Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
File: xVa8y9yfLkutwKBX6gj3x0gYix8.mft (raw, json)
Hash identifier: K9F9PRG5bz4uQz1UGKk6dMx7eY2LsrxmLaT0qBmLlmw=
Subject key identifier: B6:01:AE:90:76:B6:E3:19:73:4D:60:FF:88:A1:FF:6F:07:62:3B:7C
Authority key identifier: C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
Certificate issuer: /CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Certificate serial: 0199FDD95ACCA679A1F0F127A02F6E3DCC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
Manifest number: 12A1
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: 1ylHoCjP82H2cRlJcKOWxCiIA9s.roa (hash: c062Fjrkbud1S9wrUUG9+yQLXJvgcVhnwrbsUatXzgg=)
2: 6-BNn1ahWtft0g-GuZtIXl4l5Qo.roa (hash: mnVCxlV7vM9sKmc4seeqVJ1+v+wCWGn9k8XntKlO+8E=)
3: xVa8y9yfLkutwKBX6gj3x0gYix8.crl (hash: hDdTegc30mDSHyVcxfPJx1fgmHjEUkBkpoaywO/qjIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5a:cc:a6:79:a1:f0:f1:27:a0:2f:6e:3d:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556bccbdc9f2e4badc0a057ea08f7c748188b1f
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=b601ae9076b6e319734d60ff88a1ff6f07623b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:ab:73:be:6c:80:5c:57:77:3b:1f:29:58:
03:40:eb:87:e0:9e:82:db:c3:eb:37:61:35:dd:a0:
09:7c:8d:a1:f4:31:dd:0a:4c:41:13:a2:4d:67:22:
59:db:85:93:c7:44:b1:2e:72:b8:67:ce:b2:e5:8e:
ac:6b:cb:34:ea:52:7d:de:fc:04:ff:71:21:2d:7d:
0f:82:f6:28:2d:e5:d0:42:a8:59:c3:e0:d0:93:c7:
84:d9:03:fe:7d:43:50:a7:ec:a5:78:08:b9:d4:53:
2e:ff:5f:78:1c:d8:b0:4d:9d:60:7a:f6:e0:dc:fd:
81:8d:0a:6b:3c:03:1e:8a:6e:d6:de:01:ae:bb:46:
f5:68:ab:30:49:93:6a:bd:fd:f3:49:ed:6b:5a:dd:
24:ca:15:bb:83:7b:dc:52:66:56:92:2e:45:c8:4f:
50:bc:c6:20:fc:31:e7:64:25:c2:a5:c7:0e:fd:0f:
23:ea:cb:c3:32:58:05:75:22:85:c8:f3:38:a5:42:
9d:67:d0:47:9f:be:c4:14:b6:10:3e:fd:d6:88:8f:
ef:1a:7f:90:f2:b8:c6:52:89:55:b0:53:b2:95:26:
83:86:da:99:f5:d7:b1:29:6a:ac:5a:1a:aa:24:79:
45:20:13:d8:34:b7:67:6a:10:72:23:b6:02:77:61:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:01:AE:90:76:B6:E3:19:73:4D:60:FF:88:A1:FF:6F:07:62:3B:7C
X509v3 Authority Key Identifier:
keyid:C5:56:BC:CB:DC:9F:2E:4B:AD:C0:A0:57:EA:08:F7:C7:48:18:8B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVa8y9yfLkutwKBX6gj3x0gYix8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7def13-c4cd-46a6-825f-42ea5514e722/1/xVa8y9yfLkutwKBX6gj3x0gYix8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f0:ff:62:57:62:77:64:7e:61:2e:25:5b:d9:fe:8a:b6:99:
15:e8:85:e6:da:28:26:0d:e3:c4:24:9c:e5:b9:33:7d:1d:39:
cf:da:29:4a:41:51:0c:a3:6a:7a:51:11:22:4e:3d:56:f0:e0:
e8:76:de:12:bf:fe:20:ee:f7:a3:ec:9e:86:f1:d3:02:0d:23:
cc:42:4f:07:d4:61:db:41:88:73:b9:f3:da:ff:a8:89:1f:21:
82:b5:50:97:d4:94:c9:06:3c:06:97:2d:cc:24:cb:73:40:7a:
8c:8a:d6:c2:87:61:e0:d4:72:dc:e1:f2:e9:69:ba:2b:bc:a1:
f0:b4:20:8b:36:9f:d1:28:36:e1:f8:8f:bf:a5:7c:5e:1d:ff:
76:cf:aa:61:80:65:dc:63:62:4f:ef:7a:1b:a2:2a:cd:d6:71:
69:56:00:d0:12:24:5f:57:ed:22:50:7f:b9:74:42:12:5d:3f:
3a:0f:71:2b:bd:7c:18:45:24:cc:5c:e9:12:73:13:9a:66:99:
91:c3:c3:42:9c:a6:a3:a1:d9:85:94:52:55:c0:d4:9c:11:34:
88:af:29:4d:26:df:29:5f:3a:08:61:02:28:41:d4:12:30:22:
4f:b2:55:76:45:8c:71:ca:25:be:73:91:a0:d1:38:48:ff:77:
37:62:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:31:24 2025 by rpki-client