Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: DegkZiEC5Dy7jH9iYINUCx6x9b0SBkESklXzg55mzV8=
Subject key identifier: B9:F1:F5:7F:B7:7F:2F:4E:07:C6:B9:E5:BA:AE:6C:2F:B9:AB:FC:2D
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 0199FE46F82B0D6B9299D4400AE300607687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 07DB
Signing time: Sun 19 Oct 2025 21:01:27 +0000
Manifest this update: Sun 19 Oct 2025 21:01:27 +0000
Manifest next update: Mon 20 Oct 2025 21:01:27 +0000
Files and hashes: 1: Aoo5pP4SL3hcDLyAxdYyQ03odMQ.roa (hash: gnOrhL51cXDCcbQfIiGI9Yhz0bbwGaTW30bKBViHRo0=)
2: EEaNcgsaMR5H4thhS3cGx36KL_o.roa (hash: vkGJSlE6cWd0O4qs1ZUPczrNu5F/ToV9OcI6aqWoEJI=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: pYp2Cqnq2t4iXuEvL0gprm6wmhB5vRB33nFci3jDSrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f8:2b:0d:6b:92:99:d4:40:0a:e3:00:60:76:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Oct 19 21:01:27 2025 GMT
Not After : Oct 20 21:01:27 2025 GMT
Subject: CN=b9f1f57fb77f2f4e07c6b9e5baae6c2fb9abfc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:dc:ea:c5:eb:88:c5:dd:6f:85:a6:46:b7:
37:61:0e:72:3c:6f:fb:a3:d9:1d:a6:d2:d3:0e:49:
33:0f:8b:bf:0e:fb:a9:d3:2c:96:4f:3a:34:87:d4:
80:62:7f:f4:40:0c:33:8a:ac:1a:42:54:af:5c:ca:
07:99:0e:4f:9d:63:a2:78:4f:c0:d1:9b:79:db:37:
f7:45:e5:f2:d6:51:d3:d1:fc:e3:0e:db:d1:82:8b:
63:e5:5a:17:4f:10:ae:68:cd:17:0f:8e:d3:64:11:
24:f0:91:41:4a:be:ec:83:70:cb:4a:e3:dc:4e:ca:
ec:22:d0:1a:b1:62:ad:c6:8f:10:b8:71:6c:e6:fe:
1a:d6:ea:cc:3b:e9:da:9e:6b:3f:83:b3:30:d6:1e:
72:6b:29:c0:05:e9:26:f4:be:f6:49:91:91:11:f9:
5d:2f:00:98:bc:ab:9f:c2:07:83:6d:77:7b:df:17:
bb:06:ca:54:dd:fd:c4:94:05:f1:70:e7:ee:ca:d7:
8a:fc:c8:e0:e6:7d:80:0a:b2:87:ae:e0:e6:ac:e2:
47:5f:91:00:3e:1f:d3:14:62:2d:23:d4:74:0f:1e:
54:7f:6b:97:ec:fe:c4:12:f7:d5:95:09:c3:c3:15:
19:07:d6:82:4f:b9:c0:18:33:8d:4a:fe:1d:10:51:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F1:F5:7F:B7:7F:2F:4E:07:C6:B9:E5:BA:AE:6C:2F:B9:AB:FC:2D
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b9:59:f7:30:42:e9:26:96:30:e2:75:38:14:51:b5:3d:c1:
8d:67:c5:92:87:73:ad:15:3f:79:76:85:99:4f:e3:a1:97:cf:
d6:c7:6c:3f:1c:77:09:ec:a3:33:e5:5f:c6:d1:82:ae:01:2a:
d6:65:0a:17:9f:66:2b:3f:b5:e3:82:e4:3b:d3:27:7b:f5:fc:
25:a9:da:ea:66:97:91:cf:ed:2c:ee:b1:ae:3b:01:a2:d8:41:
f2:ad:a6:44:b7:15:47:b5:1c:5b:bf:37:0c:94:48:9b:8d:e7:
e8:7b:3c:e9:80:e0:b9:0e:b5:dc:e3:49:31:18:8f:23:5a:46:
7d:a8:8a:c4:fe:bf:87:42:f3:7b:5c:1b:ad:d8:ba:fc:92:03:
6a:aa:b2:24:50:f1:c6:77:9f:fe:4d:9e:67:74:4d:ed:ed:c4:
87:b9:61:11:71:b0:77:7d:19:94:8f:f0:f3:e1:4a:1e:1a:fe:
31:85:ba:11:3c:d4:06:5b:5a:51:e6:0e:73:ea:9b:95:88:ee:
65:62:5f:39:05:40:5f:94:c6:dd:d4:35:45:e8:93:27:fa:06:
f8:11:52:07:97:e7:67:d2:9a:1a:7b:c2:3b:56:2a:7e:e5:68:
4d:8e:76:b7:30:03:ac:41:20:6f:ab:80:87:60:ff:61:96:11:
d2:0d:b1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:54 2025 by rpki-client