8:A3:44:89:AA:B2:39:CF:A7:E8:25:79:7B
Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Certificate serial: 0199FBEAA17C29A5202BBCEB2F213BF76E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
Manifest number: 0A55
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=)
2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=)
3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: Wbns4mWbKhDLS796stm+o7+edoAyDR4c+YSDoqkjScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:7c:29:a5:20:2b:bc:eb:2f:21:3b:f7:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=3e0c5ba2651175d8a34489aab239cfa7e825797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:a1:8f:52:95:83:3c:2d:28:fc:4c:a6:79:
d2:47:f5:98:ed:94:c8:25:6c:d0:09:2d:5c:cd:b8:
cc:e6:85:84:ae:47:a9:9c:b5:df:82:ad:91:63:cc:
82:3e:81:58:01:ec:81:1e:4f:83:15:e1:6e:3b:7d:
c7:1c:8a:47:a2:39:0d:e6:b0:59:4a:c5:ac:3c:41:
8a:f3:a4:d3:5f:b9:10:f2:07:d0:0c:51:c7:f8:90:
be:08:c8:72:39:f5:a4:0e:86:ed:a6:eb:34:d9:d2:
eb:83:39:2b:51:fa:6b:9a:1a:91:05:40:fb:8b:80:
0a:5f:52:c1:8e:33:42:7f:9b:2b:f3:02:db:a4:2a:
2d:d3:01:19:db:72:60:28:82:e7:95:cc:05:a4:79:
ab:5f:eb:6a:94:4f:0e:45:f9:be:60:c0:9a:e6:81:
0e:6a:64:dc:c9:b6:ee:9d:cc:09:1b:de:b4:b9:37:
02:3c:03:db:b4:74:32:4d:63:8f:08:34:a8:4a:36:
69:26:cf:b0:93:4c:ed:19:d9:cb:70:ae:22:c9:14:
c4:da:97:63:30:b3:8e:22:3c:3d:66:c4:fb:5e:e3:
82:e2:26:3c:c0:b6:3e:85:84:47:dc:c0:43:34:25:
24:43:d9:b4:41:00:06:9f:91:b2:3c:6c:72:6f:ad:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:5B:A2:65:11:75:D8:A3:44:89:AA:B2:39:CF:A7:E8:25:79:7B
X509v3 Authority Key Identifier:
keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:74:d9:d3:4a:7a:d0:79:f9:63:22:46:3c:06:a7:3c:c0:f0:
13:ef:23:6d:17:0c:3f:d4:c3:53:22:95:80:93:20:b3:33:21:
71:19:78:21:9c:49:6a:43:16:ea:d1:a1:3f:5e:4d:de:61:29:
0a:08:0d:d1:d1:4b:63:d7:63:7f:f0:2c:a5:4c:26:d7:20:39:
dc:3f:73:e0:a7:fe:74:3d:de:d6:1f:b7:48:b8:9b:f0:d0:3f:
ac:02:16:ed:0f:09:b6:c4:2d:03:24:6d:0e:4b:d3:b4:66:5b:
84:4b:42:1c:18:a6:49:db:e5:65:2c:f9:ea:15:92:cb:0a:c5:
2b:d9:d3:b1:d6:75:a7:e0:4f:11:b5:fc:0c:a5:e3:a1:7c:ce:
20:4f:b8:97:cd:26:ec:62:5a:8a:a8:b0:3d:cc:57:c3:3f:03:
a0:9e:32:20:34:b1:61:73:da:38:c9:9f:10:dd:70:1e:ed:e0:
a5:63:77:d9:15:b8:ec:a6:10:28:9b:30:0f:1b:da:e2:34:85:
3b:b5:49:c1:98:e1:e7:8c:aa:92:10:7e:59:93:56:8a:a1:d2:
5f:ea:4b:5b:54:41:a3:2d:6c:3b:f4:09:2a:f0:db:10:a3:bf:
b4:e0:0e:04:64:48:b7:b5:27:e8:37:4a:41:0e:8e:5f:59:db:
00:db:ef:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:20 2025 by rpki-client