Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: J1FQgkdrhPX+wyKgF3dYoRfdQrw+BJc/E7Aj4vCAESw=
Subject key identifier: DA:2F:E1:09:84:2F:06:DC:32:58:B1:25:13:BC:5D:09:E7:2F:DD:A4
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 0199FD6ADAE4733B4A1F246BDE23C4E51578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 03FD
Signing time: Sun 19 Oct 2025 17:01:02 +0000
Manifest this update: Sun 19 Oct 2025 17:01:02 +0000
Manifest next update: Mon 20 Oct 2025 17:01:02 +0000
Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: QV7BdEcQhJOlUx63WBC4Dlhcj8mtfBtfz89OJEzO5A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:da:e4:73:3b:4a:1f:24:6b:de:23:c4:e5:15:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Oct 19 17:01:02 2025 GMT
Not After : Oct 20 17:01:02 2025 GMT
Subject: CN=da2fe109842f06dc3258b12513bc5d09e72fdda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:1a:95:0c:16:0e:98:97:d4:9f:97:6c:43:
3e:0f:1b:d4:ef:41:3a:cb:3e:03:26:ae:96:f0:39:
6d:22:f0:c4:8a:72:2f:9e:9a:d4:0d:9a:de:41:be:
f5:c0:5a:b8:26:1a:c6:ec:44:48:21:4c:91:f5:7a:
21:db:28:05:f6:a5:c7:d9:a7:99:b0:1a:4e:ca:66:
56:ef:8e:19:cf:be:32:31:1f:4d:5e:0e:ef:ed:96:
e9:22:e7:6f:8a:91:10:00:30:00:dc:fd:66:b3:5e:
74:5f:6d:de:44:a9:43:4c:7b:f6:71:13:b0:9c:f3:
0f:6b:3d:34:6c:f4:91:c5:14:7a:25:28:a8:d8:e0:
57:85:90:d9:e0:4f:39:94:8b:ae:5e:b0:19:1d:ba:
52:8b:9d:7b:43:da:02:86:a1:a7:9c:da:9f:79:c3:
a8:ea:4b:4e:bc:fc:51:b3:6a:ed:de:46:cb:f6:36:
71:17:f8:b4:80:95:7e:6b:a8:9a:d7:5e:04:ae:73:
79:c2:af:bc:ec:3a:06:d9:e0:e5:3e:f0:ee:b5:5e:
73:93:e9:95:97:73:94:20:27:09:43:82:29:14:2b:
9b:c4:09:2b:46:12:c7:89:7f:0f:2e:13:d5:66:43:
85:f1:98:5c:47:88:ee:f0:64:8e:e9:89:d5:f9:ed:
0a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:E1:09:84:2F:06:DC:32:58:B1:25:13:BC:5D:09:E7:2F:DD:A4
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:60:92:30:7a:b5:50:9c:d9:b2:a3:32:9f:34:63:3d:1d:52:
ea:e0:9b:4f:b8:12:69:1e:3f:5c:bb:34:fa:55:e0:b3:b5:76:
6e:d2:20:ac:80:e8:f0:e1:95:fb:5d:50:71:7b:4b:f0:54:62:
83:94:66:35:53:0f:a0:01:b7:1d:37:44:57:e7:6c:2f:3a:80:
76:02:e1:e3:35:66:aa:b3:5f:c3:16:53:b9:55:cd:a8:bf:b4:
0e:2c:60:d0:d4:f3:69:bc:9f:8d:6e:26:05:26:22:82:f1:75:
0a:90:83:f8:91:58:5b:10:e8:8d:dc:75:1a:9c:c3:f1:a7:96:
bb:3e:62:07:9c:07:71:96:15:9c:79:6f:9e:6d:e4:b6:d4:52:
60:f5:ad:d8:09:39:bd:55:2c:14:a8:d7:8f:89:2c:7e:27:0e:
d5:b6:aa:2c:99:8b:69:25:e7:e6:76:9e:a9:53:e2:3c:4f:2c:
dd:3d:8a:0a:aa:be:7f:4b:2b:c4:bb:c9:52:3e:82:41:bb:6e:
25:4d:9e:e6:3a:3d:35:b3:d4:74:54:71:bd:6d:96:57:cc:a1:
63:71:8f:d2:67:b0:ba:3b:41:e4:4f:a7:17:08:28:f5:6d:dc:
69:65:98:79:ce:f3:e5:7f:65:5e:2a:fe:a5:25:dc:30:85:bc:
b3:f4:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:37 2025 by rpki-client